[Bug 50230] Signtool from Windows 10 SDK with Windows 7+ native dll overrides need security enhanced string functions exported from ntdll.dll (strcpy_s, strcat_s ...)

WineHQ Bugzilla wine-bugs at winehq.org
Tue Dec 1 23:53:09 CST 2020


https://bugs.winehq.org/show_bug.cgi?id=50230

Zebediah Figura <z.figura12 at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |z.figura12 at gmail.com

--- Comment #5 from Zebediah Figura <z.figura12 at gmail.com> ---
(In reply to Adam Michalik from comment #4)
> > affecting several apps/games which it isn't.
> 
> It is not *known* to affect several apps, but given that str*_s are quite
> general general function, I think it's safe to assume that signtool is not a
> literally unique one that's using them.
> 

They are in general, and if it were msvcrt, it'd be a different story, but most
applications have no reason to jump through hoops to use undocumented functions
from ntdll, especially for CRT functions like this.

In any case the more salient point is that native components, especially for
core and non-redistributable libraries, are not really interesting to us; we'd
rather fix builtin components instead. And of course any such builtin
implementation would almost certainly not use strcpy_s() from ntdll.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.



More information about the wine-bugs mailing list