NortheBridge/luminalshine 26.06.4

on GitHub

LuminalShine 26.06.4 (Gold)

A stability and security hardening release. It eliminates a class of shutdown/restart crashes and closes a batch of memory-safety and input-validation issues found in an internal security audit. Recommended for all users. (26.06.3 was skipped.)

General

• Major crash-resilience and memory-safety hardening of the streaming host — details under Windows 11 (stability) and Security Fixes (memory safety) below.

Windows 11

• Eliminated shutdown/restart heap-corruption crashes (STATUS_HEAP_CORRUPTION / 0xC0000374). Long-lived background threads — the system tray, the SudoVDA virtual-display watchdog, the update checker, and the paused-display cleanup / display-recovery monitors — are now reliably stopped and joined before the process exits, instead of being torn down mid-flight by the C runtime (which could double-free the heap and crash the host on exit or on a service restart).
• Safer fatal-error diagnostics: a teardown-safe crash handler now records the actual cause of any remaining fatal exception instead of masking it as a generic C-runtime fault.
• Update checks no longer hang shutdown: the GitHub update check now has connect/total network timeouts and aborts immediately when the host is shutting down.
• More graceful failure: the audio-capture and RTSP threads now contain unexpected errors and degrade instead of taking down the whole host.

Windows 11 Experimental Future Platforms

• The crash-resilience fixes above are most impactful on Windows 11 Insider Preview (Canary/Dev) builds, where the display-driver / virtual-display instability that drives these restart and teardown paths occurs far more often.

Security Fixes

All from an internal adversarial audit. These are memory-safety, input-validation, and denial-of-service hardening in a SYSTEM-privileged service; most require a paired/connected client or local access (no known remote-unauthenticated exploit).

• Use-after-free in credential storage (a dangling buffer was handed to the Windows Credential Manager) — fixed.
• Paired-client denial-of-service: an unvalidated client packetSize could trigger a divide-by-zero or an enormous allocation; it is now range-validated.
• Out-of-bounds reads in the streaming control path (malformed/short control packets, reference-frame-invalidation and input-data payloads) and on an undersized decoded stream key — now bounds-checked.
• Data races causing use-after-free / double-free in the WebRTC media thread and the Playnite IPC pipe — now properly synchronized.
• Double-CloseHandle race in the named-pipe IPC and a NULL-dereference in audio-device enumeration — fixed.
• Local stack-exhaustion DoS via unbounded Steam VDF parser recursion (behind the off-by-default Steam auto-sync) — now depth-limited.

Hotfixes

• Rolls up the shutdown/restart heap-corruption elimination (Windows 11) and the audit-driven memory-safety / DoS fixes (Security Fixes) above.

Automated release for 26.06.4.

What's Changed

Full Changelog: 26.06.2...26.06.4