Nullsoft Scriptable Install System
From Wikipedia the free encyclopedia
 | This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these template messages)
|
Nullsoft Scriptable Install System (NSIS) is a software for creating installation programs for the Windows operating system. It was originally developed by Nullsoft, who used the installer for their media player Winamp, among others. Today, NSIS is free software and is licensed under the zlib/libpng License. The source code of NSIS and the downloads are offered through SourceForge, where NSIS was awarded Project of the Month in January 2006. The installer is a popular open-source alternative to commercial installers like InstallShield.[1]
NSIS itself consists only of a command-line compiler and a graphical user interface for the compiler, which aids in compiling and simplifies some settings. The installer includes LZMA compression, plug-in support, multilingual features.[1] Several other #third-party front-ends for NSIS are available.
When using NSIS in software products, it is not possible to obtain a certification from Microsoft as "Designed for Windows Vista" because NSIS is not capable of generating the necessary Windows Installer files.
Features (Selection)[edit]
- Very small overhead of about 34 KB
- Compatible with all common Windows operating systems (Windows 95, 98, 2000, 2003, 2008, ME, NT, XP, Vista, 7, 8, 10)
- Three different compression algorithms (zlib, bzip2, and LZMA), optionally with solid compression
- 49 languages, including languages written from right to left
- Plug-in system for nearly unlimited extension of the already extensive features (e.g., there are plug-ins for array operations, advanced mathematical functions, or control of Windows services and processes)
- Compilation of the installer under Windows or a POSIX compatible system such as Linux or FreeBSD (currently only support for x86 platforms)
- In addition to a "classic design," also a modern design that closely resembles proprietary installers.
Through the scripting language and the plugin interface, almost unlimited functions can be implemented in self-written installers. This includes managing system services, web-based installations, dynamic updates, repair and rollback functions.
Functionality[edit]
An installer is based on a script, where each line is an instruction. The script file is compiled into an executable file containing all files (compressed) and the installation program (script commands) by the command-line compiler "makensis.exe", which can then be easily distributed. MakeNSISW is available as a graphical interface for makensis.
; Example script Name "MyExample" OutFile "installer.exe" SetCompressor lzma InstallDir "$PROGRAMFILES\example" InstallDirRegKey HKLM "SOFTWARE\example" "installdir" LoadLanguageFile "${NSISDIR}\Contrib\Language files\German.nlf" Page directory Page instfiles Section SetOutPath $INSTDIR File "myexample.exe" WriteRegStr HKLM "SOFTWARE\example" "installdir" "$INSTDIR" CreateShortCut "$DESKTOP\example.lnk" "$OUTDIR\myexample.exe" SectionEnd The adjacent images show the result of the above script. Using extensions like the "Modern UI" or specific plug-ins, visually appealing installation wizards can also be created.
Thanks to strong compression algorithms and low overhead, very small installers are possible, making NSIS ideal for distributing programs over the Internet.
Security[edit]
Installers created with NSIS have security vulnerabilities when an outdated version is used.[2][3][4][5][6][7] Possible security vulnerabilities were closed in versions 2.47[8], 2.50[9], and 2.51[10].
Third-party front-ends[edit]
Creation of NSIS installers is supported by several pieces of third-party software:
- The CMake packager CPack has a generator backend for NSIS.[11]
- EclipseNSIS is a comprehensive plugin for Eclipse for editing, compiling and testing NSIS scripts.[12]
- HM NIS EDIT is a free-standing integrated development environment (IDE) for NSIS.[13]
- Debian has an nsis package for creationg Windows installers under Linux.[14]
References[edit]
- ^ a b Dey 2021, p. 339.
- ^ FullDisclosure: Executable installers are vulnerable^WEVIL (case 2): NSIS allows remote code execution with escalation of privilege
- ^ FullDisclosure: Arbitrary code execution resp. escalation of privilege with Mozilla's SETUP.EXE
- ^ FullDisclosure: Executable installers are vulnerable^WEVIL (case 10): McAfee Security Scan Plus, WebAdvisor and CloudAV (Beta)
- ^ FullDisclosure: Executable installers are vulnerable^WEVIL (case 11): Nmap <7.01 and Nmap-WinPcap <4.13
- ^ Gpg4win: Security Advisory Gpg4win 2015-11-25
- ^ Intel: Intel Security – Security Bulletin: Security patch for several McAfee installers and uninstallers
- ^ Appendix F: Changelog and Release Notes
- ^ Appendix F: Changelog and Release Notes
- ^ Appendix F: Changelog and Release Notes
- ^ https://cmake.org/cmake/help/latest/cpack_gen/nsis.html
- ^ https://eclipsensis.sourceforge.net/index.shtml
- ^ https://hmne.sourceforge.net
- ^ https://packages.debian.org/sid/nsis
Sources[edit]
- Dey, N. (2021). Cross-Platform Development with Qt 6 and Modern C++: Design and build applications with modern graphical user interfaces without worrying about platform dependency. Packt Publishing. ISBN 978-1-80020-885-8. Retrieved 2024-04-26.
External links[edit]
- NSIS Homepage
- NSIS Download via SourceForge