Skip to content

scons dist now signs the synthDriverHost32 runtime executable if it exists.#19749

Merged
SaschaCowley merged 3 commits into
betafrom
signSynthDriverHost32
Mar 9, 2026
Merged

scons dist now signs the synthDriverHost32 runtime executable if it exists.#19749
SaschaCowley merged 3 commits into
betafrom
signSynthDriverHost32

Conversation

@michaelDCurran

@michaelDCurran michaelDCurran commented Mar 5, 2026

Copy link
Copy Markdown
Member

Link to issue number:

Summary of the issue:

The 32 bit synthDriverhost runtime executable introduced in PR #19432 is not signed.

Description of user facing changes:

Description of developer facing changes:

Description of development approach:

When building the main dist target with scons, also sign nvda_synthDriverHost.exe if it exists.
This is an improvement over the previous try in pr #19683, where now the path is passed into the lambda by value so that it does not change in the for loop after being captured.

Testing strategy:

  • Compiled with scons synthDriverHost32Runtime and scons dist, providing a signing certificate
    *Confirmed that nvda_synthDriverHost.exe was signed.
  • Run the above tests on a try build from this pr.

Known issues with pull request:

None known.

Code Review Checklist:

  • Documentation:
    • Change log entry
    • User Documentation
    • Developer / Technical Documentation
    • Context sensitive help for GUI changes
  • Testing:
    • Unit tests
    • System (end to end) tests
    • Manual testing
  • UX of all users considered:
    • Speech
    • Braille
    • Low Vision
    • Different web browsers
    • Localization in other languages / culture than English
  • API is compatible with existing add-ons.
  • Security precautions taken.

@michaelDCurran michaelDCurran requested a review from a team as a code owner March 5, 2026 23:00

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the scons dist build so the 32-bit nvda_synthDriverHost.exe runtime executable is code-signed when present, addressing an unsigned binary introduced previously.

Changes:

  • Add nvda_synthDriverHost.exe (x86 runtime) to the list of executables signed during dist.
  • Adjust lambda capture to bind the per-iteration file path by value.
  • Skip signing for the synthDriverHost runtime if the file doesn’t exist.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread sconstruct
Comment thread sconstruct Outdated
@SaschaCowley SaschaCowley added the conceptApproved Similar 'triaged' for issues, PR accepted in theory, implementation needs review. label Mar 6, 2026
@SaschaCowley SaschaCowley added this to the 2026.1 milestone Mar 6, 2026
@github-actions github-actions Bot requested a deployment to snapshot March 6, 2026 00:59 Abandoned
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@github-actions github-actions Bot requested a deployment to snapshot March 8, 2026 22:14 Abandoned
@SaschaCowley

Copy link
Copy Markdown
Member

@michaelDCurran looking at nvda_snapshot_try-signSynthDriverHost32-54970,1c5d78cd, it looks like the synth driver host is now being signed. It doesn't look like we're signing pywintypes313.dll (either in the root or lib/<ver>/x86/synthDriverHost-runtime/) - should we be?

@michaelDCurran

michaelDCurran commented Mar 9, 2026 via email

Copy link
Copy Markdown
Member Author

@SaschaCowley SaschaCowley left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, pending finalization of testing

@SaschaCowley SaschaCowley merged commit aba8e88 into beta Mar 9, 2026
73 of 75 checks passed
@SaschaCowley SaschaCowley deleted the signSynthDriverHost32 branch March 9, 2026 03:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

conceptApproved Similar 'triaged' for issues, PR accepted in theory, implementation needs review.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants