Details
-
Bug
-
Status: Resolved
-
Normal
-
Resolution: Fixed
-
PUP 6.17.0
-
None
-
Night's Watch
-
2
-
NW - 2021-03-17
-
Needs Assessment
-
43253,44624,50334
-
3
-
Bug Fix
-
-
Needs Assessment
Description
When scanning for existing packages in Windows, Puppet reads uninstall listings in the "per-machine" and "current user" contexts, both 32 and 64 bit using the DisplayName or, more rarely, the QuietDisplayName keys. If these keys have an embedded Null, the package provider continues to read garbage data. It may attempt to decode these junk characters from UTF-16LE and fail.
An update was pushed out to fix this (PUP-10536), but a customer recently hit the bug again. This is a followup to that ticket.