|
|
@@ -1721,8 +1721,8 @@ Instructs Setup to proceed to comparing time stamps (last write/modified time) i
|
|
|
<p>The precise effect of this flag depends on whether it is combined with the <tt>external</tt> flag:</p>
|
|
|
<ul>
|
|
|
<li>When used without the <tt>external</tt> flag, the compiler will verify the source file while it is being compressed/stored into the resulting installer. If the verification fails, compilation will abort.</li>
|
|
|
-<li><p>When used with the <tt>external</tt> flag, Setup will verify the source file during the installation process while it is being copied to the destination directory. Files are always created with temporary names (<tt>*.tmp</tt>) initially. If the verification fails, the temporary file will be deleted and an error message will be displayed (with Skip, Try Again, and Cancel options). If the verification succeeds, the temporary file will be renamed to the correct destination name.</p>
|
|
|
-<p>When a file entry with the <tt>external</tt> flag is skipped (i.e., not installed), the source file isn't copied anywhere, so no verification takes place.</p></li>
|
|
|
+<li><p>When used with the <tt>external</tt> flag, Setup will verify the source file during the installation process while it is being copied to the destination directory. Files are always created with temporary names (<tt>*.tmp</tt>) initially. If the verification fails, the temporary file will be deleted and a "The source file is corrupted" error message will be displayed to the user (with Skip, Try Again, and Cancel options) and a more detailed error is logged. If the verification succeeds, the temporary file will be renamed to the correct destination name.</p>
|
|
|
+<p>When a file entry with the <tt>external</tt> flag is skipped (i.e., not installed - for example because the <tt>ignoreversion</tt> flag wasn't used), the source file isn't copied anywhere, so no verification takes place.</p></li>
|
|
|
</ul>
|
|
|
<p>Since verification occurs while source files are being compressed/copied, and not in a separate pass, each file's contents are only read once. Thus, enabling verification has little performance impact; the only extra I/O comes from reading the tiny <tt>.issig</tt> files. This approach also ensures there is no Time-Of-Check to Time-Of-Use (TOCTOU) problem; each source file is kept open the entire time it is being compressed/copied and verified without allowing other processes write access.</p>
|
|
|
<p>This flag cannot be combined with the <tt>sign</tt> or <tt>signonce</tt> flags. Use <tt>signcheck</tt> instead.</p>
|
Martijn Laan