Jaroslav BenešandClaude Fable 5 dff14ec3e8 Enforce SHA256 verification on every binary install path ...

Three gaps allowed an unverified binary to reach a trusted location:

- The ffmpeg ZIP fallback logged a warning on checksum mismatch and
  installed anyway (the 7z path already aborted). Abort instead.
- The yt-dlp auto-update path downloaded and renamed the binary over
  the verified one with no checksum at all. Verify against the official
  SHA2-256SUMS like the first-install path, and use atomic os.replace.
- The yt-dlp first install streamed the download directly to the
  trusted path and only verified afterwards; a crash in between left an
  unverified executable to be run on next launch. Download to .part and
  os.replace only after verification.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-25 01:24:35 +02:00

..

__init__.py

Refactor core module imports and update paths

2026-01-25 14:07:03 +02:00

ytsage_deno.py

Stream Deno upgrade output and add GUI thread

2026-02-03 18:41:39 +02:00

ytsage_downloader.py

Scope cleanup routines to files created by the current download

2026-07-25 01:22:05 +02:00

ytsage_ffmpeg.py

Enforce SHA256 verification on every binary install path

2026-07-25 01:24:35 +02:00

ytsage_utils.py

Enforce SHA256 verification on every binary install path

2026-07-25 01:24:35 +02:00

ytsage_yt_dlp.py

Enforce SHA256 verification on every binary install path

2026-07-25 01:24:35 +02:00