Bug 1415250 Part 1: Block prntm64.dll and guard32.dll in sandboxed child processes. r=jimm
authorBob Owen <bobowencode@gmail.com>
Wed, 08 Nov 2017 08:06:14 +0000
changeset 443972 da41769f7553cec255fbb34352020d90328aeadf
parent 443971 71662dbd44ed3f88412168ee0adb044dcee03966
child 443973 c376bb034ca65153a99e06ddd5dd9e69885823a1
push id1618
push userCallek@gmail.com
push dateThu, 11 Jan 2018 17:45:48 +0000
treeherdermozilla-release@882ca853e05a [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersjimm
bugs1415250
milestone58.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1415250 Part 1: Block prntm64.dll and guard32.dll in sandboxed child processes. r=jimm
security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp
--- a/security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp
+++ b/security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp
@@ -30,26 +30,30 @@
 #include "WinUtils.h"
 
 // This list of DLLs have been found to cause instability in sandboxed child
 // processes and so they will be unloaded if they attempt to load.
 const std::vector<std::wstring> kDllsToUnload = {
   // Symantec Corporation (bug 1400637)
   L"ffm64.dll",
   L"ffm.dll",
+  L"prntm64.dll",
 
   // HitmanPro - SurfRight now part of Sophos (bug 1400637)
   L"hmpalert.dll",
 
   // Avast Antivirus (bug 1400637)
   L"snxhk64.dll",
   L"snxhk.dll",
 
   // Webroot SecureAnywhere (bug 1400637)
   L"wrusr.dll",
+
+  // Comodo Internet Security (bug 1400637)
+  L"guard32.dll",
 };
 
 namespace mozilla
 {
 
 sandbox::BrokerServices *SandboxBroker::sBrokerService = nullptr;
 
 // This is set to true in Initialize when our exe file name has a drive type of