| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Reduce code size and make codebase more consistent (#2305) | 3 年前 | |
Remove unused connection validation options (#2783) | 11 个月前 | |
Reduce code size and make codebase more consistent (#2305) | 3 年前 | |
Revert "Unarchive disk images using diskutil on macOS 27+" (#2903) * Add more test cases for extracting licensed disk images * Revert "Unarchive disk images using diskutil on macOS 27+ (#2902)" This reverts commit 91ac4bbe817f7b6faac02bbcbc6e9d6f0082ed2c. | 1 个月前 | |
Add new version 3 binary delta archive format (#2051) This new format introduces: * A new container format which stores metadata in a way that is more efficient for compression, decompression, and size. Creation time can be 2x faster, apply time can be a few seconds faster, size savings can be 500 KB - couple of MB due to metadata alone. * An array of supported compression formats including lzma, bzip2, zlib and more. We now default to lzma which is as competitive as bzip2 (which we were using in version 2 format) in applying/creation times, but can save several MB on size. * Tracking of files from an old app being replicated in different locations in the new app. This can track unchanged files being renamed and can result in significant savings if the files are large. Version 2 format is still the default. To use version 3, pass --version=3 to BinaryDelta when creating a patch. We will switch the default to version 3 later. generate_appcast support is upcoming. | 4 年前 | |
Use crc32 hashes for binary delta version 4 (#2638) This is more efficient than SHA1. | 1 年前 | |
Remove old compile time availability guards (#2920) | 30 天前 | |
Add additional options to delta tools (#2052) | 4 年前 | |
Clean up code relating to interactive pkg installations (#2803) | 10 个月前 | |
Clean up code relating to interactive pkg installations (#2803) | 10 个月前 | |
Improve signing error message to developers (#2471) If we detect the wrong archive is being served (i.e, expected content length differs from archive length) we log this out to developers. If the app version in the archive (if available) also differs, we report this discrepancy as well. If the update archive looks the same but signing validation fails, we tell the developer the update may have not been signed correctly. I'm not changing the generic error that is reported to users about the update being improperly signed (that would involve propagating this information there and updating bunch of localizations). The extra info is more for the developer than it is for the user. Fixes #2468 | 2 年前 | |
Improve signing error message to developers (#2471) If we detect the wrong archive is being served (i.e, expected content length differs from archive length) we log this out to developers. If the app version in the archive (if available) also differs, we report this discrepancy as well. If the update archive looks the same but signing validation fails, we tell the developer the update may have not been signed correctly. I'm not changing the generic error that is reported to users about the update being improperly signed (that would involve propagating this information there and updating bunch of localizations). The extra info is more for the developer than it is for the user. Fixes #2468 | 2 年前 | |
Wait for a threshold amount of time before replying with status info data (#2230) This also reverts 6a69f26dcc58330f38a108d31efc81ea1372c8d5 and 4cb6719c6b3e9ddbb089840e7fb342d840208727 | 4 年前 | |
Wait for a threshold amount of time before replying with status info data (#2230) This also reverts 6a69f26dcc58330f38a108d31efc81ea1372c8d5 and 4cb6719c6b3e9ddbb089840e7fb342d840208727 | 4 年前 | |
Harden patching delta file against symbolic link at destination path (#2891) | 2 个月前 | |
Remove old compile time availability guards (#2920) | 30 天前 | |
Reduce code size and make codebase more consistent (#2305) | 3 年前 | |
Remove old compile time availability guards (#2920) | 30 天前 | |
Merge branch 'master' into ui-separation-and-xpc | 9 年前 | |
Remove old compile time availability guards (#2920) | 30 天前 | |
Fix minor temporary file leaks on binary delta failure (#2906) Also move temporaryDirectory() to unit tests only. | 1 个月前 | |
Fix minor temporary file leaks on binary delta failure (#2906) Also move temporaryDirectory() to unit tests only. | 1 个月前 | |
Add additional options to delta tools (#2052) | 4 年前 | |
Fix minor temporary file leaks on binary delta failure (#2906) Also move temporaryDirectory() to unit tests only. | 1 个月前 | |
Extract archives in a separate directory from the input archive (#2550) | 2 年前 | |
Move updating mdimporter modification date into applyBinaryDelta() (#2905) This code was in SUBinaryDeltaUnarchiver.m but it is now moving into the BinaryDelta tool / applyBinaryDelta(). | 1 个月前 | |
Remove unused connection validation options (#2783) | 11 个月前 | |
Guard against NULL CFRelease() on failure condition in fallback path (#2867) This was caught by analysis for XPC validation path. This is very unlikely to be hit practically. | 5 个月前 | |
Revert "Unarchive disk images using diskutil on macOS 27+" (#2903) * Add more test cases for extracting licensed disk images * Revert "Unarchive disk images using diskutil on macOS 27+ (#2902)" This reverts commit 91ac4bbe817f7b6faac02bbcbc6e9d6f0082ed2c. | 1 个月前 | |
Revert "Unarchive disk images using diskutil on macOS 27+" (#2903) * Add more test cases for extracting licensed disk images * Revert "Unarchive disk images using diskutil on macOS 27+ (#2902)" This reverts commit 91ac4bbe817f7b6faac02bbcbc6e9d6f0082ed2c. | 1 个月前 | |
Extract archives in a separate directory from the input archive (#2550) | 2 年前 | |
Add option to verify updates before extraction (#2667) Adds an opt-in option (SUVerifyUpdateBeforeExtraction) to enforce verifying updates before extracting them for stronger security. EdDSA signing is required to use this option. As fallback in case EdDSA keys are lost, disk image archives's code signatures are validated assuming it's Developer ID signed. Key rotation is still possible. Apple Archives (aar, yaa) now require using this option. | 1 年前 | |
Reduce code size and make codebase more consistent (#2305) | 3 年前 | |
Clean up code relating to interactive pkg installations (#2803) | 10 个月前 | |
Harden policy on what operations clients are allowed to take (#2763) * For the Installer and Downloader XPC Services, if these executables are code signed with an Apple issued Team ID, then the connecting client must also be code signed with a matching Team ID. * For the Downloader XPC Service, the request URL must be http/https * For Autoupdate, if stage 1 of installation hasn't been completed yet and this executable is code signed with an Apple issued Team ID, then the connecting client must also be code signed with a matching Team ID. As before, multiple simultaneous connections are still disallowed. * For Autoupdate, if it's not signed with Apple issued certificate, when installing package updates the bundle being updated must be itself and owned by root on disk (as one expects from a PKG installation) * The authorization prompt message in the Installer Service is more computed inside the service so the client can't pass a completely arbitrary message * Add extra nullable checking of parameters coming from XPC endpoints * Add more thread-safe synchronization for Autoupdate installer * Add logs for more failure points | 1 年前 | |
Remove interactive package installer type (#2767) Not all references are removed, just minimal changes are made for now. This installer type has been deprecated for a while and now it's time to act on removing it. It's not a well tested path and not a path we want to support going forward. | 1 年前 | |
Clean up code relating to interactive pkg installations (#2803) | 10 个月前 | |
Extract archives in a separate directory from the input archive (#2550) | 2 年前 | |
Bump minimum deployment target to 12.0 (#2883) To support building Sparkle in Xcode 27 (beta 1), we need to bump the deployment target. | 4 个月前 | |
Reduce code size and make codebase more consistent (#2305) | 3 年前 | |
Clean up code relating to interactive pkg installations (#2803) | 10 个月前 | |
Fix signature verifier class collisions in unit tests (#2843) | 8 个月前 | |
Fix Xcode 26.4 beta compiler warnings (#2850) | 7 个月前 | |
Change Autoupdate target from app to command line tool | 10 年前 | |
Revert "Unarchive disk images using diskutil on macOS 27+" (#2903) * Add more test cases for extracting licensed disk images * Revert "Unarchive disk images using diskutil on macOS 27+ (#2902)" This reverts commit 91ac4bbe817f7b6faac02bbcbc6e9d6f0082ed2c. | 1 个月前 | |
Revert "Unarchive disk images using diskutil on macOS 27+" (#2903) * Add more test cases for extracting licensed disk images * Revert "Unarchive disk images using diskutil on macOS 27+ (#2902)" This reverts commit 91ac4bbe817f7b6faac02bbcbc6e9d6f0082ed2c. | 1 个月前 | |
Reduce code size and make codebase more consistent (#2305) | 3 年前 | |
Reduce code size and make codebase more consistent (#2305) | 3 年前 | |
Add option to verify updates before extraction (#2667) Adds an opt-in option (SUVerifyUpdateBeforeExtraction) to enforce verifying updates before extracting them for stronger security. EdDSA signing is required to use this option. As fallback in case EdDSA keys are lost, disk image archives's code signatures are validated assuming it's Developer ID signed. Key rotation is still possible. Apple Archives (aar, yaa) now require using this option. | 1 年前 | |
Reduce code size and make codebase more consistent (#2305) | 3 年前 | |
Reduce code size and make codebase more consistent (#2305) | 3 年前 | |
Fix typos (#2537) | 2 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 3 年前 | ||
| 11 个月前 | ||
| 3 年前 | ||
| 1 个月前 | ||
| 4 年前 | ||
| 1 年前 | ||
| 30 天前 | ||
| 4 年前 | ||
| 10 个月前 | ||
| 10 个月前 | ||
| 2 年前 | ||
| 2 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 2 个月前 | ||
| 30 天前 | ||
| 3 年前 | ||
| 30 天前 | ||
| 9 年前 | ||
| 30 天前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 4 年前 | ||
| 1 个月前 | ||
| 2 年前 | ||
| 1 个月前 | ||
| 11 个月前 | ||
| 5 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 2 年前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 10 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 10 个月前 | ||
| 2 年前 | ||
| 4 个月前 | ||
| 3 年前 | ||
| 10 个月前 | ||
| 8 个月前 | ||
| 7 个月前 | ||
| 10 年前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 2 年前 |