WildBill

Thanks for the tip about blackwingcat's kernel update. I just pulled down v7 and it looks like I already added most of the new stuff in it, so it won't take much to upgrade to v7. Then I'll look at v8 and v10.

Wow! You've been really busy. It's great to see that interest is still strong I just posted an updated MS10-054 patch and updated the main page. I found some serious bugs in the original patch that was causing lockups and crashes. If you have it installed, I strongly urge installing the new one. My MS11-011 and MS11-020 patches are almost ready; I just want to add a little more to the MS11-011 first. I might have bitten off a little too much with them which is why they've been taking so long. They both go far beyond the original patch and are more of micro service packs. MS11-011 adds a ton of API routines to the kernel and MS11-020 adds a few more important ones. The result is that quite a few programs or drivers that only worked on XP might work now. With these installed, IDA Pro 6.1, Overlord, Free Orion, and my smart card driver work, at least. The last little bit I want to add is for the Avast antivirus sandbox -- I'd really like to have that available, and I need to add just two more API's to at least satisfy all the dependencies (devising a fully thread-safe implementation for PsCallImageNotifyRoutines, PsSetLoadImageNotifyRoutine, and PsRemoveLoadImageNotifyRoutine was a bit tricky). The patch also adds everything that's in blackwingcat's v5a kernel update, though my implementation goes a bit farther (it has proper implementations of EncodePointer and DecodePointer, for instance). It also adds complete support for the SafeProcessSearchMode and SafeDllSearchMode registry keys, such that behavior will be the same as on XP. I had tried to also put in support for KB968389, but that requires a lot of changes to several authentication DLL's to add support for channel binding. I've laid a lot of the groundwork for it and upgraded some of the necessary DLL's, but the required changes to kerberos.dll are such that I might just declare victory and release them in their present form. After installing my MS11-011 patch, it's critical to NOT install any of blackwingcat's kernel expansion patches because mine expands the internal process structure so that true-blue EncodePointer and DecodePointer can work. While installing his update afterward would probably still boot up afterward, it would break EncodePointer and DecodePointer, which are in my updated ntdll.dll.

Wow, you've been really busy. Sorry I haven't updated the master list -- would an admin mind doing it if I can't get to it? I've been trying to port MS11-020, and every time I think I have it I have to pull something else in from XP -- first it was srv.sys, then i found I needed matching security features from srvsvc.dll (from KB2345886), but those require CancelIPChangeNotify() which means upgrading iphlpapi.dll, and *that* means upgrading tcpip.sys to add support for the function (and then there's more stuff to add that srvsvc.dll needs). By the time I'm done this will wind up being a micro service pack.

Sure, I can put them in separate folders. I include those to help anyone else who wants to patch those files.

I'd rather first look at IE7, since hopefully it would be easier. Has anyone else looked at it?

Thanks for catching that. Just to be safe I made a 6a without the unnecessary DLL and updated the list.

I found the problem with comctl32.dll and posted a V6 of KB2479628 (based on the V5 one), and updated the download link. My patch to Imagelist_AddMasked wasn't correctly returning the success/failure result...

Great job! So that's what the catalog files are for...I had no idea that they would stop WU from nagging about updates. Did you also have to add them back to the .inf file?

I don't mind at all. Should I post it in my MediaFire patches folder and update the download link? In other news, I've ported MS11-019 and added it to the list.

I'm glad to see that you got it working with IE5. I never would have thought that possible. My MS11-032 patch is now up, in the usual place

The patch also updates browseui.dll, which is used by both Windows Explorer and Internet Explorer. What happens if you revert back to the old IE5 browseui after installing the patch? Really, though, because of all the files it updates it really does require the newer Explorer files. I don't see how it could work with IE5, which isn't secure anyway.

Thanks for checking those out. Every little bit of assistance helps. I've put together an MS11-033 update and tested it, and whenever MediaFire's upload engine gets fixed I'll post it. The last update to the MS Word converter was also usable as-is, and in this case only one routine changed -- it looks like they added a bunch of validation and limit-checking to it. In the meantime I'm taking a look at some of the other updates. The MS11-003 IE update is such a nightmare that I'm going to have to put it on hold for now. I've ported a small amount of the changes to 2k, but there's still a LONG way to go.

V4 of MS11-012 is now up, and hopefully this is the end of any glitches (I know, I'm jinxing it...). This upgrades quite a few more icons and has fixes applied to fontext.dll and plustab.dll. Also, changing Shell Icon BPP registry key shouldn't be necessary as I've transplanted the logic over from XP (XP doesn't change that key either).

Would it help if I posted another update that automatically set that registry key? I don't think I can trigger an icon cache refresh but I can at least set the registry key.

There might be one more version still, but I'm not sure when with Easter coming up. I'm seeing one last visual glitch but only in a specific case (only when in design mode in Delphi 6.0). I would say go ahead and translate it. Any changes I make will probably be small enough that you can just patch your translated version. With respect to the icons, you should be able to extract any new ones and put them in your version with ResHacker. That's what I use to replace them, at least.

It turns out there was a thread synchronization issue that could cause some icons to be washed out, so i just uploaded a V3 of MS11-012 (note to self: call GdiFlush before calling GetDIBits). This also updates a few more icons:

I really can't say until I analyze it. I'm presently working on a fix for a visual bug in the last MS11-012 patch, and then I really need to work on the MS11-011 IE patch.

I've posted a V2 of MS11-012 that's based on the newest-available explorer.exe from MS: see the main listing for an updated download link. Also, this has one more bonus: I've patched a handful of images in explorer.exe and shell32.dll (and hence also included a newer shell32.dll in the patch). The changes are very subtle, basically I've added some 24/32-bit versions of some existing images: The folder icons and the caution/info/error icons are 32-bit icons, and the others are 24-bit icons.

The last time I tried it, the update refused to install since the signature didn't match.

I prefer not to remove any hotfixes, but you're right that you can ignore MS10-071 since MS10-090 was a complete update and not an incremental one.

Someone else also pointed out that my explorer.exe wasn't based on 5.0.3900.6920, the newest one from MS. I'll be reissuing the patch based on that one soon.

The old images are still in browseui.dll, it's just that the code loads different ones when the screen depth is 32bpp. You can switch back to the originals by overwriting the new ones with Reshacker, though you'll have to use 24x24 images instead of 20x20 ones.

I've finally posted my MS11-012 patch. In addition to the security fixes, it includes the following features: - Adds support for GetLayeredWindowAttributes() - Adds 32-bit icon support to comctl32.dll - Patches Windows Explorer so 32-bit icons can appear on the system tray - Adds new Windows Explorer and Internet Explorer toolbar images to be used when the screen depth is 32bpp - Adds some support for the larger IMAGELISTDRAWPARAMS in XP and above (size = 0x44 bytes). The original 2k structure will still work, too. You'll no longer need Daedalus with this release, though you'll probably have to rebuild your icon cache with TweakUI once you shut Daedalus off. One caveat about the new toolbar images: if you replace them with your own, keep in mind that the images have to be "alpha-premultiplied". I wrote a small utility that can convert 32-bit TGA files to 32-bit BMP files and has an option to alpha-premultiply the colors. I've posted it here: TGA2BMP.exe Enjoy

The way things are going, I'm looking at a MS11-012 release this weekend. I'm not seeing any problems, but I want to give it a couple more days before I post it.

I don't think most of them are used, either. My impression is that the MS folks simply have a standard set that they put in every hotfix. The only strings I actually change are the service pack number and a few that say "XP" instead of "2000". I generally ignore all the others.