ILSpy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

c-sharp dotnet mono decompile decompiler decompiler-engine dotnetcore ilspy pdb unity

Christoph Wille 3f32d4a5e9 Harden BAML reader against crafted-resource crashes Browsing an embedded .baml resource runs it through BamlReader.ReadDocument, whose post-parse defer pass walks the record list with NavigateTree. That walk recursed on every nested StaticResourceStart/KeyElementStart record with no depth cap and indexed the record list with no bound. A crafted resource could therefore drive recursion into a StackOverflowException -- which is uncatchable and kills the process despite the resource node's try/catch -- or walk the index off the end of the list. Both are reachable from ordinary resource browsing, no project export required. Consolidate the duplicated defer walk into one bounded, depth-capped helper that fails with a catchable InvalidDataException, so the existing UI catch turns a malformed resource into a "BAML decompilation failed" message instead of a crash. Reject an oversized signature length before it drives a multi-gigabyte allocation (it is read before the MSBAML check), and resolve defer offsets with TryGetValue so a bogus offset reports malformed data rather than escaping as a bare KeyNotFoundException. Assisted-by: Claude:claude-opus-4-8:Claude Code		5 days ago
..
Cases	Fix #3318 : missing x:FieldModifier in BAML decompiler	9 months ago
Mocks	dev: Strip BOM mark from text files	10 months ago
BamlSecurityTests.cs	Harden BAML reader against crafted-resource crashes	5 days ago
BamlTestRunner.cs	Fix #3318 : missing x:FieldModifier in BAML decompiler	9 months ago
ILSpy.BamlDecompiler.Tests.csproj	Harden BAML reader against crafted-resource crashes	5 days ago
packages.lock.json	Add pwsh dev scripts, repo-wide lock files, and CI NuGet caching	4 weeks ago