Tags: dotnet/runtime
Tags
[release/11.0-rc1] Source code updates from dotnet/dotnet (#132568) > [!NOTE] > This is a codeflow update. It may contain both source code changes from > [the VMR](https://github.com/dotnet/dotnet) > as well as dependency updates. Learn more [here](https://github.com/dotnet/dotnet/tree/main/docs/Codeflow-PRs.md). This pull request brings the following source code changes [marker]: <> (Begin:99e6e429-8827-48af-8b81-3c96d7d33a83) ## From https://github.com/dotnet/dotnet - **Subscription**: [99e6e429-8827-48af-8b81-3c96d7d33a83](https://maestro.dot.net/subscriptions?search=99e6e429-8827-48af-8b81-3c96d7d33a83) - **Build**: [20260820.3](https://dev.azure.com/dnceng/internal/_build/results?buildId=3052696) ([327888](https://maestro.dot.net/channel/10803/github:dotnet:dotnet/build/327888)) - **Date Produced**: August 20, 2026 3:00:20 PM UTC - **Commit**: [1d599674e31ad86ca9e6e1dad7055b531e4d58e4](dotnet/dotnet@1d59967) - **Commit Diff**: [7cdb217...1d59967](dotnet/dotnet@7cdb217...1d59967) - **Branch**: [release/11.0.1xx-rc1](https://github.com/dotnet/dotnet/tree/release/11.0.1xx-rc1) **Updated Dependencies** - From [5.11.0-1.26411.119 to 5.11.0-1.26420.103][1] - Microsoft.CodeAnalysis - Microsoft.CodeAnalysis.Analyzers - Microsoft.CodeAnalysis.BannedApiAnalyzers - Microsoft.CodeAnalysis.CSharp - Microsoft.Net.Compilers.Toolset - From [11.0.100-rc.1.26411.119 to 11.0.100-rc.1.26420.103][1] - Microsoft.CodeAnalysis.NetAnalyzers - Microsoft.DotNet.ApiCompat.Task - Microsoft.NET.Workload.Emscripten.Current.Manifest-11.0.100.Transport - From [11.0.0-beta.26411.119 to 11.0.0-beta.26420.103][1] - Microsoft.DotNet.Arcade.Sdk - Microsoft.DotNet.Build.Tasks.Archives - Microsoft.DotNet.Build.Tasks.Feed - Microsoft.DotNet.Build.Tasks.FileCatalog - Microsoft.DotNet.Build.Tasks.Installers - Microsoft.DotNet.Build.Tasks.Packaging - Microsoft.DotNet.Build.Tasks.TargetFramework - Microsoft.DotNet.Build.Tasks.Templating - Microsoft.DotNet.CodeAnalysis - Microsoft.DotNet.GenAPI - Microsoft.DotNet.GenFacades - Microsoft.DotNet.Helix.JobMonitor - Microsoft.DotNet.Helix.Sdk - Microsoft.DotNet.PackageTesting - Microsoft.DotNet.RemoteExecutor - Microsoft.DotNet.SharedFramework.Sdk - Microsoft.DotNet.XliffTasks - Microsoft.DotNet.XUnitExtensions - From [0.11.5-preview.26411.119 to 0.11.5-preview.26420.103][1] - Microsoft.DotNet.Cecil - From [2.9.3-beta.26411.119 to 2.9.3-beta.26420.103][1] - Microsoft.DotNet.XUnitConsoleRunner - From [11.0.0-rc.1.26411.119 to 11.0.0-rc.1.26420.103][1] - Microsoft.NET.Runtime.Emscripten.Internal - Microsoft.NET.Sdk.IL - Microsoft.NETCore.App.Ref - Microsoft.NETCore.ILAsm - runtime.native.System.IO.Ports - System.Reflection.Metadata - System.Reflection.MetadataLoadContext - System.Text.Json - From [7.11.0-rc.65534 to 7.11.0-rc.42103][1] - NuGet.Frameworks - NuGet.Packaging - NuGet.ProjectModel - NuGet.Versioning - From [3.0.0-rc.1.26411.119 to 3.0.0-rc.1.26420.103][1] - System.CommandLine - From [11.0.0-alpha.1.26407.6 to 11.0.0-alpha.1.26413.1](dotnet/dotnet@db20b76...c105bfb) - runtime.linux-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport - runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport - runtime.linux-musl-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport - runtime.linux-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport - runtime.osx-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport - runtime.osx-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport - runtime.win-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport - runtime.win-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport [marker]: <> (End:99e6e429-8827-48af-8b81-3c96d7d33a83) [1]: dotnet/dotnet@7cdb217...1d59967 [marker]: <> (Start:Footer:CodeFlow PR) ## Associated changes in source repos - dotnet/arcade@14b9295...09a0bcf - dotnet/aspnetcore@3600ca0...96b7ae9 - dotnet/cecil@74999f2...5ae012f - dotnet/command-line-api@bc16495...8a70ae0 - dotnet/deployment-tools@3ccca8e...9baf0bb - dotnet/diagnostics@c014870...66ffffc - dotnet/efcore@dbf9771...227a63d - dotnet/emsdk@bf28440...74269dd - dotnet/fsharp@ea778bb...732b9eb - dotnet/msbuild@f08c806...b6d968a - NuGet/NuGet.Client@1a68d86...2023968 - dotnet/roslyn@9d07b18...0280f7f - 067d74c...f2568ad - dotnet/sdk@2763d13...6bb52e2 - dotnet/source-build-assets@b70367d...7171679 - dotnet/sourcelink@b989174...6ec19dd - dotnet/symreader@b579795...260aefc - microsoft/vstest@6411dc2...0b289d5 - dotnet/windowsdesktop@5d631bd...f356729 - dotnet/winforms@a5594f0...af0c793 - dotnet/wpf@2ca0375...8218c1c - dotnet/xdt@0d57d4b...2414cbd <details> <summary>Diff the source with this PR branch</summary> ```bash darc vmr diff --name-only https://github.com/dotnet/dotnet:1d599674e31ad86ca9e6e1dad7055b531e4d58e4..https://github.com/dotnet/runtime:darc-release/11.0-rc1-0fc837dd-8cc6-4f21-916d-1dcfc371c211 ``` </details> [marker]: <> (End:Footer:CodeFlow PR) --------- Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: Tanner Gooding <tagoo@outlook.com> Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Co-authored-by: Alexander Köplinger <alex.koeplinger@outlook.com>
[release/10.0] Fix handling of non-ASCII data in CBOR indefinite stri… …ngs (#131278) Backport of #131235 to release/10.0 ## Customer Impact - [x] Customer reported - [ ] Found internally When reading an indefinite-length encoded text string, TryReadTextString moves the write position forward the number of bytes read, not the number of chars written, so non-ASCII data gets exceptions that a precisely-sized buffer is too small (despite having had the size pre-validated). ## Regression - [ ] Yes - [x] No It seems to have had this behavior since the method was introduced, in .NET 5. ## Testing This change includes tests that exercise the pattern better, including having a non-ASCII character in something other than the final position in a string. ## Risk Low. Existing test coverage shows no regressions for pure-ASCII and Unicode-final-only, new test coverage shows Unicode-before-final works correctly. ## Package authoring no longer needed in .NET 9 **IMPORTANT**: Starting with .NET 9, you no longer need to edit a NuGet package's csproj to enable building and bump the version. Keep in mind that we still need package authoring in .NET 8 and older versions.
[release/11.0-preview7] FileConfigurationProvider: Handle and forward… … IO exceptions to OnLoadException (#131427) Backport of #126093 to release/11.0-preview7 ## Customer Impact Long standing issue reported by customer - [X] Customer reported - [ ] Found internally ## Regression Long standing issue. - [ ] Yes - [X] No ## Testing 6 tests were added. ## Risk Low. It is backport to Preview 7 version after branch were snapped but before code complete. Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Fix failing symlink tests (10.0) (#130344) Backport of #130342 to release/10.0. Fixes #129227 ## Customer Impact The new tar symlink resolution is not working properly on some platforms. - [ ] Customer reported - [x] Found internally Corrects a length mismatch that made the Tar traversal guard crash with ArgumentOutOfRangeException (subtracting a symlink-resolved path length from a logical path). Without it, extraction to any symlinked destination (macOS /var , /tmp ) is broken. ## Regression - [x] Yes - [ ] No ## Testing Reenabled failing CI tests. ## Risk Low. --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Merged PR 63010: Handle truncation error in ipc_transport_get_default… …_name. #### AI description (iteration 1) #### PR Classification Bug fix to properly handle truncation errors when generating default IPC transport names. #### PR Summary This PR fixes error handling in the IPC transport name generation code to prevent silent failures when socket paths are truncated or invalid. The changes ensure that failures in `PAL_GetTransportName` are properly detected and propagated, and that empty socket paths (which would incorrectly bind to Linux abstract namespace) are rejected. - `ds-ipc-pal-socket.c`: Added proper error handling with `ep_raise_error_if_nok` macros for socket name generation, validation to reject empty `sun_path`, and cleanup logic to free allocated memory on error - `ds-ipc-pal-socket.c` and `ds-rt-coreclr.h`: Modified `ipc_transport_get_default_name` and `ds_rt_transport_get_default_name` to return `false` when name generation fails (detected by empty string) <!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot --> ---- #### AI description (iteration 1) #### PR Classification Bug fix to properly handle truncation errors when generating default IPC transport names in EventPipe socket operations. #### PR Summary This PR adds proper error handling for socket path truncation in the IPC transport layer, ensuring that failed name generation is detected and handled gracefully rather than silently creating invalid socket paths. - `/src/native/eventpipe/ds-ipc-pal-socket.c`: Added error checking for `ipc_transport_get_default_name` return value, validation that `sun_path` is not empty to prevent binding to Linux abstract namespace, and proper error cleanup with memory deallocation - `/src/native/eventpipe/ds-ipc-pal-socket.c` and `/src/coreclr/vm/eventing/eventpipe/ds-rt-coreclr.h`: Changed `ipc_transport_get_default_name` and `ds_rt_transport_get_default_name` to return `false` when name generation fails (indicated by empty string)
Merged PR 63011: Handle truncation error in ipc_transport_get_default… …_name. #### AI description (iteration 1) #### PR Classification Bug fix to handle truncation errors in IPC transport default name generation and improve error handling in Unix domain socket address allocation. #### PR Summary This PR fixes error handling when generating default IPC transport names, ensuring truncation errors are properly detected and handled instead of silently proceeding with invalid paths. - `ds-ipc-pal-socket.c`: Added proper error handling with `ep_raise_error_if_nok` macros to validate socket path generation, prevent empty `sun_path` (which would bind to unsupported Linux abstract namespace), and properly cleanup allocated memory on error - `ds-ipc-pal-socket.c` and `ds-rt-coreclr.h`: Modified `ipc_transport_get_default_name` to return `false` when name generation fails (detected by empty string), instead of always returning `true` <!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->
[release/11.0-preview6] Fix async resumption stub with byref paramete… …rs (#130022) Backport of #129999 to release/11.0-preview6 /cc @jakobbotsch ## Customer Impact - [X] Customer reported - [ ] Found internally A Task-returning method `A` with a byref parameter may cause the runtime to throw an `InvalidProgramException` if directly returning the result of another Task-returning method `B()`, the task returned by `B` suspends and also one of the following is true: - `A` is marked with `[MethodImpl(MethodImplOptions.NoInlining)]` - `B` returns `Task<T>` and `A` returns `Task` In these cases the runtime produces an internal IL stub with invalid IL. The invalid IL tries to zero a byref local using `initobj`, which is not legal IL. Reported by ASP.NET in #129990. ## Regression - [X] Yes - [ ] No This issue exists since runtime async was introduced, but #128384 made it possible to hit this issue from C# code. ## Testing Unit test introduced. ## Risk Low. Adjust IL emission to load a `byref` zero without `initobj`. --------- Co-authored-by: Jakob Botsch Nielsen <jakob.botsch.nielsen@gmail.com>
[release/10.0] Fix blob type in CopyWithPrivateKey for ML-DSA (#129865) Backport of #129839 to release/10.0 /cc @PranavSenthilnathan ## Customer Impact - [ ] Customer reported - [x] Found internally Found when running unit tests on a recent Windows insider build. An exception will be thrown in some cases when an ML-DSA certificate and key are paired. Specifically, when the key is a BCrypt key that was generated or imported with a seed, we try to re-import it into NCrypt as a private key (instead of a seed). Previously, Windows was tolerant to this and was able to recognize that the key material represented the seed instead of the private key. With recent insider builds this has started to fail, so we need to be accurate when telling NCrypt the format of the key material. ## Regression - [ ] Yes - [x] No ## Testing Validated on insider build of Windows. This wasn't an issue before because Windows was more permissive in its ML-DSA imports by allowing seeds even when the blob type was private key instead. ## Risk Low. We're now passing the correct parameter for blob type as described in: https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptimportkeypair#parameters Co-authored-by: Pranav Senthilnathan <pranav.senthilnathan@live.com>
PreviousNext