[Mono-bugs] [Bug 387274] Type verification is enforced even when SkipVerification is requested

[bugzilla_noreply at novell.com]

https://bugzilla.novell.com/show_bug.cgi?id=387274

User spouliot at novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=387274#c11





--- Comment #11 from Sebastien Pouliot <spouliot at novell.com>  2008-05-07 12:54:44 MST ---
Kornél, your first paragraph is right, second is so-so[1], third is right and
the conclusion is wrong[2].

[1] On MS runtime the security policy decides if verification is needed (or
not). When something executes at FullTrust verification is not needed. This is
why your own sample would work (locally) even if SkipVerification was removed.

RequestMinimum is a "grant time" security action. It means the assembly
"request" (it's named that way) to the runtime SkipVerification as a minimal
condition for working properly (i.e. otherwise it *could* fail). If the policy
does not allow the RequestMinimum set it should not execute code the assembly.

[2] SkipVerification is not a "regular" permission it's a enum flag used inside
a SecurityPermission - and this one has some special stuff in it. I'm also
pretty sure there's special consideration given to SkipVerification since it
only make sense at a specific (grant) time.


Rodrigo, the current patch is wrong. You're using your own constructed
permission to test against granted permission set instead of using the assembly
requested permissions against the policy.


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.