Files
insomnia/packages
Kyle 084b71e37d fix(inso): add SetDefaultDllDirectories, close cryptnet.dll sideload gap
Process Monitor confirmed cryptnet.dll (loaded internally by crypt32.dll's
own revocation-checking code, not by our own LoadLibrary calls) was
loaded from the local directory despite PreferSystem32Images being set —
a real, confirmed gap. SetDefaultDllDirectories(LOAD_LIBRARY_SEARCH_SYSTEM32)
removes the application directory from the process-wide default DLL
search path entirely, covering loads issued by other DLLs internally,
not just our own explicit calls. Also switch our own wintrust.dll/
crypt32.dll LoadLibrary calls to LoadLibraryExW with the same flag as
an explicit, call-scoped belt-and-suspenders on top of the process-wide
setting.
2026-07-10 14:42:33 -04:00
..