.NET x86 vs x64 hell (BadImageFormatException)

As far as I know, .NET platform architecture were similar to JVM's architecture, each .NET assembly or DLL consist of intermediate language (IL) bytecodes similar to JVM bytecode. So in theory, there suppose to be no problem running .NET DLL in x64 platform without using 32-bit support, right?

It turns out the reality is not like that. I recently found out that there is 3 kind of target in Visual Studio Project settings :
  • Anycpu
  • x86
  • x64
For Anycpu, the resulting DLL is loadable in both environment (x86 and x64). The x64 target is only loadable in 64-bit platform. The x86 target would ensure the resulting DLL runs either in 32 bit platform or, in case of physical 64-bit platform, in the WOW64 x86 emulator. This means such DLL would be unable to run in real-64 bit environment, such as in Microsoft IIS with 32-bit app support flag turned off.

The characteristic of such DLL can be determined using Corflags.exe tool :

 D:\sources\SmileDevRoot\Code\az_source>corflags obout_AJAXPage.dll
Microsoft (R) .NET Framework CorFlags Conversion Tool.  Version  3.5.21022.8
Copyright (c) Microsoft Corporation.  All rights reserved.

Version   : v2.0.50727
CLR Header: 2.5
PE        : PE32
CorFlags  : 9
ILONLY    : 1
32BIT     : 0
Signed    : 1

 PE32 : this means 32-bit executable format. This format is readable both in x64 (64 bit) and x86 (a.k.a 32-bit) environments. The opposite : PE32+, the format that only readable in x64 environment
 ILONLY : 1 means the DLL only contains IL code. The opposite, 0, means the DLL contains mix of native (32-bit or 64-bit) code modules and IL code module.
32BIT : 0 means the DLL could run both in 64 and 32 bit environments. The opposite, 1, means the DLL must be run in 32 bit environment.

So, even though the DLL consists of only IL code, and no native x86/x64 code, a DLL with 32BIT set to 1 still would refuse to load on x64 platform, resulting in BadImageFormatException.  Why on earth someone would want to do that? Well, the DLL might calls functions from a native 32-bit DLL.
But you might want to try to force this DLL to run in 64-bit mode, to see whether it actually need a 32-bit platform or not :

D:\sources\SmileDevRoot\Code\az_source>corflags obout_ASPTreeView_2_NET.dll
Microsoft (R) .NET Framework CorFlags Conversion Tool.  Version  3.5.21022.8
Copyright (c) Microsoft Corporation.  All rights reserved.

Version   : v1.1.4322
CLR Header: 2.0
PE        : PE32
CorFlags  : 11
ILONLY    : 1
32BIT     : 1
Signed    : 1
D:\sources\SmileDevRoot\Code\az_source>corflags obout_ASPTreeView_2_NET.dll /32B
IT-
Microsoft (R) .NET Framework CorFlags Conversion Tool.  Version  3.5.21022.8
Copyright (c) Microsoft Corporation.  All rights reserved.

corflags : error CF012 : The specified file is strong name signed.  Use /Force t
o force the update.
 Well, it failed at the first try. I will post here if there is any progress in forcing this DLL into 64 bit mode :)

Comments

Post a Comment

Popular posts from this blog

Long running process in Linux using PHP

Background To do stuff, I usually create web-based applications written in PHP. Sometimes we need to run something that takes a long time, far longer than the 10 second psychological limit for web pages. A bit of googling in stack overflow found us this  http://stackoverflow.com/questions/2212635/best-way-to-manage-long-running-php-script , but I will tell the similar story with a different solution. One of the long running tasks that need to be run is a Pentaho data integration transformation. Difficulties in long running PHP scripts I encountered some problems when trying to make PHP do long running tasks : PHP script timeout. This could be solved by running set_time_limit(0); before the long running tasks. Memory leaks. The framework I normally use have a bit of memory issues, this can be solved either by patching the framework (ok, it is a bit difficult to do, but I did something similar in the past ) or splitting the data to process into several batches. And if you
Read more

Reverse Engineering Reptile Kernel module to Extract Authentication code

Image
 This time I will show how to (partially) reverse engineer a linux kernel module. The linux kernel module is larger than usual kernel module because it is actually a Reptile-based rootkit dropped by some hacker.  Part 1. Get basic module information First we gather basic module info by using modinfo : [root@lb lkrg-0.9.1]# modinfo falc0n filename:       /lib/modules/3.10.0-1127.10.1.el7.x86_64/kernel/sdc/falc0n.ko intree:         Y license:         GPL retpoline:       Y rhelversion:     7.8 srcversion:     81F508029A53F7490CCDB44 depends:         vermagic:       3.10.0-1127.10.1.el7.x86_64 SMP mod_unload modversions   We could also refer to the kernel module file not yet installed in the OS : [root@lb lkrg-0.9.1]# file falc0n.ko falc0n.ko: ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=1bde6abf4732eb620983032a47fbcf07689ece11, not stripped [root@lb lkrg-0.9.1]# modinfo falc0n.ko filename:       /root/lkrg-0.9.1/falc0n.ko intree:         Y license:         GPL retp
Read more

SAP System Copy Lessons Learned

Image
Background Earlier this year I was part of a team that does System Copy for a 20 terabyte plus SAP ERP RM-CA System. And just now I am involved in doing two system copy in just over one week, for much lesser amount of data. I think I would note some lessons learned from the experience in this blog. For the record, we are migrating from HP/UX and AIX to Linux x86 platform. Things that go wrong First, following the System Copy guide carefully is quite a lot of work - mainly because some important stuff are hidden in references in the guide. And reading a SAP note that are referenced in another SAP note, that are referenced in Installation Guide.. is a bit too much. Let me describe what thing goes wrong. VM Time drift The Oracle RAC Cluster have time drift problem, killing one instance when the other is shutting down. The cure for our VMWare-based Linux database server is hidden in SAP Note 989963 "Linux VMWARE Timing", which is basically add a tinker panic 0 in the
Read more