PureBasic 6.04 LTS is out !

[Fred]

Hi there,

13-12-2023 - final version is out !

06-12-2023 - beta 2 is out, with an optional switch to enable DLL preloading protection as it's not working on XP.

Code: Select all

- Added /DLLPROTECTION flag in commandline and a switch in 'Compiler options' to enable DLL preloading protection

Here is a new bug fix version, mainly to remove possible DLL injection in Windows created executables (thanks to @Kukulkan for the sponsoring !). So all PureBasic programs by default will be protected from this, but if you load another DLL manually (with OpenLibrary()) or if you link to a third party lib (with Import/EndImport) you should check if it is still safe. It also includes quite some OS X fixes:

Bugfixes for this version:

• Windows: [Done] DLL hijacking on uxtheme.dll. Many PB programs affected? Fix?
• MacOS: [Done] PB 4.7b1.3 Drag And Drop doesn't recognize URLs
• MacOS: [Done] private drag.
• MacOS: [Done] PB v5.72 - Invalid Event Order with TAB key
• MacOS: [Done] PB 5.72 LTS - Mac Shift key + mouse wheeel canvas issue
• MacOS: [Done] 6.00 b8 SetGadgetItemColor don't work correct with the new ListIconGadget
• MacOS: [Done] 5.20b14 ExplorerTreeGadget() patterns not working
• MacOS: [Done] PB v5.22, v5.30B7] Mac Console Inkey
• MacOS: [Done] ExplorerTreeGadget() problems
• MacOS: [Done] 5.46LTS and 5.62 code crashes at CloseSerialPort()
• MacOS: [Done] Progressbargadget No vertical
• MacOS: [Done] Menu doesn't flash with AddKeyboardShortcut
• MacOS: [Done] Example DragDrop.pb doesn't work
• MacOS: [Done] PB 5.11 64bit ReadSerialPortData() not blocking
• MacOS: [Done] Module and Import
• MacOS: [Done] OSX Canvas Key Mapping Error
• MacOS: [Done] ShortcutGadget doesn't respond to arrow keys etc.
• MacOS: [Done] ShortcutGadget with Shift
• MacOS: [Done] Wrong font size with ImageVectorOutput()
• MacOS: [Done] 5.43 x86 - GetMeshData()
• MacOS: [Done] WebGadget() and the touchpad/mouse
• MacOS: [Done] Executable Commandline in Compiler Options not working
• MacOS: [Done] 5.31 Mac Scintilla affects cursor outside gadget
• MacOS: [Done] PB 5.42 (x64) crashes when closing PureBasic
• MacOS: [Done] IDE - crash while combo change in search dialog
• MacOS: [Done] Session history crash
• MacOS: [Done] ExaminePack() don't find all files
• MacOS: [Done] IDE: Can't move cursor or select text with mouse sometimes
• MacOS: [Done] (PB v5.xx) PB-Editor Crash
• MacOS: [Done] Big Sur : error when quitting Purebasic
• MacOS: [Done] Upper and Lower Case Error
• MacOS: [Done] Bug: '..NoCase'-problem with 'Umlauts' on Linux+Win+Mac
• MacOS: [Done] PB-LCase and PB-UCase not work on Mac
• MacOS: [Done] PureBasic and VoiceOver
• MacOS: [Done] CloseNetworkConnection for too many connections
• MacOS: [Done] UCase and LCase don't convert German Umlaut characters
• MacOS: [Done] 5.20b17 EventType() Constants of the PB_Event_SysTray
• MacOS: [Done] Float/double division by 0 causes invalid memory access
• MacOS: [Done] DisableWindow doesn't affect MenuBar or ToolBar
• MacOS: [Done] macOS Mojave Dark mode and Gadgets
• MacOS: [Done] PB v5.71B3 - Open History - IDE Crash
• MacOS: [Done] Session History freezes IDE
• MacOS: [Done] PB v5.71 LTS Session Histroy Crashed
• MacOS: [Done] Scrollareagadget with canvas does not scroll
• MacOS: [Done] SplitterGadget
• MacOS: [Done] PB IDE Graphic problem
• MacOS: [Done] canvas and #PB_Canvas_Cursor
• MacOS: [Done] 5.72 - IDE - Undo destroys the code
• IDE: [Done] MacOS - PB crashes on compile console app
• IDE: [Done] Set paramaters in IDE for a console application
• IDE: [Done] Crash debugging with executable command line
• IDE: [Done] IDE Editor pane disabled when hiding error log

This list was created automatically. All updated bug threads from the date of the last final version have been determined.

Have fun,

The Fantaisie Software Team.

[ChrisR]

Not even a break after 6.03 and 6.04 is already on road.
I thought the next version would be 6.10?
Thanks and thanks to Kukulkan for his sponsoring

[GeoTrail]

Awesome
Merry Xmas Fred and everyone else

[jacdelad]

Thanks Fred and team! Mac users should be happy too.

[GG]

Thanks Fred and Team and sponsoring users.

[marcoagpinto]

Heya,

Thanks to the team for a new release.

Is the IDE the faster one you were working on, Fred?

Thanks!

[User_Russian]

Error while initializing the application (0xc0000135)

Windows XP is not supported in this version?

add
This is because of the manifest in resources!
When I removed the manifest from the resources, the application worked on Windows XP.

[Little John]

Error while initializing the application (0xc0000135)

Windows XP is not supported in this version?

add
This is because of the manifest in resources!
When I removed the manifest from the resources, the application worked on Windows XP.

The manifest is probably important for protection against DLL injection.

Yes, XP is history since 9 years: https://learn.microsoft.com/en-us/lifec ... windows-xp . We try to keep the compatibilty for the produced executables, but we don't officially support it anymore. You need a more recent Windows to install it (or you can try copy the files from another Windows if you really want to use it on XP).

Thanks to Fred for PB 6.04!
Thanks to Kukulkan for sponsoring!

[User_Russian]

The manifest is probably important for protection against DLL injection.

What if my applications don’t need injection protection, but running on older operating systems is important?
This protection should be optional, not forced without the ability to disable it!

[Little John]

Please don't ignore the 2nd part of my previous post.
It's not surprising that newer programs don't run on older operating systems.
The world is evolving, and so are operating systems and PureBasic.
If you are running an OS from the museum, you can use a PB version from the PureBasic museum.

[Fred]

6.0X branch should be working on XP, so I will may be add a flag to enable the protection for now so it stays compatible. If done, this flag will be removed for 6.10 as it won't support XP anymore.

[User_Russian]

The manifest is probably important for protection against DLL injection.

I just checked and this manifest does not protect against dll injection using the function CreateRemoteThread.

Code: Select all

Procedure InjectDll(PID, DllName.s)
  Protected Result=#False, hProcess
  Protected *pDLLPath, *pLL, hThr, WR, ThrID
  
  hProcess=OpenProcess_(#PROCESS_CREATE_THREAD | #PROCESS_QUERY_INFORMATION|
                        #PROCESS_VM_OPERATION | #PROCESS_VM_WRITE|
                        #PROCESS_VM_READ, #False, PID)
  
  If hProcess
    *pDLLPath=VirtualAllocEx_(hProcess, 0, StringByteLength(DllName)+4, #MEM_COMMIT, #PAGE_READWRITE)
    If *pDLLPath
      *pLL=GetProcAddress_(GetModuleHandle_("Kernel32.dll"), "LoadLibraryW")
      WriteProcessMemory_(hProcess, *pDLLPath, DllName, StringByteLength(DllName)+SizeOf(Character), @WR)
      hThr=CreateRemoteThread_(hProcess, 0, 0, *pLL, *pDLLPath, 0, @ThrID)
      If hThr
        CloseHandle_(hThr)
        Result=#True
      EndIf
    EndIf
    
    CloseHandle_(hProcess)
  EndIf
    
  ProcedureReturn Result 
EndProcedure 

Therefore, I consider this manifest useless!
It should be optional and turn off in "Compiler Options".

[Fred]

You miss completely the point here, it's not about runtime DLL injection but when the executable is loading. The new manifest protect PB from this and it's fine.

[User_Russian]

This should be optional and the checkbox should be in "Compiler Options".

[Fred]

It won't be optional, you don't want your program to be explicitly vulnerable.