A Technical follow-up to the security rollout from Microsoft and how to change your own program to not be affected

After realising in Microsoft’s hotfix regarding the ANI security update that they won’t be pushing out that hotfix I decided to update CallerID to load the htmlhelp subsystem at the end of dll initialization, thus avoiding this problem altogether. For anyone using Borland Compilers goto the Advanced Linker Tab and click the ellipses on the Dlls to delay load. Add the name hhctrl.ocx to the list (most likely already empty). Recompile your program and voila. How do you know it fixed it? Before doing this change open your application using depends:

http://www.dependencywalker.com/

And see if hhctrl.ocx is at the top of the list. Recompile your program and refresh or reopen it with depends and now the ocx is loaded at the end.

Hope this helps.


One Response to A Technical follow-up to the security rollout from Microsoft and how to change your own program to not be affected

  1. To fix this issue in older Borland/Codegear compilers simply remove the imported library that uses html help then re-add it to the project and recompile. That fixed it for me in an old C++ Builder 3 project.