4 ms·
No the file is not a driver. It's a file loaded by a driver, some sort of threat/virus definition file I think? And yes Windows drivers are signed. If it had b
by poizan42 2y ago
No the file is not a driver. It's a file loaded by a driver, some sort of threat/virus definition file I think?
And yes Windows drivers are signed. If it had been a driver it would just have failed to load. Nowadays they must be signed by Microsoft, see https://learn.microsoft.com/en-us/windows-hardware/drivers/dashboard/code-signing-reqs https://learn.microsoft.com/en-us/windows-hardware/drivers/d...
- MBCook 2y agoThat was my read. The kernel driver was signed. The file it loaded as input with garbage data had seemingly no verification on it at all, and it crashed the driver and therefore the kernel.
- usr1106 2y agoHmm, the driver must be signed (by Microsoft I assume). So they sign a driver which in turn loads unsigned files. That does not seem to be good security.