Dylan M. Taylor 208171b920 update: stage replacements exclusively and refuse oversized tar metadata (#563) ...

* update: stage replacements exclusively and refuse oversized tar metadata

- self_update: stage_copy creates the staged file beside the target with
  an unpredictable name (tempfile, O_EXCL) and writes bytes and mode
  through the handle, for both the AppImage and the tarball standalone
  replacement; a link at the old .<name>.update names is never followed.
- install::tree::unpack: check_metadata walks the tar headers first and
  refuses PAX or GNU long-name records over 1 MiB, which the tar crate
  buffers whole before the entry loop sees a size; both passes read at
  most MAX_TAR_BYTES of decompressed stream.

* address review: refuse size-truncated update archives, fixed staging prefix

2026-11-11 05:36:05 -05:00

..

app.rs

craft-update: the startup prompt shows the app's icon, accent colour and developer (#434)

2026-10-30 01:25:19 -04:00

desktop_entry.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

detect.rs

fix(update): drop the dirs crate and move to zip 9

2026-10-25 11:56:58 -04:00

dialog.rs

update: integration of the open fixes to craft-update (#763)

2026-11-11 00:07:01 -05:00

distro.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

folders.rs

craft-update: the version-choice file sits in a host folder Flatpaks can read

2026-10-30 21:55:00 +00:00

http.rs

Merge pull request #452 from ZIDAN44/fix/391-safe-release-link

2026-11-02 21:33:30 -05:00

install.rs

update: stage replacements exclusively and refuse oversized tar metadata (#563)

2026-11-11 05:36:05 -05:00

lib.rs

craft-update: the update dialogs take the app's translator

2026-11-02 10:55:49 +01:00

manifest.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

msi_context.rs

test: accept any well-formed account SID, not only S-1-5-

2026-10-31 11:56:25 +00:00

msi_copy.rs

fix(update): read an MSI's install context without starting PowerShell

2026-10-31 10:26:05 +00:00

msi_migrate.rs

craft-update: resolve the whole default folders, not just LOCALAPPDATA

2026-10-29 13:50:36 +00:00

packages.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

paths.rs

fix(update): drop the dirs crate and move to zip 9

2026-10-25 11:56:58 -04:00

pins.rs

craft-update: the version-choice file sits in a host folder Flatpaks can read

2026-10-30 21:55:00 +00:00

platform.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

portable.rs

Cover ZIP drive-prefix rejection and standalone update helper ownership (#335)

2026-10-25 23:41:12 -04:00

process.rs

craft-update: accept exactly one download link per asset (craft-launcher#764); keep the Linux self-update off other copies

2026-11-11 07:47:52 +01:00

protocol.rs

update: integration of the open fixes to craft-update (#763)

2026-11-11 00:07:01 -05:00

proxy.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

queue.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

release.rs

craft-update: accept exactly one download link per asset (craft-launcher#764); keep the Linux self-update off other copies

2026-11-11 07:47:52 +01:00

self_update.rs

update: stage replacements exclusively and refuse oversized tar metadata (#563)

2026-11-11 05:36:05 -05:00

source.rs

craft-update: accept exactly one download link per asset (craft-launcher#764); keep the Linux self-update off other copies

2026-11-11 07:47:52 +01:00

status.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

suite.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

time.rs

feat(update): add craft-update crate for release checking, install, and self-updating (#311)

2026-10-25 09:32:22 -04:00

translate.rs

craft-update: gate translated button labels with their egui callers (#542)

2026-11-04 09:29:06 +01:00

updater_pin_tests.rs

craft-update: tell the user what happened to an update

2026-11-07 17:31:45 -08:00

updater.rs

Merge #687's head into fix/update-messages

2026-11-08 13:02:48 -08:00

version.rs

craft-update: a build from source is never offered the release it already contains

2026-10-29 13:29:47 +00:00