wix/src/burn/engine/cache.cpp, branch bob/wixbug8674 A mirror of https://github.com/wixtoolset/wix.git https://git.lua4.win/wix/atom?h=bob%2Fwixbug8674 2024-03-22T18:57:27+00:00 Protect elevated working folder from malicious data 2024-03-22T18:57:27+00:00 Rob Mensching rob@firegiant.com 2024-03-21T06:51:53+00:00 urn:sha1:fed3d69eb4da7fa2bafdd8f555ce5869c36925f7 When running elevated, Burn uses the Windows Temp folder as its working folder to prevent normal processes from tampering with the files. Windows Temp does allow non-elevated processes to write to the folder but they cannot see the files there. Unfortunately, contrary to our belief, non-elevated processes can read the files in Windows Temp by watching for directory changes. This allows a malicious process to lie in wait, watching the Windows Temp folder until a Burn process is launched elevated, then attack the working folder. Mitigate that attack by protecting the working folder to only elevated users. Managed custom actions also fall back to using the Windows Temp folder in some cases and thus can be exposed in a similar fashion as an elevated Burn process. Remove that possibility. Move the BootstrapperApplication out of proc 2024-03-07T02:03:38+00:00 Rob Mensching rob@firegiant.com 2024-01-12T02:26:20+00:00 urn:sha1:0d3d54992104288e9ee0c834d0b96e8502fd2d42 Ignore cache bundle failure if it already exists in the package cache. 2022-09-15T19:14:04+00:00 Sean Hall r.sean.hall@gmail.com 2022-09-15T17:17:47+00:00 urn:sha1:a470bbc209dff298dbf86a29393d6a2a8b768dc8 Fixes 6848 Skip logging errors in some places when they are due to missing files or registry keys or values. 2022-08-09T14:57:02+00:00 Sean Hall r.sean.hall@gmail.com 2022-08-08T23:02:15+00:00 urn:sha1:240b663ad5fc94ed6d19c966b5c9105a176ecf40 Related to 6696 Add ability to skip a local path candidate if it failed verification. 2022-08-03T20:57:24+00:00 Sean Hall r.sean.hall@gmail.com 2022-08-03T19:55:23+00:00 urn:sha1:124fef398a26bc8e139e889a2345602d2478590c Fixes 6818 Add longPathAware to Burn manifest to support long paths. 2022-06-27T16:14:21+00:00 Sean Hall r.sean.hall@gmail.com 2022-06-24T17:28:27+00:00 urn:sha1:eb53852d7ae6838e54525eb57df1d8ce8a722f9b Fixes 3455 Make sure base paths are fully qualified in Burn. 2022-06-08T00:44:36+00:00 Sean Hall r.sean.hall@gmail.com 2022-06-03T22:50:50+00:00 urn:sha1:68ec803fc7f48bb0e0463dc45f6ce40e1f07dbf5 Update Burn algorithm for picking elevated temp path to use SystemTemp. 2022-06-08T00:44:36+00:00 Sean Hall r.sean.hall@gmail.com 2022-06-03T22:50:22+00:00 urn:sha1:8810aa8908ed7887616d86dd5fb821fcfa92f444 Make PathGetSystemPath return an array of paths ordered by preference. 2022-06-08T00:44:36+00:00 Sean Hall r.sean.hall@gmail.com 2022-06-03T22:48:57+00:00 urn:sha1:648f370f7966b2738c1446601057d888bbd2c70f Replace PathCompare with PathCompareCanonicalized. 2022-06-08T00:44:36+00:00 Sean Hall r.sean.hall@gmail.com 2022-06-03T22:47:54+00:00 urn:sha1:b652e93a460b4b822a01382e5992f96f1d805ffe