gitlab.flawfinder.LoadLibraryEx-1

137
Download Count*
License

Use a flag like LOAD_LIBRARY_SEARCH_SYSTEM32 or LOAD_LIBRARY_SEARCH_APPLICATION_DIR to search only desired folders.

Run Locally

Run in CI

Defintion

rules:
  - id: flawfinder.LoadLibraryEx-1
    languages:
      - c
    message: >
      Use a flag like LOAD_LIBRARY_SEARCH_SYSTEM32 or
      LOAD_LIBRARY_SEARCH_APPLICATION_DIR to search

      only desired folders.
    metadata:
      cwe: "CWE-20: Ensure that the full path to the library is specified, or current
        directory may be used (CWE-829, CWE-20)"
      primary_identifier: flawfinder.LoadLibraryEx-1
      secondary_identifiers:
        - name: Flawfinder - LoadLibraryEx
          type: flawfinder_func_name
          value: LoadLibraryEx
      license: MIT
    pattern: LoadLibraryEx(...)
    severity: WARNING