From c5eca58eadcac01b96b2c35467067eb8968e613c Mon Sep 17 00:00:00 2001 From: Martijn Laan <1092369+martijnlaan@users.noreply.github.com> Date: Wed, 11 Jun 2025 21:17:15 +0200 Subject: [PATCH] issigverify flag: HTML fix for real. --- ISHelp/isetup.xml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ISHelp/isetup.xml b/ISHelp/isetup.xml index 49f42665..9389981b 100644 --- a/ISHelp/isetup.xml +++ b/ISHelp/isetup.xml @@ -1766,9 +1766,9 @@ Instructs Setup to proceed to comparing time stamps (last write/modified time) i

The verification requires an .issig signature file to be present in the same directory as the source file, created using the Inno Setup Signature Tool. If flag download is set then the .issig signature file will be downloaded instead. See the DownloadISSigSource parameter description for more information..

The precise effect of this flag depends on whether it is combined with the external flag:

Since verification occurs while source files are being compressed/copied, and not in a separate pass, each file's contents are only read once. Thus, enabling verification has little performance impact; the only extra I/O comes from reading the tiny .issig files. Only archives and downloaded files are read twice.

The verification process is protected against the Time-Of-Check to Time-Of-Use (TOCTOU) problem.