wix/src/burn, branch v4.0.5 A mirror of https://github.com/wixtoolset/wix.git https://git.lua4.win/wix/atom?h=v4.0.5 2024-03-22T21:25:14+00:00 Protect elevated working folder from malicious data 2024-03-22T21:25:14+00:00 Rob Mensching rob@firegiant.com 2024-03-21T06:51:53+00:00 urn:sha1:75a8c75d4e02ea219008dc5af7d03869291d61f7 When running elevated, Burn uses the Windows Temp folder as its working folder to prevent normal processes from tampering with the files. Windows Temp does allow non-elevated processes to write to the folder but they cannot see the files there. Unfortunately, contrary to our belief, non-elevated processes can read the files in Windows Temp by watching for directory changes. This allows a malicious process to lie in wait, watching the Windows Temp folder until a Burn process is launched elevated, then attack the working folder. Mitigate that attack by protecting the working folder to only elevated users. Managed custom actions also fall back to using the Windows Temp folder in some cases and thus can be exposed in a similar fashion as an elevated Burn process. Remove that possibility. Mitigate .local DLL redirection Windows bug. 2024-02-06T15:57:50+00:00 Bob Arnson bob@firegiant.com 2024-01-24T22:38:55+00:00 urn:sha1:fec38b6461d0551339139a2fe52403a61942adc0 Tame some wild pointers. 2023-06-03T08:24:39+00:00 Bob Arnson bob@firegiant.com 2023-05-02T01:09:14+00:00 urn:sha1:5520259549e1ca3380c8e03d5660e399ed12c48e Maybe Rust wouldn't be so bad... Fixes https://github.com/wixtoolset/issues/issues/7451. Add `InstallerInformationalVersion`. 2023-02-10T01:45:37+00:00 Bob Arnson bob@firegiant.com 2023-02-09T22:17:58+00:00 urn:sha1:cdb457d593cb09a88e73cdcd9538a66e62610cf1 Gets "full" version (with commit id). Fixes https://github.com/wixtoolset/issues/issues/7200. Don't uninstall superseded MSI packages. 2023-01-19T18:20:31+00:00 Sean Hall r.sean.hall@gmail.com 2023-01-16T05:03:42+00:00 urn:sha1:f0e19e4355c29aa90e2b761031d61904ba1d8ffd 7147 Improve test coverage for recent Burn changes. 2023-01-15T04:53:13+00:00 Sean Hall r.sean.hall@gmail.com 2023-01-15T04:05:32+00:00 urn:sha1:fb8903d9a185a020d54d2bb001f4331caf7c3825 7068, PR 318 Register the InstallDate in Burn 2022-12-22T23:12:23+00:00 Rob Mensching rob@firegiant.com 2022-12-22T07:06:05+00:00 urn:sha1:8aafcc72550d89cc43dfcb81012abe8576709660 Closes 7068 Get "real" Burn version for logging. 2022-12-22T03:42:53+00:00 Bob Arnson bob@firegiant.com 2022-12-22T02:41:03+00:00 urn:sha1:6bc32281a99bea30541f77dd0bf9e9658753afdc Fixes https://github.com/wixtoolset/issues/issues/7082. Use MSI transaction end result to detect whether reboot is needed 2022-12-13T03:50:39+00:00 Nir Bar nir.bar@panel-sw.co.il 2022-12-06T11:22:41+00:00 urn:sha1:50e24e9cf2084b6cb67b5d8fc509163061408bb6 Minimize calls into GitInfo by caching results during build_init 2022-11-13T15:27:49+00:00 Rob Mensching rob@firegiant.com 2022-11-11T07:35:31+00:00 urn:sha1:c8a832c931f6c34892e596a11c14e9181d5eee16