Skip to content

12.0.5.11

Choose a tag to compare

@github-actions github-actions released this 16 May 23:14
· 420 commits to main since this release

12.0.5.11

Fixed

  • fix: remove MapCanvasScrollControllerMixin method replacements — direct writes to the mixin table tainted every frame using it, causing SetPropagateMouseClicks to fail in the secure pin-acquisition path (secureexecuterange → AcquirePin → OnAcquired → UpdateMousePropagation)
  • fix: skip nameplate health/cast bar skinning entirely — Base.SetBackdrop writes onto restricted nameplate bar frames, tainting them; that taint propagated into CompactUnitFrame_UpdateHealPrediction causing GetMinMaxValues() to return "secret number value" errors
  • fix: guard nameplate units in CompactUnitFrame_UpdateHealthColor hook — calling SetStatusBarColor on nameplate bars tainted the execution context and caused GetMinMaxValues() in UpdateHealPrediction to return "secret number value" errors
  • fix: remove GameTooltip_AddWidgetSet global wrapper — replacing the global with an addon-owned function tainted execution before RegisterForWidgetSet, causing GetUnscaledFrameRect → GetScaledRect to return secret values in widget layout
  • fix: remove UIWidgetContainerMixin.CreateWidget global hooksecurefunc — callbacks fired inside CreateWidget propagated taint into the synchronous UpdateWidgetLayout → DefaultWidgetLayout → GetScaledRect call chain for tooltip widget containers

Detailed Changes