-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[release/9.0.1xx] Update MSB3825 warning presence #46009
base: release/9.0.1xx
Are you sure you want to change the base?
[release/9.0.1xx] Update MSB3825 warning presence #46009
Conversation
@JanKrivanek are you going to prep the QB mode tab and bring to tactics for approval |
@marcpopMSFT Asked for tactics approval. |
/azp run |
Azure Pipelines successfully started running 2 pipeline(s). |
@dotnet/domestic-cat the failing tests are unrelated to the payload backported (what fails is a different ordering of Can the tests be taken care of? |
I may be wrong, but I think I remember a runtime issue that had similar symptoms. That one was fixed already, and I would've expected /azp run to have remerged release/9.0.1xx into this, but I still have an 'update branch' button to click, so maybe I'm wrong about that. I'm going to try that and see if it works. It's also possible that only went into a later branch. |
Backport of #45861 to release/9.0.1xx
Contributes to dotnet/msbuild#11185
Summary
Based on BinaryFormatter removal workgroup recommendation, MSBuild should stop warning in the
GenerateResource
task about possible usage ofBinaryFormatter
during runtime - as in the NET9 the usage of theBinaryFormatter
is avoided during runtime.More details: dotnet/msbuild#11185 (comment)
Customer Impact
User can be receiving false postivie warnings about security related topic - which might decrease credibility of similar warnings and customers attention to true positives.
Regression?
No.
BinaryFormatter used to be used in runtime up till NET8 - and there was no higher runtime then - so the warning was correct unconditionally.
Testing
Tested via manual run of dotnet build with GenerateResource targeting NET8 and NET9 - warning appears only in the former.
Risk
Minimal (just a comparison change).