From 4e973bf1b571e03626c2556f09ac6f1769e4eb0d Mon Sep 17 00:00:00 2001 From: Jeremy Koritzinsky Date: Tue, 15 Sep 2026 10:55:16 -0700 Subject: [PATCH 1/2] Update Ildasm.exe documentation with safety warning Add warning about using Ildasm.exe with untrusted files. --- docs/framework/tools/ildasm-exe-il-disassembler.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/framework/tools/ildasm-exe-il-disassembler.md b/docs/framework/tools/ildasm-exe-il-disassembler.md index 8277484e06251..7284f539e2b80 100644 --- a/docs/framework/tools/ildasm-exe-il-disassembler.md +++ b/docs/framework/tools/ildasm-exe-il-disassembler.md @@ -102,6 +102,9 @@ If you provide *Ildasm.exe* with a *PEfilename* argument that contains embedded You can run *Ildasm.exe* over an.exe or *.dll* file to determine whether the file is managed. If the file is not managed, the tool displays a message stating that the file has no valid common language runtime header and cannot be disassembled. If the file is managed, the tool runs successfully. +> [!WARNING] +> *Ildasm.exe* is expected to only be used with trusted input. Do not pass untrusted assembly files to *Ildasm.exe*. + ## Version Information Starting with .NET Framework 4.5, *Ildasm.exe* handles an unrecognized marshal BLOB (binary large object) by displaying the raw binary content. For example, the following code shows how a marshal BLOB generated by a C# program is displayed: From 6d16da04c06909c9926332a05212623f252a30cd Mon Sep 17 00:00:00 2001 From: Jeremy Koritzinsky Date: Tue, 15 Sep 2026 11:05:12 -0700 Subject: [PATCH 2/2] Update warning for Ildasm.exe usage Clarified warning about using Ildasm.exe with untrusted files. Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- docs/framework/tools/ildasm-exe-il-disassembler.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/framework/tools/ildasm-exe-il-disassembler.md b/docs/framework/tools/ildasm-exe-il-disassembler.md index 7284f539e2b80..3b1d04151430f 100644 --- a/docs/framework/tools/ildasm-exe-il-disassembler.md +++ b/docs/framework/tools/ildasm-exe-il-disassembler.md @@ -103,7 +103,7 @@ If you provide *Ildasm.exe* with a *PEfilename* argument that contains embedded You can run *Ildasm.exe* over an.exe or *.dll* file to determine whether the file is managed. If the file is not managed, the tool displays a message stating that the file has no valid common language runtime header and cannot be disassembled. If the file is managed, the tool runs successfully. > [!WARNING] -> *Ildasm.exe* is expected to only be used with trusted input. Do not pass untrusted assembly files to *Ildasm.exe*. +> *Ildasm.exe* should only be used with trusted input. Do not pass untrusted files to *Ildasm.exe*. ## Version Information