![]() Once it's validated, the "Launch" button will be enabled. It bugged me that Cream Soda started validating files right away even if I wanted to pick a different manifest. You get to click the "Validate" button to have more control. It doesn't start downloading and validating files right away. Cream Soda is based on Tequila with minor changes, and they're both in Visual Basic, which only works in Windows. " This launcher is completely new code in C++ with the Qt framework, which makes it easy to port to Mac and Linux. It also won't allow relative paths with "." in them, which means to go up a level. Sweet Tea solves this problem by simply not allowing manifests to have absolute paths in them. That means, with an absolute path to a system file or important documents, you could delete or overwrite those files. I've found that these zero sized files tell Cream Soda and Tequila to DELETE a file instead of download the file. This means a bad manifest could put files anywhere on someone's computer, and overwrite any file.Īnother big issue is that files in a manifest can have a size of zero. An absolute path is different from a relative path, because it is the full path to a file from the drive letter (C:) to the file name. Bad enough that anyone in control of a manifest could add malicious code to it and potentially nuke your computer.Īccording to Senpai:" Tequila and Cream Soda allow manifests to have absolute paths in them. They identified some serious vulnerabilities in Tequila and Cream Soda (a fork of Tequila). One of CoXG's coders (Senpai) has just released a new launcher (for a good reason). Hello, everyone, Titanica here with some Important news.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |