wix/src/dtf, branch bob/Fixes.240629A mirror of https://github.com/wixtoolset/wix.git
https://git.lua4.win/wix/atom?h=bob%2FFixes.2406292024-07-12T17:52:19+00:00Move DTF back to .NET 2.0 as it is still supported2024-07-12T17:52:19+00:00Rob Menschingrob@firegiant.com2024-07-12T08:57:23+00:00urn:sha1:55bfbccc3514efa552726ff3563fe5846de34ef0
Fixes 8134
Ensure elevated SFXCA uses Windows Installer cache and unelevated uses Temp folder2024-04-05T16:46:43+00:00Rob Menschingrob@firegiant.com2024-04-04T22:24:34+00:00urn:sha1:681cf4a9eb6be7e4092c6e5b690773fbd8469e63
Fixes 8078
Protect elevated working folder from malicious data2024-03-22T18:57:27+00:00Rob Menschingrob@firegiant.com2024-03-21T06:51:53+00:00urn:sha1:fed3d69eb4da7fa2bafdd8f555ce5869c36925f7
When running elevated, Burn uses the Windows Temp folder as its working folder
to prevent normal processes from tampering with the files. Windows Temp does
allow non-elevated processes to write to the folder but they cannot see the
files there. Unfortunately, contrary to our belief, non-elevated processes
can read the files in Windows Temp by watching for directory changes. This
allows a malicious process to lie in wait, watching the Windows Temp folder
until a Burn process is launched elevated, then attack the working folder.
Mitigate that attack by protecting the working folder to only elevated users.
Managed custom actions also fall back to using the Windows Temp folder in
some cases and thus can be exposed in a similar fashion as an elevated Burn
process. Remove that possibility.
Don't follow junctions when recursing directories.2024-03-22T18:55:43+00:00Rob Menschingrob@firegiant.com2024-03-22T18:55:43+00:00urn:sha1:e84b6768772c01e44dd55fb583cf78388ec7e48a
When deleting directories recursively, an elevated custom action
following junctions in a user-writable location could recurse into
any directory, including some that you might not want to be deleted.
Therefore, avoid recursing into directories that are actually
junctions (aka "reparse points").
This applies to:
- The RemoveFoldersEx custom action (which doesn't actually do deletions
but would instruct elevated MSI to delete on your behalf).
- DTF's custom action runner.
Make the minimum supported .NET Framework v4.6.22023-12-19T19:46:11+00:00Rob Menschingrob@firegiant.com2023-12-19T03:44:47+00:00urn:sha1:f02ef4acf9649badaa3ab78d2499ca5014fa2234Pretty up build output2023-12-16T22:32:21+00:00Rob Menschingrob@firegiant.com2023-12-06T19:53:44+00:00urn:sha1:1bdcbeb08dfdcbec0929db19569e0eaa13de9c0eFix for wrong column index values in WixToolset.Dtf.WindowsInstaller.Linq.Entities.RemoveFile_2023-03-26T08:21:54+00:00Narcis Dumitrescunarcis.dumitrescu@selfpay.ro2023-03-25T23:50:31+00:00urn:sha1:a8fc7ce5540891e7b5d30f2e4f0adcda12762ad3Fix key table names in colum definitions.2022-12-21T23:16:45+00:00Bob Arnsonbob@firegiant.com2022-12-21T22:00:32+00:00urn:sha1:5b57b401ce25da930d66f1b5ef2cb8fac0ce1958
- Also fix typo.
- Make WiX source file parseable.
Minimize calls into GitInfo by caching results during build_init2022-11-13T15:27:49+00:00Rob Menschingrob@firegiant.com2022-11-11T07:35:31+00:00urn:sha1:c8a832c931f6c34892e596a11c14e9181d5eee16Pack CA assembly only after it exists2022-10-31T17:57:14+00:00Rob Menschingrob@firegiant.com2022-10-25T18:29:34+00:00urn:sha1:00a024e8595784e485115543f6045a0c5ea11ebc
Trying to pack the CA assembly before it is built reports erroneous
or redundant error messages so don't do that.
Fixes 6968