Not allowing hard links on payloads to ensure it isn't modified after…

… verification. We don't mind hard links on containers because the extracted files will not be suspectible to modifications
nirbar · Oct 30, 2024 · 7db24f4 · 7db24f4
1 parent 0cf3bdf
commit 7db24f4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/burn/engine/apply.cpp b/src/burn/engine/apply.cpp
@@ -1637,7 +1637,7 @@ static HRESULT AcquireContainerOrPayload(
     DWORD64 qwFileSize = 0;
     BOOL fMinimumFileSize = FALSE;
     BOOL fEqual = FALSE;
-    BOOL fAllowHardLink = !*pfRetry;
+    BOOL fAllowHardLink = pContainer && !*pfRetry; // Not allowing hard links on payloads to ensure it isn't modified after verification. We don't mind hard links on containers because the extracted files will not be suspectible to modifications
 
     if (pContainer)
     {