Bug 1467731: Prevent WinVerifyTrust from hitting the network; r?aklotz draft
authorCarl Corcoran <ccorcoran@mozilla.com>
Fri, 08 Jun 2018 12:45:09 +0200
changeset 805788 cc17526127c3930f998c6a2226d88b869e2697b8
parent 805551 ea21bf3e665d10066b6dce39873de9b353a12e57
push id112754
push userbmo:ccorcoran@mozilla.com
push dateFri, 08 Jun 2018 12:44:44 +0000
reviewersaklotz
bugs1467731
milestone62.0a1
Bug 1467731: Prevent WinVerifyTrust from hitting the network; r?aklotz MozReview-Commit-ID: DSpHXsJkeoX
mozglue/build/Authenticode.cpp
--- a/mozglue/build/Authenticode.cpp
+++ b/mozglue/build/Authenticode.cpp
@@ -143,16 +143,17 @@ SignedBinary::VerifySignature(const wcha
   fileInfo.pcwszFilePath = aFilePath;
 
   WINTRUST_DATA trustData = {sizeof(trustData)};
   trustData.dwUIChoice = WTD_UI_NONE;
   trustData.fdwRevocationChecks = WTD_REVOKE_NONE;
   trustData.dwUnionChoice = WTD_CHOICE_FILE;
   trustData.pFile = &fileInfo;
   trustData.dwStateAction = WTD_STATEACTION_VERIFY;
+  trustData.dwProvFlags = WTD_CACHE_ONLY_URL_RETRIEVAL;
 
   const HWND hwnd = (HWND) INVALID_HANDLE_VALUE;
   GUID policyGUID = WINTRUST_ACTION_GENERIC_VERIFY_V2;
   LONG result = WinVerifyTrust(hwnd, &policyGUID, &trustData);
 
   trustData.dwStateAction = WTD_STATEACTION_CLOSE;
   WinVerifyTrust(hwnd, &policyGUID, &trustData);