Research: Delay-loaded DLLs for saner self-sandboxing

MaulingMonkey / firehazard

Unopinionated low level API bindings focused on soundness, safety, and stronger types over raw FFI.

Other

8 stars 0 forks source link

Research: Delay-loaded DLLs for saner self-sandboxing #28

Closed MaulingMonkey closed 1 year ago

MaulingMonkey commented 2 years ago

Use cases:

Have a single binary with both a UI component, and a low/untrusted launch token, without breaking user32.dll.
rustc 1.63.0 std init with lower token?

References:

Linker support for delay-loaded DLLs
Understand the delay load helper function
/DELAYLOAD (Delay Load Import)

MaulingMonkey commented 1 year ago

This is mostly a matter of using the right build.rs settings. This repository's build.rs contains an example.

Importing firehazard just for some lousy build.rs println!s seems a bit much / overkill. I could add a second crate for querying linker setting availability or something? But given the need for vaguely adjacent settings to be copy+pasted to live in .cargo/config.toml, that seems like overkill - examples should suffice, and I kinda have those already.