wix/src/burn/engine/core.cpp, branch v7.0.0-rc.2A mirror of https://github.com/wixtoolset/wix.git
https://git.lua4.win/wix/atom?h=v7.0.0-rc.22026-02-24T22:59:14+00:00Configurable-scope bundles for WixStdBA.2026-02-24T22:59:14+00:00Bob Arnsonbob@firegiant.com2026-02-21T00:18:23+00:00urn:sha1:92714e7949c41db4c17e6bd87c919ef4b3dc34f7
Fixes https://github.com/wixtoolset/issues/issues/9234
Fixes https://github.com/wixtoolset/issues/issues/9235
Lock upgrade bundles to original bundle's scope.2026-02-18T13:33:25+00:00Bob Arnsonbob@firegiant.com2026-02-18T00:41:03+00:00urn:sha1:96222b03ccc510027cb4d506fb424961cc351e03
Fixes https://github.com/wixtoolset/issues/issues/9236
Log detected package scope and lock bundle scope.2026-02-11T18:21:20+00:00Bob Arnsonbob@firegiant.com2026-02-11T01:33:03+00:00urn:sha1:de80ff1102a1b34e430bbc718fe65a42bab196cf
- Fixes https://github.com/wixtoolset/issues/issues/9232
- Fixes https://github.com/wixtoolset/issues/issues/9240
Support dual-purpose packages in Burn.2026-02-05T20:58:18+00:00Bob Arnsonbob@firegiant.com2026-02-05T01:47:04+00:00urn:sha1:c258b72508f1b25a56e5d3ee3df08650ba1cbe36
Fixes https://github.com/wixtoolset/issues/issues/8958
Many small code quality fixes2026-01-31T02:38:41+00:00Rob Menschingrob@firegiant.com2026-01-30T23:18:43+00:00urn:sha1:7c3c2cad3c5e95fac151debc89c2f5629b4c6b21Use CompareStringOrdinal() instead of CompareString() case-insensitive2025-11-03T22:49:39+00:00Rob Menschingrob@firegiant.com2025-11-02T03:24:25+00:00urn:sha1:4d626c294c4783d454e27ea4e5614037dac8576e
This commit moves to the modern CompareStringOrdinal() for all case-insensitve
uses of CompareString() with the invariant locale.
Partially resolves 6947
Harden Burn's BootstrapperApplication and elevated engine extraction2025-02-11T23:49:33+00:00Rob Menschingrob@firegiant.com2025-02-11T13:21:34+00:00urn:sha1:f2e9af96142439ebfdbc1e884335bb8874f8a427
Fixes 8914
Rename "bundle id" concept to "bundle code"2024-12-30T14:45:49+00:00Rob Menschingrob@firegiant.com2024-12-30T02:01:20+00:00urn:sha1:523c66a62a619e6aa9f30070173ea33edfb5e328
The "bundle id" always had more in common with the PackageCode from the Windows
Installer. With the introduction of an actual Id attribute on the Bundle
element, there is potential for confusion, so there is finally real motivation
to rename "bundle id" to "bundle code".
Protect elevated working folder from malicious data2024-03-22T18:57:27+00:00Rob Menschingrob@firegiant.com2024-03-21T06:51:53+00:00urn:sha1:fed3d69eb4da7fa2bafdd8f555ce5869c36925f7
When running elevated, Burn uses the Windows Temp folder as its working folder
to prevent normal processes from tampering with the files. Windows Temp does
allow non-elevated processes to write to the folder but they cannot see the
files there. Unfortunately, contrary to our belief, non-elevated processes
can read the files in Windows Temp by watching for directory changes. This
allows a malicious process to lie in wait, watching the Windows Temp folder
until a Burn process is launched elevated, then attack the working folder.
Mitigate that attack by protecting the working folder to only elevated users.
Managed custom actions also fall back to using the Windows Temp folder in
some cases and thus can be exposed in a similar fashion as an elevated Burn
process. Remove that possibility.
Move the BootstrapperApplication out of proc2024-03-07T02:03:38+00:00Rob Menschingrob@firegiant.com2024-01-12T02:26:20+00:00urn:sha1:0d3d54992104288e9ee0c834d0b96e8502fd2d42