Please do not reply to this email- if you want to comment on the bug, go to the URL shown below and enter your comments there.
Changed by [EMAIL PROTECTED] http://bugzilla.ximian.com/show_bug.cgi?id=81860 --- shadow/81860 2007-06-12 02:51:56.000000000 -0400 +++ shadow/81860.tmp.31201 2007-06-12 13:09:41.000000000 -0400 @@ -2,25 +2,29 @@ Product: Mono: Runtime Version: 1.2 OS: other OS Details: Status: NEW Resolution: -Severity: +Severity: Unknown Priority: Major Component: misc AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] QAContact: [EMAIL PROTECTED] TargetMilestone: --- URL: Cc: -Summary: RuntimeHelpers.InitializeArray() is completely broken +Summary: RuntimeHelpers.InitializeArray() needs more checks ves_icall_System_Runtime_CompilerServices_RuntimeHelpers_InitializeArray () needs more checks. It should check: - whether the field has an RVA. - the size of the field before blindly copying the data. - that the destination array type doesn't contain references, the current behavior is a security hole. + +------- Additional Comments From [EMAIL PROTECTED] 2007-06-12 13:09 ------- +Yes, we do miss many checks, but we miss them in a million other places +too. _______________________________________________ mono-bugs maillist - [email protected] http://lists.ximian.com/mailman/listinfo/mono-bugs
