﻿id	summary	reporter	owner	description	type	status	component	version	resolution	keywords	cc	guest	host
17977	VirtualBox cannot start VMs on 32-bit x86 builds of the upcoming October 2018 Update of Windows  => fixed in svn	Jon K		"The October 2018 Update has added a new pointer-sized field to the end of IMAGE_LOAD_CONFIG_DIRECTORY32 & IMAGE_LOAD_CONFIG_DIRECTORY64 structures and for some DLLs, this field is set to point to an opaque blob.  Such DLLs are being rejected by VirtualBox (see excerpt below from VBoxHardening.log).

Is there a way to update the validation in VirtualBox to accept this new field being nonzero?  The 32-bit structure has increased from 160 to 164 bytes.  The 64-bit structure has increased from 256 to 264 bytes.

Additionally, is it possible to make the validation work with future changes to these data structures?  Windows has expanded these in the past and may do so again in the future.

VBoxHardening.log excerpt:
{{{
f50.274c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
f50.274c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
f50.274c: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
f50.274c: Error (rc=0):
f50.274c: supR3HardenedScreenImage/Imports: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Windows\System32\msvcrt.dll: Grown load config (160 to 164 bytes) includes non-zero bytes: ec ef 12 10
f50.274c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
f50.274c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000801:<flags> [calling]
f50.274c: supR3HardenedDllNotificationCallback: load   772a0000 LB 0x000c0000 C:\Windows\System32\msvcrt.dll [fFlags=0x0]
f50.274c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
f50.274c: Error (rc=0):
f50.274c: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=1 \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
f50.274c: Fatal error:
f50.274c: supR3HardenedDllNotificationCallback: supR3HardenedScreenImage failed on 'C:\Windows\System32\msvcrt.dll' / '\??\C:\Windows\System32\msvcrt.dll': 0xc000019
}}}
"	defect	closed	other	VirtualBox 5.2.18	fixed			all	Windows
