Squiblydoo / debloat

A GUI and CLI tool for removing bloat from executables
BSD 3-Clause "New" or "Revised" License
301 stars 25 forks source link

Certificately is incorrectly removed in some use cases. #38

Closed Squiblydoo closed 3 weeks ago

Squiblydoo commented 1 month ago

It was found that the code signing certificate could still be removed in use cases where the certificate is in the overlay. The cause of the issue appears to be that trimming the overlay does not fully account for the certificate and the method for deleting bytes in these use-cases is not consistent with the methods used in other use cases.

Relevant samples can be provided upon request.

Squiblydoo commented 3 weeks ago

This issue is now resolved in 1.5.6.4 and later. We chose to remove the certificate in the original flow, and then append the certificate provided that the option is chosen.