[Bug 38895] Multiple applications fail to load or crash due to incorrect security cookie randomization by loader (IrfanView WebP plugin, Word Viewer 2007)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=38895

Erich E. Hoover <erich.e.hoover at wine-staging.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #51832|0                           |1
        is obsolete|                            |

--- Comment #11 from Erich E. Hoover <erich.e.hoover at wine-staging.com> ---
Created attachment 51833
  --> https://bugs.winehq.org/attachment.cgi?id=51833
ntdll: Only set the security cookie if it has not already been set (2).

(In reply to Anastasius Focht from comment #10)
> ...
> The default cookie values 0x00002B992DDFA232 (64-bit OS), 0xBB40E64E (32-bit
> OS), 0xBB40 (16-bit on 32-bit OS) are pretty much well known, no secret at
> all.

Excellent, that's exactly what I needed to know.  I've attached an updated
patch that contains this knowledge.  Based on the crash I got for "wordview"
with 0xBB40 when I filled the entire 32-bits I'd say that you're not supposed
to use more bits than the default cookie value has ;)

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.