Skip to content

Conversation

@vseanreesermsft
Copy link

No description provided.

hoyosjs and others added 23 commits March 31, 2023 01:07
…ypes that implements INullable

CVE-2023-24936: Check type is allowed when deserializing instance types that implements INullable
…LibraryImportGenerator

Adds a "paramName_lastIndexMarshalled" variable to generated code that tracks the index of the last element in a collection that was marshalled. Then in the cleanup stage, we only clean up to that index. This works for single dimensional arrays of non-blittable elements.

For multidimensional arrays, this will fully initialize higher order arrays to simplify the generated logic. It is possible to avoid this and can be considered in a future PR, if we observe users of multi-dimensional arrays observing performance issues.
… and enable delay load of version.dll

`coreclr` delay loads `version.dll` and adds a hook such that it loads from the system directory. In single-file, we lost this behaviour since it uses static library version of `coreclr`. This adds the same mechanism to single-file.
…e loading

Block password-less PKCS12 blobs on X509 certificate loadings/imports and Prevet AIA fetching of non-cert types.
Merge from public release/7.0 to internal/release/7.0 and resolve conflicts if necessary
@ghost
Copy link

ghost commented Jun 13, 2023

Tagging subscribers to this area: @dotnet/area-system-security, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.

Issue Details

null

Author: vseanreesermsft
Assignees: vseanreesermsft
Labels:

area-System.Security

Milestone: -

@carlossanlop carlossanlop added area-codeflow for labeling automated codeflow and removed area-System.Security labels Jun 13, 2023
Copy link
Contributor

@carlossanlop carlossanlop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reminder to self: Need to reset the OOB packages that came from internal. Will do this in a separate PR that needs to be merged on code complete day next month.

@carlossanlop carlossanlop added the Servicing-approved Approved for servicing release label Jun 13, 2023
@carlossanlop
Copy link
Contributor

The failure message is unrelated and expected:

src/installer/pkg/sfx/Microsoft.NETCore.App/Microsoft.NETCore.App.Runtime.sfxproj(0,0): error NU1603: (NETCORE_ENGINEERING_TELEMETRY=Restore) Microsoft.NETCore.App.Runtime.osx-x64 depends on Microsoft.DiaSymReader.Native (>= 16.11.27-beta1.23180.1) but Microsoft.DiaSymReader.Native 16.11.27-beta1.23180.1 was not found. An approximate best match of Microsoft.DiaSymReader.Native 17.0.0-beta1.21524.1 was resolved.

It will go away as soon as the new Microsoft.DiaSymReader.Native version is pushed to nuget.

@carlossanlop carlossanlop merged commit 4c15f78 into dotnet:release/7.0 Jun 13, 2023
@ghost ghost locked as resolved and limited conversation to collaborators Jul 16, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

area-codeflow for labeling automated codeflow Servicing-approved Approved for servicing release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants