Question 88170 in ASP.NET Question posted in
The official documentation can be found here.

BinaryFormatter not supported in .net 5 app when loading Bitmap resource – Asp.net

I have migrated a couple of ASP.Net Core 2.2 projects to .Net 5, the last issue I have is that I get a System.NotSupported exception when trying to load bitmaps from the project resources.

RtfUtility.AppendLogo(result, Properties.Resources.Logo);

System.NotSupportedException
HResult=0x80131515
Message=BinaryFormatter serialization and deserialization are disabled within this application. See https://aka.ms/binaryformatter for more information.
Source=System.Runtime.Serialization.Formatters

I’m not using BinaryFormatter explicitly but oddly I don’t get an error when loading a binary PDF file in the same way:

processor.LoadDocument(new MemoryStream(Properties.Resources.Certificate));

Both mechanisms use ResourceManager.GetObject, so I’m not sure whats going on. I know I can turn off the error in the project file, but that seems to be a short term solution, I’d rather fix it and forget it. Thanks for any advice you can give…

Edit:

Stack Trace is below, The error is not caused by the library, it is when accessing the resource. It happens when the image is embedded or linked – seems to make no difference, but doesn’t happen with a (binary) PDF file.

Thanks for looking at this…

at System.Runtime.Serialization.Formatters.Binary.BinaryFormatter.Deserialize(Stream serializationStream)
at System.Resources.ResourceReader.<>c__DisplayClass7_0`1.b__0(Object obj, Stream stream)
at System.Resources.ResourceReader.DeserializeObject(Int32 typeIndex)
at System.Resources.ResourceReader._LoadObjectV2(Int32 pos, ResourceTypeCode& typeCode)
at System.Resources.ResourceReader.LoadObjectV2(Int32 pos, ResourceTypeCode& typeCode)
at System.Resources.ResourceReader.LoadObject(Int32 pos, ResourceTypeCode& typeCode)
at System.Resources.RuntimeResourceSet.GetObject(String key, Boolean ignoreCase, Boolean isString)
at System.Resources.RuntimeResourceSet.GetObject(String key, Boolean ignoreCase)
at System.Resources.ResourceManager.GetObject(String name, CultureInfo culture, Boolean wrapUnmanagedMemStream)
at System.Resources.ResourceManager.GetObject(String name, CultureInfo culture)
at Project.Infrastructure.Properties.Resources.get_Logo() in C:DevelopmentProjectProject.InfrastructurePropertiesResources.Designer.cs:line 227
at Project.Infrastructure.Models.ShowWording.Generate() in C:DevelopmentProjectProject.InfrastructureModelsShowWording.cs:line 146

Tags:

4

Answers


  1. Chosen as BEST ANSWER
    0

    I found a workaround, that doesn't make sense, but I trust it more than allowing unsafe Binary Formatters in my projects.

    Following on from your suggestions I tried deleting and recreating the resource file, removing and re-adding the affected image, but nothing worked.

    So, because reading a pdf file worked, I removed the .png extension from my image and saved it as a File resource.

    I can now read it from resources as binary and convert it to Bitmap and it works fine.

    using (var ms = new MemoryStream(Properties.Resources.LogoBinary))
{
   return  new Bitmap(ms);
}

    I can't believe this is a bug in the framework, as it would affect a lot of people, it must be something peculiar to my project, but it is odd that I get the BinaryFormatter exception when reading an image, but not a Binary file...

    Thanks everyone for your guidance & assistance...


  2. 0

    BinaryFormatter serialization methods are obsolete and prohibited in ASP.NET apps. However, the article does not say anything about the resourceReader or other classes, even if the same security warning applies.

    So I would presume that this is a bug. At a minimum I would have expected the documentation to explicitly state that binary resources are not supported, or any other compatibility constraints. I would consider creating a minimal reproducible example to ensure there is no other weird build issue causing the problem, and posting a bug report about it.

    Note that there seem to be various issues reported about binary resources in .net core, but it is unclear to me what the final resolution is.

    As a workaround there is an option to re enable binaryformatter in .Net 5 asp.Net apps by adding the following to the project file.

    <PropertyGroup>
  <TargetFramework>net5.0</TargetFramework>
  <!-- Warning: Setting the following switch is *NOT* recommended in web apps. -->
  <EnableUnsafeBinaryFormatterSerialization>true</EnableUnsafeBinaryFormatterSerialization>
</PropertyGroup>
    Login or Signup to reply.
  3. 0

    It seems that Visual Studio/.Net previously made images added as resources accessible as Image, which makes use of the BinaryFormatter, while if I now add images they are accessible as byte[].

    I was able to update the resource file to only return byte[] by simply:

    1. Replacing System.Drawing.Bitmap with byte[] in the *.Designer.cs file
    2. Replacing System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a with System.Byte[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 in the *.resx file

    Previously :

    // In the *.Designer.cs file
public static System.Drawing.Bitmap MyImage {
  get {
    object obj = ResourceManager.GetObject("MyImage", resourceCulture);
    return ((System.Drawing.Bitmap)(obj));
  }
}

// In the *.resx file
<data name="MyImage" type="System.Resources.ResXFileRef, System.Windows.Forms">
    <value>PathToMyImage.jpg;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
  </data>

    Now:

    // In the *.Designer.cs file
public static byte[] MyImage {
  get {
    object obj = ResourceManager.GetObject("MyImage", resourceCulture);
    return ((byte[])(obj));
  }
}

// In the *.resx file
<data name="MyImage" type="System.Resources.ResXFileRef, System.Windows.Forms">
    <value>PathToMyImage.jpg;System.Byte[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value></value>
  </data>
    Login or Signup to reply.
  4. 0

    Add the following property group to your .csproj file:

    <PropertyGroup>
  <TargetFramework>net6.0</TargetFramework>
  <!-- Warning: Setting the following switch is *NOT* recommended in web apps. -->
  <EnableUnsafeBinaryFormatterSerialization>true</EnableUnsafeBinaryFormatterSerialization>
</PropertyGroup>
    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search