aboutsummaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* WiX Toolset v5.0.0-rc.2v5.0.0-rc.2Rob Mensching2024-03-221-1/+1
|
* Protect elevated working folder from malicious dataRob Mensching2024-03-226-33/+43
| | | | | | | | | | | | | | | When running elevated, Burn uses the Windows Temp folder as its working folder to prevent normal processes from tampering with the files. Windows Temp does allow non-elevated processes to write to the folder but they cannot see the files there. Unfortunately, contrary to our belief, non-elevated processes can read the files in Windows Temp by watching for directory changes. This allows a malicious process to lie in wait, watching the Windows Temp folder until a Burn process is launched elevated, then attack the working folder. Mitigate that attack by protecting the working folder to only elevated users. Managed custom actions also fall back to using the Windows Temp folder in some cases and thus can be exposed in a similar fashion as an elevated Burn process. Remove that possibility.
* Don't follow junctions when recursing directories.Rob Mensching2024-03-222-3/+13
| | | | | | | | | | | | | | When deleting directories recursively, an elevated custom action following junctions in a user-writable location could recurse into any directory, including some that you might not want to be deleted. Therefore, avoid recursing into directories that are actually junctions (aka "reparse points"). This applies to: - The RemoveFoldersEx custom action (which doesn't actually do deletions but would instruct elevated MSI to delete on your behalf). - DTF's custom action runner.
* Simplify BootstrapperApplication header filesRob Mensching2024-03-2134-154/+75
| | | | | Take this breaking change opportunity to simplify the header files used by BA devs.
* Fix "typo."Bob Arnson2024-03-201-1/+1
|
* Fix IniFile action values.Bob Arnson2024-03-203-5/+26
| | | | Fixes https://github.com/wixtoolset/issues/issues/8059.
* Fix Profile column definition.Bob Arnson2024-03-185-7/+20
| | | | | | It's a formatted field but was too short. Fixes https://github.com/wixtoolset/issues/issues/8043.
* Use WixBA in an upgrade.Bob Arnson2024-03-185-2/+79
|
* Clean up Burn a bit.Bob Arnson2024-03-146-3502/+1
|
* Handle directories a bit better for `Files`.Bob Arnson2024-03-1414-15/+43
| | | | Fixes https://github.com/wixtoolset/issues/issues/8040.
* Fix localization collation.Bob Arnson2024-03-126-1/+63
| | | | Fixes https://github.com/wixtoolset/issues/issues/8036.
* Start WiX Toolset v5-rc.2Rob Mensching2024-03-101-1/+1
|
* WiX Toolset v5.0.0-rc.1v5.0.0-rc.1Rob Mensching2024-03-081-1/+1
|
* Ensure virtual symbols are included when overridden but not referencedRob Mensching2024-03-0813-156/+322
|
* Add tests demonstrating linker error.Bob Arnson2024-03-072-18/+50
|
* Rename "bundle extension" to "bootstrapper extension" for more consistencyRob Mensching2024-03-07119-1087/+1082
| | | | Also renames WixToolet.BextUtil nupkg to WixToolset.BootstrapperExtensionApi.
* Move wixstdba functions to Bal.wixext buildRob Mensching2024-03-0740-57/+397
|
* Better .nupkg namesRob Mensching2024-03-07324-607/+534
|
* WIP - BA header simplificationRob Mensching2024-03-0623-67/+50
|
* Move the BootstrapperApplication out of procRob Mensching2024-03-06419-12381/+24330
|
* Do not follow junctions when recursively deleting directoriesRob Mensching2024-03-061-4/+4
| | | | | | This will prevent elevated processes from accidentally following a junction from a user-writable directory to a per-machine directory and erroneously deleting the per-machine contents.
* Mitigate .local DLL redirection Windows bug.Bob Arnson2024-03-062-0/+27
|
* Normalize signing command-lineRob Mensching2024-03-061-9/+8
|
* WiX v5 uses `wixext5` NuGet package subdirectory.Bob Arnson2024-03-066-9/+58
| | | | Fixes wixtoolset/issues#7709.
* More virtual/override symbols.Bob Arnson2024-03-0312-19/+19
| | | | And *Sequence/Show works thusly, even with somewhat funky ids.
* Add detail when failing to extract containers.Bob Arnson2024-02-282-4/+4
|
* Decompile null Message column in Error table.Bob Arnson2024-02-273-1/+2
|
* Cleaning up a typo and a missed commit.Bob Arnson2024-02-272-1/+6
|
* Use camelCase attribute values.Bob Arnson2024-02-276-80/+98
|
* Add `Files` file harvesting.Bob Arnson2024-02-2640-9/+1146
| | | | | | | | | | | Implements https://github.com/wixtoolset/issues/issues/7857. Like [naked files](https://github.com/wixtoolset/issues/issues/7696), `Files` elements can appear where `Component` elements do in WiX v4. The optimizer enumerates files and directories, generating single-file components as it goes. MSBuild-like wildcards (including `**`) are supported. `Excludes` child elements lets you exclude files that would otherwise be captured by wildcards.
* Support loc strings for Directory/@ShortName.Bob Arnson2024-02-174-1/+10
| | | | Fixes https://github.com/wixtoolset/issues/issues/7935.
* Allow MsiProperty/@Value to be an empty string.Bob Arnson2024-02-175-2/+13
| | | | Fixes https://github.com/wixtoolset/issues/issues/7798.
* Test/sample for default major upgrade message.Bob Arnson2024-02-163-0/+29
|
* Switch to `virtual` access modifiers...Bob Arnson2024-02-1611-74/+79
| | | | | | ...from `Overridable="yes"`. Fixes https://github.com/wixtoolset/issues/issues/7981 for WiX v5.
* Improve error when virtual action symbols collide.Bob Arnson2024-02-053-6/+25
|
* Fix crash when CloseApplications_X64 closes Electron appAndrzej Wojtas2024-01-221-1/+1
|
* Fixes wixtoolset/issues#5220: Automatically add logging flag for any burn ↵Nir Bar2024-01-206-1/+102
| | | | ExePackage, BundlePackage, and related bundles
* Clean up TouchFile.Bob Arnson2024-01-192-6/+6
|
* Correctly prefix the functions exposed from burnpipe.hRob Mensching2024-01-1110-115/+115
|
* Update Burn to use pipeutil for low-level pipe operationsRob Mensching2024-01-118-328/+86
|
* Add pipeutil to dutilRob Mensching2024-01-1112-7/+570
| | | | Plus a couple small clean-ups in a couple of dutil files.
* Rename inter-Burn communication related pipe fileRob Mensching2024-01-115-4/+4
| | | | | | | When BootstrapperApplications move out of proc there will be another set of pipes in Burn that behave differently from the inter-Burn communication pipes that exist now. So renaming the existing pipe related files now to better reflect that it is related to Burn talking to Burn when elevated or embedded.
* Support naked files.Bob Arnson2024-01-0827-120/+751
| | | | | | | | | | | | | | | | Implements https://github.com/wixtoolset/issues/issues/7696. `File` elements can appear where `Component` elements do in WiX v4. The compiler generates an appropriate per-file component. Naked files under `Directory`, `DirectoryRef`, `Fragment`, `StandardDirectory`, or `Package` elements are included in a package via the [default-feature feature](https://github.com/wixtoolset/issues/issues/7581). Naked files appearing under `ComponentGroup`, `Feature`, `FeatureRef`, and `FeatureGroup` generate the component and the reference to the parent element. Components and naked Files default to being installed to INSTALLFOLDER (including a default INSTALLFOLDER if one isn't otherwise authored).
* Remove warning for `Wix` bundle variable prefix.Bob Arnson2024-01-018-97/+50
| | | | | | It's a bit overzealous. Fixes https://github.com/wixtoolset/issues/issues/7579.
* Use `/DEPENDENTLOADFLAG` to tell the loader...Bob Arnson2023-12-311-0/+1
| | | | | | | | | ...to load DLLs from System32 only. (Belt and suspenders to current approaches.) See https://devblogs.microsoft.com/oldnewthing/20230328-00/?p=107978. Fixes https://github.com/wixtoolset/issues/issues/7319.
* Remove bundle container signing support.Bob Arnson2023-12-312-29/+2
| | | | | | | It was never implemented and ass-u-mes containers are cabs, which hopefully won't be the case forever. Fixes https://github.com/wixtoolset/issues/issues/7490.
* Rename IWindowsInstallerDecompileContext...Bob Arnson2023-12-316-19/+11
| | | | | | | ...TreatProductAsModule to KeepModularizationIds to better describe what it does. Fixes https://github.com/wixtoolset/issues/issues/7607.
* Add a warning that VBScript is deprecated.Bob Arnson2023-12-304-0/+66
|
* Add default major upgrade.Bob Arnson2023-12-309-5/+164
| | | | | | | | Add Package/@UpgradeStrategy to allow `none` to suppress major upgrade. Implements https://github.com/wixtoolset/issues/issues/7605. Requires https://github.com/wixtoolset/wix/pull/435.
* Provide a default INSTALLFOLDER.Bob Arnson2023-12-306-40/+157
| | | | | | | If INSTALLFOLDER is referenced and not defined, define one with reasonable default values. Implements WIP https://github.com/wixtoolset/issues/issues/7588.
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-16 01:36:50 +0000