diff options
| -rw-r--r-- | ChangeLog | 4 | ||||
| -rw-r--r-- | runtime/Makefile.am | 5 |
2 files changed, 7 insertions, 2 deletions
diff --git a/ChangeLog b/ChangeLog index 3b67a73c966..bbbeed4bfc5 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,7 @@ +2008-04-24 Rodrigo Kumpera <rkumpera@novell.com> + + * runtime/Makefile.am (mcs-compileall): Turn on the verifier. + 2008-04-18 Wade Berrier <wberrier@novell.com> * scripts/mono-find-requires.in: Add env var to ignore scanning diff --git a/runtime/Makefile.am b/runtime/Makefile.am index 02a0e02ec37..339c6a0fee0 100644 --- a/runtime/Makefile.am +++ b/runtime/Makefile.am @@ -82,7 +82,8 @@ cur_dir_cmd = pwd PLATFORM_PATH_SEPARATOR = : endif -# Use --compile-all as a poor man's PEVerify to detect invalid IL +# Compile all assemblies with the verifier turned on. Code must be valid but not verifiable. +# TODO it would be nice to split assemblies without unsafe code to use the verifier with verifiable mode. # Skip net 2.1 assemblies for now because of visibility problems mcs-compileall: mono-wrapper etc/mono/config save_MONO_PATH=$$MONO_PATH; mcs_topdir=`cd $(mcs_topdir) && $(cur_dir_cmd)`; ok=:; \ @@ -100,7 +101,7 @@ mcs-compileall: mono-wrapper etc/mono/config if [ ! -f $$i ] ; then \ continue ; \ fi ; \ - if ./mono-wrapper --compile-all $$i; then \ + if ./mono-wrapper --compile-all --security=validil --verify-all $$i; then \ echo $$i verified OK; \ else \ echo $$i verification failed; ok=false; \ |