Changeset 51826 in vbox for trunk/src

Timestamp:

Jul 2, 2014 10:56:54 PM (11 years ago)

Author:

vboxsync

Message:

Fixed the first timestamp hack.

File:

• trunk/src/VBox/HostDrivers/Support/win/SUPHardenedVerifyImage-win.cpp (modified) (3 diffs)

trunk/src/VBox/HostDrivers/Support/win/SUPHardenedVerifyImage-win.cpp

@@ -151 +151 @@
 
 #ifdef IN_RING3
-/** Timestamp hack working around issues with old DLLs that we ship. */
+/** Timestamp hack working around issues with old DLLs that we ship.
+ * See supHardenedWinVerifyImageByHandle() for details.  */
 static uint64_t             g_uBuildTimestampHack = 0;
 #endif
@@ -866 +867 @@
             if (RT_SUCCESS(rc))
             {
-#ifdef IN_RING3
-                if ((fFlags & SUPHNTVI_F_REQUIRE_BUILD_CERT) && pNtViRdr->uTimestamp < g_uBuildTimestampHack)
+#ifdef IN_RING3 /* Hack alert! (see above) */
+                if (   (fFlags & SUPHNTVI_F_REQUIRE_KERNEL_CODE_SIGNING)
+                    && (fFlags & SUPHNTVI_F_REQUIRE_SIGNATURE_ENFORCEMENT)
+                    && pNtViRdr->uTimestamp < g_uBuildTimestampHack)
                     pNtViRdr->uTimestamp = g_uBuildTimestampHack;
 #endif
@@ -873 +876 @@
                 rc = RTLdrVerifySignature(hLdrMod, supHardNtViCallback, pNtViRdr, pErrInfo);
 
-#ifdef IN_RING3
+#ifdef IN_RING3 /* Hack alert! (see above) */
                 if ((fFlags & SUPHNTVI_F_REQUIRE_BUILD_CERT) && g_uBuildTimestampHack == 0 && RT_SUCCESS(rc))
                     g_uBuildTimestampHack = pNtViRdr->uTimestamp;
 #endif
-
 
                 /*