wix/src/burn/engine/cache.h, branch bob/wixbug8674 A mirror of https://github.com/wixtoolset/wix.git https://git.lua4.win/wix/atom?h=bob%2Fwixbug8674 2024-03-22T18:57:27+00:00 Protect elevated working folder from malicious data 2024-03-22T18:57:27+00:00 Rob Mensching rob@firegiant.com 2024-03-21T06:51:53+00:00 urn:sha1:fed3d69eb4da7fa2bafdd8f555ce5869c36925f7 When running elevated, Burn uses the Windows Temp folder as its working folder to prevent normal processes from tampering with the files. Windows Temp does allow non-elevated processes to write to the folder but they cannot see the files there. Unfortunately, contrary to our belief, non-elevated processes can read the files in Windows Temp by watching for directory changes. This allows a malicious process to lie in wait, watching the Windows Temp folder until a Burn process is launched elevated, then attack the working folder. Mitigate that attack by protecting the working folder to only elevated users. Managed custom actions also fall back to using the Windows Temp folder in some cases and thus can be exposed in a similar fashion as an elevated Burn process. Remove that possibility. Move the BootstrapperApplication out of proc 2024-03-07T02:03:38+00:00 Rob Mensching rob@firegiant.com 2024-01-12T02:26:20+00:00 urn:sha1:0d3d54992104288e9ee0c834d0b96e8502fd2d42 Add ability to skip a local path candidate if it failed verification. 2022-08-03T20:57:24+00:00 Sean Hall r.sean.hall@gmail.com 2022-08-03T19:55:23+00:00 urn:sha1:124fef398a26bc8e139e889a2345602d2478590c Fixes 6818 Make PathGetSystemPath return an array of paths ordered by preference. 2022-06-08T00:44:36+00:00 Sean Hall r.sean.hall@gmail.com 2022-06-03T22:48:57+00:00 urn:sha1:648f370f7966b2738c1446601057d888bbd2c70f Always use user's temp directory as basis for acquisition folder. 2021-08-04T15:03:57+00:00 Sean Hall r.sean.hall@gmail.com 2021-08-03T23:09:36+00:00 urn:sha1:4d0798ec6311b48bfe6ee3cb4dd41379b4653528 Fixes #5830 Replace static cache internals with a struct. 2021-08-04T15:03:57+00:00 Sean Hall r.sean.hall@gmail.com 2021-08-03T20:41:18+00:00 urn:sha1:6d7a275edafb3ae0f3cff94d66503a82dafb71f7 Initialize them explicitly to make it clearer when that happens. Reset the package's cache folder only once. 2021-05-12T00:11:19+00:00 Sean Hall r.sean.hall@gmail.com 2021-05-02T21:48:40+00:00 urn:sha1:4e2054b3ee31b2b9fae3269d76e08817a36fb51f This behavior makes it work similar to the root package cache folder and avoids performance problems when there are many payloads in the package. #4774 Allow launching approved exes from the original package cache. 2021-05-12T00:11:19+00:00 Sean Hall r.sean.hall@gmail.com 2021-05-02T21:07:18+00:00 urn:sha1:5cb01b477d85920662112d63b5a44b75c03762a9 Move burn into burn 2021-04-29T23:36:06+00:00 Rob Mensching rob@firegiant.com 2021-04-23T00:06:54+00:00 urn:sha1:af10c45d7b3a44af0b461a557847fe03263dcc10