Awesome Privacy

Recent Commits

• Patriccollu (30 Sept 25)

  Update Corsican translation on 2025-09 (#1609)

• Mounir IDRASSI (26 Sept 25)

  Documentation: fix wrong name for pbkdf2.html causing issues under Linux.

• Mr-Update (25 Sept 25)

  Update Language.de.xml (#1608)

• nkh0472 (23 Sept 25)

  Update Language.zh-cn.xml (#1607)

• Mounir IDRASSI (21 Sept 25)

  Increment version to 1.26.17 is packaging files.

• Mounir IDRASSI (21 Sept 25)

  Update translations

• Mounir IDRASSI (21 Sept 25)

  Increment version to 1.26.27. Update Release notes, Windows driver, bootloader

• Matthaiks (21 Sept 25)

  Update Polish translation (#1606)

• Mounir IDRASSI (20 Sept 25)

  Windows: Add setting/CLI switch to enable IME during Secure Desktop. Fix Preferences tabs handling. Now it is possible to enable IME during Secure Desktop using a setting in Preferences or using /enableIME switch. This helps solve issues with some IME that causes VeraCrypt to freeze when selecting keyfile while VeraCrypt secure desktop is active. See: https://sourceforge.net/p/veracrypt/discussion/general/thread/1e8b9aeacd

• Mounir IDRASSI (16 Sept 25)

  Windows driver: enhance IRP completion by avoiding inline ones and using CriticalWorkQueue for faster completion dispatch This change adds more robustness in low memory case and avoid freezes. It also protects cancel handling with cancel spin lock

• Mounir IDRASSI (15 Sept 25)

  Windows driver: add safe MapIrpDataBuffer function to prevent rare BSOD when irp->MdlAddress is NULL Introduce MapIrpDataBuffer to handle Direct/Buffered/Neither I/O, probing & locking pages and allocating a temp MDL when needed. Replace blind MmGetSystemAddressForMdlSafe usage. clean up TempUserMdl in OnItemCompleted to avoid crashes when MdlAddress is NULL. Issue reported at https://sourceforge.net/p/veracrypt/discussion/technical/thread/e43bde8d86/

• Mounir IDRASSI (15 Sept 25)

  Windows driver: revert to single completion thread until proper implementation is in place

• Mounir IDRASSI (13 Sept 25)

  Windows: correct processor group affinity handling and off-by-one mapping - Replace dynamic GetProcAddress usage with direct SetThreadGroupAffinity call since we run under Windows 10 minimum - Compute affinity mask based on actual active processor count - Fix off-by-one when assigning threads to processor groups (use > instead of >=), preventing premature group advance - Improves correctness on multi-group (>=64 CPU) systems

• Mounir IDRASSI (13 Sept 25)

  Windows driver: fix VERIFY/TRIM offset & validation, label handling, CPU group affinity, and cleanup - Use local volumeOffset, correct IOCTL_DISK_VERIFY & TRIM range translation/validation - Enforce DataSetRangesLength alignment & per-range sanity checks - Add missing returns after PsTerminateSystemThread - Remove obsolete PsDereferenceImpersonationToken dynamic lookup - Correct wide string size usage & zero label info buffer - Fix DEBUG_TRACE macro check and GetCpuGroup off-by-one. proper affinity mask - Minor safety/clarity cleanups

• Mounir IDRASSI (13 Sept 25)

  Windows driver: add defensive checks to TCCloseVolume implementation

• Mounir IDRASSI (13 Sept 25)

  Windows: remove wrong static declaration of functions in Ntvol.h

• Mounir IDRASSI (13 Sept 25)

  Windows driver: revert IRP completion overhaul changes until more tests are conducted

• Mounir IDRASSI (08 Sept 25)

  Windows driver: simplify TCSleep to use KeDelayExecutionThread Replace timer-based TCSleep (which allocated a KTIMER and waited on it) with an implementation that calls KeDelayExecutionThread. This removes dynamic allocation and kernel timer usage to simplify the code and reduce resource overhead. Adds an IRQL <= APC_LEVEL assertion and documents the requirement. This is safe because TCSleep is always called from code that runs at PASSIVE_LEVEL

• Mounir IDRASSI (08 Sept 25)

  Windows driver fix: Decrement IoThreadPendingRequestCount on allocation failure in MainThreadProc Added InterlockedDecrement in the error path when GetPoolBuffer fails for EncryptedIoRequest to ensure accurate tracking of pending IO requests and prevent potential resource leaks.

• Mounir IDRASSI (08 Sept 25)

  Windows driver: remove unneeded __try/__finally

• Mounir IDRASSI (08 Sept 25)

  Windows driver: harden UpdateBuffer against integer overflow. Make completion backoff per request (no shared state)

• Mounir IDRASSI (07 Sept 25)

  Windows driver: overhaul IRP completion path in EncryptedIoQueue, add dual completion threads, precise byte accounting & safer UpdateBuffer Major changes: - Added pooled + elastic work item model with retry/backoff (MAX_WI_RETRIES). removed semaphore usage. - Introduced two completion threads to reduce contention and latency under heavy IO. - Added BytesCompleted (per IRP) and ActualBytes (per fragment) for correct short read/write accounting. total read/write stats now reflect real transferred bytes instead of requested length. - Moved decryption of read fragments into IO thread. completion threads now only finalize IRPs (reduces race window and simplifies flow). - Deferred final IRP completion via FinalizeOriginalIrp to avoid inline IoCompleteRequest re-entrancy. added safe OOM inline fallback. - Implemented work item pool drain & orderly shutdown (ActiveWorkItems + NoActiveWorkItemsEvent) with robust stop protocol. - Replaced semaphore-based work item acquisition with spin lock + free list + event (WorkItemAvailableEvent). added exponential backoff for transient exhaustion. - Added elastic (on-demand) work item allocation with pool vs dynamic origin tracking (FromPool). - Added FreeCompletionWorkItemPool() for symmetric cleanup; ensured all threads are explicitly awakened during stop. - Added second completion thread replacing single CompletionThread. - Hardened UpdateBuffer: fixed parameter name typo, added bounds/overflow checks using IntSafe (ULongLongAdd), validated Count, guarded sector end computation. - Fixed GPT/system region write protection logic to pass correct length instead of end offset. - Ensured ASSERTs use fragment‑relative bounds (cast + length) and avoided mixed 64/32 comparisons. - Added MAX_WI_RETRIES constant. added WiRetryCount field in EncryptedIoRequest. - Ensured RemoveLock is released only after all queue/accounting updates (OnItemCompleted). - Reset/read-ahead logic preserved. read-ahead trigger now based on actual completion & zero pending fragment count. - General refactoring, clearer separation of concerns (TryAcquireCompletionWorkItem / FinalizeOriginalIrp / HandleCompleteOriginalIrp). Safety / correctness improvements: - Accurate short read handling (STATUS_END_OF_FILE with true byte count). - Eliminated risk of double free or premature RemoveLock release on completion paths. - Prevented potential overflow in sector end arithmetic. - Reduced contention and potential deadlock scenarios present with previous semaphore wait path.

• Mounir IDRASSI (06 Sept 25)

  Windows driver: add more checks and comments to crash dump filter - Document HIGH_LEVEL constraints and rationale for pre-building a nonpaged scratch MDL. - Allocate contiguous scratch buffer with conservative PFN cap (0x7FFFFFFFFFF) and fall back to unlimited cap if needed. - Replace ASSERT with TC_BUG_CHECK for validation of write MDL mapping at HIGH_LEVEL. - Safely copy PFNs from prebuilt MDL into caller MDL: compute dst/src page counts, check capacity, copy exact PFNs and retarget MDL header fields (preserve MdlFlags). - Make DumpData cleanup defensive in unload path. - comments improvements for clarity and maintainability.

• Charlie (06 Sept 25)

  Fix problems inside crash dump filter path (#1590) * Prefer allocations to be non-executable * Remove and reimplement DDIs inappropriately called inside HIGH_LEVEL IRQL routines * Refactor hibernate context to be passed around in the passed FILTER_EXTENSION pointer rather than global

• Mr-Update (06 Sept 25)

  Update Language.de.xml (#1598) Translation completed

• Mounir IDRASSI (05 Sept 25)

  Fix warning caused by clash between Argon2 AVX2 rotrX macros and integer equivalents in VeraCrypt headers

• Mounir IDRASSI (05 Sept 25)

  Translations: set correct "lang" attribute in Swedish language file

• nkh0472 (05 Sept 25)

  Update Language.zh-cn.xml (#1597)

• Nick (05 Sept 25)

  Update Swedish (#1594)

• Matthaiks (05 Sept 25)

  Update Polish translation (#1592)