[tbb-bugs] #23396 [Applications/Tor Browser]: Update the msvcr100.dll we ship in Tor Browser

[Tor Bug Tracker & Wiki]

#23396: Update the msvcr100.dll we ship in Tor Browser
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-security, TorBrowserTeam201709R  |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by boklm):

 Replying to [comment:5 gk]:
 > I've downloaded/extracted several `msvcr100.dll` files (the latest
 version I found was 10.0.40219.325) and get the following sha256sum:
 >
 > 8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18
 msvcr100.dll
 >
 > Anyone getting something else/getting the same?

 I downloaded the file from some random websites, and also got the same
 hash.

 However, I also downloaded "Microsoft Visual C++ 2010 SP1 Redistributable
 Package (x86)" from Microsoft website:
 https://www.microsoft.com/en-us/download/details.aspx?id=8328

 After installing it, I get version 10.0.40219.1 (instead of
 10.0.40219.325), with a different hash:
 60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa
 *Windows/SysWOW64/msvcr100.dll

 So I am wondering where version 10.0.40219.325 is coming from, and if
 there is some way to get it from Microsoft website.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23396#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online