Public/VeraCrypt
1
0 Fork 0
mirror of https://github.com/veracrypt/VeraCrypt.git synced 2026-10-06 00:56:35 -05:00
Code Activity

Merge commit from fork

Browse Source 
Restrict caller-supplied object-manager and disk paths used by metadata IOCTLs to the forms required by VeraCrypt. Also force symlink access checks, remove the unused legacy geometry handler, authorize real-drive probing before name resolution, and gate cache wiping on successful emergency key clearing.

Security advisory: https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-9mgv-w2fw-3m78/
This commit is contained in:
Mounir IDRASSI authored and GitHub committed 2026-07-14 23:59:45 +09:00
1 parent 301496c7e2
commit ca35405421
2 files changed
+148 -27
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/Common/Apidrvr.h
+2 -3
View File
@@ -85,8 +85,7 @@
// TODO: need IOCTL_DISK_GET_PARTITION_INFO_EX to support GPT
#define TC_IOCTL_GET_DRIVE_PARTITION_INFO TC_IOCTL (14)
// result IOCTL_DISK_GET_DRIVE_GEOMETRY
// IN OUT - DISK_GEOMETRY_STRUCT
// Legacy IOCTL number retained for compatibility, the driver handler has been removed.
#define TC_IOCTL_GET_DRIVE_GEOMETRY TC_IOCTL (15)
// result IOCTL_DISK_GET_LENGTH_INFO
@@ -254,7 +253,7 @@ typedef struct
WCHAR deviceName[TC_MAX_PATH];
DISK_GEOMETRY diskGeometry;
}
DISK_GEOMETRY_STRUCT;
DISK_GEOMETRY_STRUCT; // unused legacy structure, retained for compatibility.
typedef struct
{