
Signature
http://barrkel.blogspot.com/
Are there any security risks in putting the PDB files on the target system?

Signature
-----------------------------------
Ken Varn
Senior Software Engineer
Diebold Inc.
EmailID = varnk
Domain = Diebold.com
-----------------------------------
Ollie Riches wrote:
> Not sure why you have implemented your own stack walking code as this is
> available from all exceptions and is defined in System.Exception as method
[quoted text clipped - 4 lines]
> You are not going to be able to obtain line numbers with a release build,
> only debug build (PDB)
PDB works with release build too, if you ask for one (ask for a PDB that
is). However frames may be incorrect for e.g. inlined functions.
-- Barry

Signature
http://barrkel.blogspot.com/
Barry Kelly - 12 Mar 2007 19:13 GMT
> Are there any security risks in putting the PDB files on the target system?
If the target system is a server, then no, I'm not aware of any risks.
In fact, I've read recommendations of doing so, for the explicit purpose
of getting line numbers.
If it's an end-user system, one possible risk is that PDBs make reverse
engineering easier, because e.g. the PDB contains names for all the
local variables.
-- Barry

Signature
http://barrkel.blogspot.com/