Set default dependent load flags to Mozc executables for Windows - Githubissues

google / mozc

Mozc - a Japanese Input Method Editor designed for multi-platform

Other

2.4k stars 348 forks source link

Set default dependent load flags to Mozc executables for Windows #836

Closed yukawa closed 11 months ago

yukawa commented 11 months ago

Description

Windows 10 ver. 1607 and later support /DEPENDENTLOADFLAG link option, which makes so-called DLL planting attack much harder.

Let's see if we can enable it in Mozc executables for Windows.

See also the following article.

How can I try to escape the disease-ridden hot-tubs known as the TEMP and Downloads directories? - The Old New Thing

Steps to reproduce

Steps to reproduce the behavior:

Build Mozc for Windows
dumpbin /LOADCONFIG .\out_win\ReleaseDynamic_x64\mozc_server.exe | findstr /c:"Dependent Load Flag"
dumpbin /LOADCONFIG .\out_win\Release_x64\mozc_tip64.dll | findstr /c:"Dependent Load Flag"

Expected behavior

At the step 2, 0A00 Dependent Load Flag is shown, where 0A00 corresponds LOAD_LIBRARY_SEARCH_SYSTEM32 | LOAD_LIBRARY_SEARCH_APPLICATION_DIR
At the step 3, 0800 Dependent Load Flag is shown, where 0800 corresponds LOAD_LIBRARY_SEARCH_SYSTEM32.

Version or commit-id

51e0d20285de63d2f0f5007d01c7bf63c0a8dfae

Environment

OS: Windows 11 22H2