187 references to SecurityNote
System.ServiceModel.Internals (187)
System\Runtime\ActionItem.cs (23)
14
[Fx.Tag.
SecurityNote
(Critical = "Stores the security context, used later in binding back into")]
41
[Fx.Tag.
SecurityNote
(Critical = "Calls into critical method ScheduleCallback",
60
[Fx.Tag.
SecurityNote
(Critical = "Called after applying the user context on the stack or (potentially) " +
65
[Fx.Tag.
SecurityNote
(Critical = "Access critical field context and critical property " +
92
[Fx.Tag.
SecurityNote
(Critical = "Access critical field context and critical property " +
111
[Fx.Tag.
SecurityNote
(Critical = "Access critical property CallbackHelper.InvokeWithoutContextCallback, " +
125
[Fx.Tag.
SecurityNote
(Critical = "Calls into critical methods IOThreadScheduler.ScheduleCallbackNoFlow, " +
141
[Fx.Tag.
SecurityNote
(Critical = "Extract the security context stored and reset the critical field")]
152
[Fx.Tag.
SecurityNote
(Critical = "Calls into critical static method ScheduleCallback")]
162
[Fx.Tag.
SecurityNote
(Critical = "Stores a delegate to a critical method")]
164
[Fx.Tag.
SecurityNote
(Critical = "Stores a delegate to a critical method")]
166
[Fx.Tag.
SecurityNote
(Critical = "Stores a delegate to a critical method")]
168
[Fx.Tag.
SecurityNote
(Critical = "Provides access to a critical field; Initialize it with " +
182
[Fx.Tag.
SecurityNote
(Critical = "Provides access to a critical field; Initialize it with " +
195
[Fx.Tag.
SecurityNote
(Critical = "Provides access to a critical field; Initialize it with " +
208
[Fx.Tag.
SecurityNote
(Critical = "Called by the scheduler without any user context on the stack")]
215
[Fx.Tag.
SecurityNote
(Critical = "Called by the scheduler without any user context on the stack")]
221
[Fx.Tag.
SecurityNote
(Critical = "Called after applying the user context on the stack")]
231
[Fx.Tag.
SecurityNote
(Critical = "Stores a delegate that will be called later, at a particular context")]
234
[Fx.Tag.
SecurityNote
(Critical = "Stores an object that will be passed to the delegate that will be " +
243
[Fx.Tag.
SecurityNote
(Critical = "Access critical fields callback and state",
268
[Fx.Tag.
SecurityNote
(Critical = "Implements a the critical abstract ActionItem.Invoke method, " +
283
[Fx.Tag.
SecurityNote
(Critical = "Implements a the critical abstract Trace method, " +
System\Runtime\AsyncWaitHandle.cs (5)
214
[Fx.Tag.
SecurityNote
(Critical = "Store the delegate to be invoked")]
217
[Fx.Tag.
SecurityNote
(Critical = "Stores the state object to be passed to the callback")]
223
[Fx.Tag.
SecurityNote
(Critical = "Access critical members", Safe = "Doesn't leak information")]
244
[Fx.Tag.
SecurityNote
(Critical = "Calls into critical method Schedule", Safe = "Invokes the given delegate under the current context")]
251
[Fx.Tag.
SecurityNote
(Critical = "Overriding an inherited critical method, access critical members")]
System\Runtime\Diagnostics\DiagnosticEventProvider.cs (9)
25
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of UnsafeNativeMethods.EtwEnableCallback")]
202
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
391
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
438
[Fx.Tag.
SecurityNote
(Critical = "Accesses security critical code WriteMessageEvent")]
451
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
644
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
700
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
730
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
863
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
System\Runtime\Diagnostics\DiagnosticTraceBase.cs (14)
36
[Fx.Tag.
SecurityNote
(Critical = "This determines the event source name.")]
51
[Fx.Tag.
SecurityNote
(Critical = "Critical because we are invoking TraceSource.Listeners which has a Link Demand for UnmanagedCode permission.",
75
[Fx.Tag.
SecurityNote
(Critical = "Critical because we are invoking TraceSource.Listeners which has a Link Demand for UnmanagedCode permission.",
136
[Fx.Tag.
SecurityNote
(Critical = "Critical because we are invoking TraceSource.Listeners and SourceSwitch.Level which have Link Demands for UnmanagedCode permission.")]
156
[Fx.Tag.
SecurityNote
(Critical = "Critical because we are invoking SetLevel.")]
178
[Fx.Tag.
SecurityNote
(Critical = "Critical because we are invoking SetLevelTheadSafe.")]
188
[Fx.Tag.
SecurityNote
(Critical = "Access critical eventSourceName field",
196
[Fx.Tag.
SecurityNote
(Critical = "This determines the event source name.")]
214
[Fx.Tag.
SecurityNote
(Critical = "Satisfies a LinkDemand for 'PermissionSetAttribute' on type 'Process' when calling method GetCurrentProcess",
230
[Fx.Tag.
SecurityNote
(Critical = "Satisfies a LinkDemand for 'PermissionSetAttribute' on type 'Process' when calling method GetCurrentProcess",
294
[Fx.Tag.
SecurityNote
(Critical = "Sets global event handlers for the AppDomain",
433
[Fx.Tag.
SecurityNote
(Critical = "Calls unsafe methods, UnsafeCreateEventLogger and UnsafeLogEvent.",
509
[Fx.Tag.
SecurityNote
(Critical = "gets the CorrelationManager, which does a LinkDemand for UnmanagedCode",
520
[Fx.Tag.
SecurityNote
(Critical = "gets the CorrelationManager, which does a LinkDemand for UnmanagedCode",
System\Runtime\Diagnostics\EtwDiagnosticTrace.cs (27)
36
[Fx.Tag.
SecurityNote
(Critical = "provider Id to create EtwProvider, which is SecurityCritical")]
43
[Fx.Tag.
SecurityNote
(Critical = "Stores object created by a critical c'tor")]
47
[Fx.Tag.
SecurityNote
(Critical = "Usage of EventDescriptor, which is protected by a LinkDemand")]
52
[Fx.Tag.
SecurityNote
(Critical = "setting critical field defaultEtwProviderId")]
65
[Fx.Tag.
SecurityNote
(Critical = "Access critical etwProvider, eventSourceName field")]
120
[Fx.Tag.
SecurityNote
(Critical = "reading critical field defaultEtwProviderId", Safe = "Doesn't leak info\\resources")]
128
[Fx.Tag.
SecurityNote
(Critical = "setting critical field defaultEtwProviderId")]
140
[Fx.Tag.
SecurityNote
(Critical = "Exposes the critical etwProvider field")]
150
[Fx.Tag.
SecurityNote
(Critical = "Access critical etwProvider field",
161
[Fx.Tag.
SecurityNote
(Critical = "Access critical etwProvider field",
169
[Fx.Tag.
SecurityNote
(Critical = "Access critical etwProvider field",
180
[Fx.Tag.
SecurityNote
(Critical = "Access critical etwProvider field",
191
[Fx.Tag.
SecurityNote
(Critical = "Access critical etwProvider field",
200
[Fx.Tag.
SecurityNote
(Critical = "Accesses the security critical etwProvider field", Safe = "Doesn't leak info\\resources")]
217
[Fx.Tag.
SecurityNote
(Critical = "Access critical etwProvider field",
225
[Fx.Tag.
SecurityNote
(Critical = "Usage of EventDescriptor, which is protected by a LinkDemand",
237
[Fx.Tag.
SecurityNote
(Critical = "Usage of EventDescriptor, which is protected by a LinkDemand")]
257
[Fx.Tag.
SecurityNote
(Critical = "Access critical transferEventDescriptor field, as well as other critical methods",
291
[Fx.Tag.
SecurityNote
(Critical = "Usage of EventDescriptor, which is protected by a LinkDemand")]
328
[Fx.Tag.
SecurityNote
(Critical = "Usage of EventDescriptor, which is protected by a LinkDemand")]
378
[Fx.Tag.
SecurityNote
(Critical = "Usage of EventDescriptor, which is protected by a LinkDemand")]
510
[Fx.Tag.
SecurityNote
(Critical = "Usage of EventDescriptor, which is protected by a LinkDemand",
518
[Fx.Tag.
SecurityNote
(Critical = "Usage of EventDescriptor, which is protected by a LinkDemand",
537
[Fx.Tag.
SecurityNote
(Critical = "Access the critical Listeners property",
550
[Fx.Tag.
SecurityNote
(Critical = "Sets this.etwProvider and calls EtwProvider constructor, which are Security Critical")]
575
[Fx.Tag.
SecurityNote
(Critical = "Usage of EventDescriptor, which is protected by a LinkDemand")]
636
[Fx.Tag.
SecurityNote
(Critical = "Access critical etwProvider field",
System\Runtime\Diagnostics\EtwProvider.cs (29)
22
[Fx.Tag.
SecurityNote
(Critical = "Calling the base critical c'tor")]
62
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
93
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
121
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
149
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
181
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
217
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
258
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
303
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
353
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
407
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
465
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
527
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
593
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
663
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
737
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
757
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
780
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
806
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
826
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
849
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
876
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
957
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
1047
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
1102
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
1165
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
1236
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
1311
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
1383
[Fx.Tag.
SecurityNote
(Critical = "Calling Unsafe code; usage of EventDescriptor, which is protected by a LinkDemand")]
System\Runtime\Diagnostics\EventLogger.cs (11)
22
[Fx.Tag.
SecurityNote
(Miscellaneous = "RequiresReview - In PT log no more than 5 events.")]
30
[Fx.Tag.
SecurityNote
(Critical = "Protect the string that defines the event source name.",
61
[Fx.Tag.
SecurityNote
(Critical = "Unsafe method to create event logger (sets the event source name).")]
70
[Fx.Tag.
SecurityNote
(Critical = "Logs event to the event log and asserts Unmanaged code.")]
246
[Fx.Tag.
SecurityNote
(Critical = "Logs event to the event log by calling unsafe method.",
255
[Fx.Tag.
SecurityNote
(Critical = "Protect the string that defines the event source name.",
264
[Fx.Tag.
SecurityNote
(Critical = "Sets event source name.")]
272
[Fx.Tag.
SecurityNote
(Critical = "Satisfies a LinkDemand for 'PermissionSetAttribute' on type 'Process' when calling method GetCurrentProcess",
297
[Fx.Tag.
SecurityNote
(Critical = "Accesses security critical code RegisterEventSource and ReportEvent")]
322
[Fx.Tag.
SecurityNote
(Critical = "Satisfies a LinkDemand for 'PermissionSetAttribute' on type 'Process' when calling method GetCurrentProcess",
340
[Fx.Tag.
SecurityNote
(Critical = "Satisfies a LinkDemand for 'PermissionSetAttribute' on type 'Process' when calling method GetCurrentProcess",
System\Runtime\Diagnostics\EventTraceActivity.cs (3)
53
[Fx.Tag.
SecurityNote
(Critical = "Critical because the CorrelationManager property has a link demand on UnmanagedCode.",
72
[Fx.Tag.
SecurityNote
(Critical = "Critical because the CorrelationManager property has a link demand on UnmanagedCode.",
85
[Fx.Tag.
SecurityNote
(Critical = "Critical because the CorrelationManager property has a link demand on UnmanagedCode.",
System\Runtime\ExceptionTrace.cs (2)
279
[Fx.Tag.
SecurityNote
(Critical = "Calls 'System.Runtime.Interop.UnsafeNativeMethods.IsDebuggerPresent()' which is a P/Invoke method",
295
[Fx.Tag.
SecurityNote
(Critical = "Calls into critical method UnsafeNativeMethods.IsDebuggerPresent and UnsafeNativeMethods.DebugBreak",
System\Runtime\Fx.cs (23)
45
[Fx.Tag.
SecurityNote
(Critical = "This delegate is called from within a ConstrainedExecutionRegion, must not be settable from PT code")]
76
[Fx.Tag.
SecurityNote
(Critical = "Accesses SecurityCritical field EtwProvider",
98
[Fx.Tag.
SecurityNote
(Critical = "access critical field", Safe = "ok for get-only access")]
106
[Fx.Tag.
SecurityNote
(Critical = "sets a critical field")]
172
[Fx.Tag.
SecurityNote
(Critical = "Calls into critical method Environment.FailFast",
393
[Fx.Tag.
SecurityNote
(Critical = "Construct the unsafe object IOCompletionThunk")]
483
[Fx.Tag.
SecurityNote
(Miscellaneous = "Must not call into PT code as it is called within a CER.")]
504
[Fx.Tag.
SecurityNote
(Miscellaneous = "Must not call into PT code as it is called within a CER.")]
552
[Fx.Tag.
SecurityNote
(Miscellaneous = "Must not call into PT code as it is called within a CER.")]
1028
[Fx.Tag.
SecurityNote
(Critical = "Make these safe to use in SecurityCritical contexts.")]
1032
[Fx.Tag.
SecurityNote
(Critical = "Accesses critical field.", Safe = "Data provided by caller.")]
1041
[Fx.Tag.
SecurityNote
(Critical = "Accesses critical field.", Safe = "Data is not privileged.")]
1064
[Fx.Tag.
SecurityNote
(Critical = "Calls PrepareConstrainedRegions which has a LinkDemand",
1098
[Fx.Tag.
SecurityNote
(Critical = "Calls PrepareConstrainedRegions which has a LinkDemand",
1132
[Fx.Tag.
SecurityNote
(Critical = "Calls PrepareConstrainedRegions which has a LinkDemand",
1166
[Fx.Tag.
SecurityNote
(Critical = "Calls PrepareConstrainedRegions which has a LinkDemand",
1200
[Fx.Tag.
SecurityNote
(Critical = "Calls PrepareConstrainedRegions which has a LinkDemand",
1234
[Fx.Tag.
SecurityNote
(Critical = "Calls PrepareConstrainedRegions which has a LinkDemand",
1255
[Fx.Tag.
SecurityNote
(Critical = "unsafe object")]
1259
[Fx.Tag.
SecurityNote
(Critical = "Make these safe to use in SecurityCritical contexts.")]
1262
[Fx.Tag.
SecurityNote
(Critical = "Accesses critical field.", Safe = "Data provided by caller.")]
1270
[Fx.Tag.
SecurityNote
(Safe = "returns a delegate around the safe method UnhandledExceptionFrame")]
1277
[Fx.Tag.
SecurityNote
(Critical = "Accesses critical field, calls PrepareConstrainedRegions which has a LinkDemand",
System\Runtime\Interop\SafeEventLogWriteHandle.cs (4)
14
[Fx.Tag.
SecurityNote
(Critical = "Usage of SafeHandleZeroOrMinusOneIsInvalid, which is protected by a LinkDemand and InheritanceDemand")]
19
[Fx.Tag.
SecurityNote
(Critical = "Usage of SafeHandleZeroOrMinusOneIsInvalid, which is protected by a LinkDemand and InheritanceDemand")]
24
[Fx.Tag.
SecurityNote
(Critical = "Usage of SafeHandleZeroOrMinusOneIsInvalid, which is protected by a LinkDemand and InheritanceDemand")]
43
[Fx.Tag.
SecurityNote
(Critical = "Usage of SafeHandleZeroOrMinusOneIsInvalid, which is protected by a LinkDemand and InheritanceDemand")]
System\Runtime\Interop\UnsafeNativeMethods.cs (2)
234
[Fx.Tag.
SecurityNote
(Critical = "Accesses security critical type SafeHandle")]
243
[Fx.Tag.
SecurityNote
(Critical = "Returns security critical type SafeEventLogWriteHandle")]
System\Runtime\IOThreadScheduler.cs (17)
18
[Fx.Tag.
SecurityNote
(Miscellaneous = "can be called outside user context")]
58
[Fx.Tag.
SecurityNote
(Critical = "holds callbacks which get called outside of the app security context")]
63
[Fx.Tag.
SecurityNote
(Critical = "holds callbacks which get called outside of the app security context")]
86
[Fx.Tag.
SecurityNote
(Critical = "creates a ScheduledOverlapped, touches slots, can be called outside of user context",
106
[Fx.Tag.
SecurityNote
(Critical = "Calls into critical class CriticalHelper, doesn't flow context")]
126
[Fx.Tag.
SecurityNote
(Critical = "Calls into critical class CriticalHelper, doesn't flow context")]
147
[Fx.Tag.
SecurityNote
(Critical = "calls into ScheduledOverlapped to post it, touches slots, can be called outside user context.")]
193
[Fx.Tag.
SecurityNote
(Critical = "calls into ScheduledOverlapped to post it, touches slots, can be called outside user context.")]
250
[Fx.Tag.
SecurityNote
(Critical = "calls into ScheduledOverlapped to post it, touches slots, may be called outside of user context")]
323
[Fx.Tag.
SecurityNote
(Critical = "touches slots, may be called outside of user context")]
364
[Fx.Tag.
SecurityNote
(Critical = "touches slots, may be called outside of user context")]
374
[Fx.Tag.
SecurityNote
(Critical = "touches slots, may be called outside of user context")]
478
[Fx.Tag.
SecurityNote
(Miscellaneous = "called by critical code, can be called outside user context")]
527
[Fx.Tag.
SecurityNote
(Miscellaneous = "called by critical code, can be called outside user context")]
594
[Fx.Tag.
SecurityNote
(Critical = "manages NativeOverlapped instance, can be called outside user context")]
607
[Fx.Tag.
SecurityNote
(Miscellaneous = "note that in some hosts this runs without any user context on the stack")]
650
[Fx.Tag.
SecurityNote
(Miscellaneous = "note that this runs on the finalizer thread")]
System\Runtime\IOThreadTimer.cs (4)
73
[Fx.Tag.
SecurityNote
(Critical = "Calls critical method GetSystemTimeAdjustment", Safe = "method is a SafeNativeMethod")]
606
[Fx.Tag.
SecurityNote
(Critical = "Call the critical CreateWaitableTimer method in TimerHelper",
619
[Fx.Tag.
SecurityNote
(Critical = "Call the critical Set method in TimerHelper",
626
[Fx.Tag.
SecurityNote
(Critical = "Provides a set of unsafe methods used to work with the WaitableTimer")]
System\Runtime\PartialTrustHelpers.cs (12)
14
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
18
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
21
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
27
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
35
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
55
[Fx.Tag.
SecurityNote
(Critical = "Captures security context with identity flow suppressed, " +
74
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
89
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
100
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
109
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
117
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision")]
128
[Fx.Tag.
SecurityNote
(Critical = "used in a security-sensitive decision",
System\Runtime\SynchronizedPool.cs (1)
337
[Fx.Tag.
SecurityNote
(Critical = "Asserts in order to get the processor count from the environment", Safe = "This data isn't actually protected so it's ok to leak")]
System\Runtime\Ticks.cs (1)
14
[Fx.Tag.
SecurityNote
(Miscellaneous = "Why isn't the SuppressUnmanagedCodeSecurity attribute working in this case?")]