Description:
ICE76 verifies the use of the SFP (WFP) catalog within Windows Installer packages for Windows Me. This ICE also verifies that no files in the BindImage table reference SFP catalogs.

Windows File Protection requires an exact match between the file and the signature embedded in the catalog file. Files that reference a SFP catalog must not be listed in the BindImage table because the effect of the BindImage action on these files differs between computers. Files referenced by SFP catalogs must be in components that are permanent or installed locally.

Concerns:
ICE76 posts an error for each file in the BindImage table that is also in the FileSFPCatalog table.

ICE76 outputs an error if a file in the FileSFPCatalog table belongs to a component with any of the following true:

• msidbComponentAttributesPermanent is not set in the Attributes column of the Component table.
• msidbComponentAttributesSourceOnly is set in the Attributes column of the Component table.
• msidbAttributesOptional is set in the Attributes column of the Component table.

Additional information:
Available since Windows Installer 1.2, and only intended for Windows Millennium Edition.

For files specified in the BindImage table, the BindImage action shall for each file that is installed locally, link the executable to the DLL! Internally, the Windows API "BindImageEX" is called.

InstallSFPCatalogFile is an action which installs a CatalogFile by Windows Millennium Edition's Windows File Protection.

Rule is that the files which are included in a FSP Catalog, may not be placed in the BindImage table.

ICE also gives this error if a component contains an SFP file:

• msidbComponentAttributesPermanent is not set
• msidbComponentAttributesSourceOnly is set
• msidbAttributesOptional is set

Examples of possible errors:

FileSFPCatalog Table:

BindImage Table:

1. File 'File1' references a SFP catalog. Therefore it cannot be in the BindImage table.

This error must be solved:
Delete the entry “File1” from the BindImage Table.