Bugs item #1967418, was opened at 2008-05-19 15:56
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=642714&aid=1967418&group_id=105970

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: dtf
Group: v3.0
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Christopher Painter (chrpai)
Assigned to: Jason Ginchereau (jasongin)
Summary: Missing Files and Public Key Mismatches

Initial Comment:

3.0.4116.0/ 


wix3.msi and wix3-binaries.zip   

SDK\MakeSfxCA.exe missing
Assemblies PublicKey ce35f76fcda82bad AssemblyVersion 3.0.0.0

wix3-sources.zip
src\DTF\Libraries\Compression\Compression.cd is missing
src\DTF\Libraries\Compression.Cab\Errors.Resources.resources is missing
src\DTF\Libraries\WindowsInstaller\Errors.Resources.Resources is missing
src\DTF\Libraries\WindowsInstaller\WindowsInstaller.cd is missing

wix3-sources libraries build with PublicKey 36e4ce08b8ecfb17


If I build the MakeSfxCA manually and try to make a sample project using SDK 
DLL's from WiX3.msi I get a custom action build error:

Error   1       System.IO.FileLoadException: Could not load file or assembly 
'Microsoft.Deployment.Resources, Version=3.0.0.0, Culture=neutral, 
PublicKeyToken=36e4ce08b8ecfb17' or one of its dependencies. The located 
assembly's manifest definition does not match the assembly reference. 
(Exception from HRESULT: 0x80131040)     
C:\data\Sandbox-CommonInstaller\CustomActions\EXEC      CustomActions


If I build the DLL's manually ( slightly problematic because of missing files ) 
I can make the error go away.

Aside Concern: If I drop the DLL's into the GAC the problem also goes away.  If 
someone was to make a rogue version of the DLL's and deploy them to a users 
GAC, couldn't this inject a man in the middle attack on the custom action 
hosting model?

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=642714&aid=1967418&group_id=105970

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft 
Defy all challenges. Microsoft(R) Visual Studio 2008. 
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
WiX-devs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wix-devs

Reply via email to