ST_Raster is a security Risk? Why?

3898
6
06-13-2015 10:35 AM
ThomasColson
MVP Frequent Contributor

Apparently, when enabling ArcGIS Help 10.1 ST_Raster in SQL 2008/12 SDE (10.2 or 10.3) databases, the assembly is set to "Unsafe" by default. Attempts to set it to "Safe" result in

Msg 6218, Level 16, State 2, Line 3
CREATE ASSEMBLY for assembly 'libst_raster_sql' failed because assembly 'libst_raster_sql' failed verification. Check if the referenced assemblies are up-to-date and trusted (for external_access or unsafe) to execute in the database. CLR Verifier error messages if any will follow this message
[ : <Module>::.cctor][mdToken=0x6000eeb][offset 0x00000000] initlocals must be set for verifiable methods with one or more local variables.
[ : <Module>::_atexit_m][mdToken=0x6000008][offset 0x00000000] Unmanaged pointers are not a verifiable type.
[ : <Module>::atexit][mdToken=0x6000009][offset 0x00000000] Unmanaged pointers are not a verifiable type.
[ : <Module>::?A0x06aa64bb.??__E?A0x06aa64bb@RCS_Tag@@YMXXZ][mdToken=0x600000b][offset 0x00000000] Cannot modify an imaged based (RVA) static
[ : <Module>::FileSearchNode.{ctor}][mdToken=0x600000c][offset 0x00000000] Unmanaged pointers are not a verifiable type.
[ : <Module>::FileSearchNode.__vecDelDtor][mdToken=0x600000d][offset 0x00000005] Unmanaged pointers are not a verifiable type.
[ : <Module>::FileSearchNode.__vecDelDtor][mdToken=0x600000d][offset 0x0000002B] Unmanaged pointers are not a verifiable type.
[ : <Module>::FileSearchNode.{dtor}][mdToken=0x600000e][offset 0x00000000] Unmanaged pointers are not a verifiable type.
[ : <Module>::FileSearchNode.reset][mdToken=0x600000f][offset 0x00000000] Unmanaged pointers are not a verifiable type.
[ : <Module>::FileSearchNode.alloc][mdToken=0x6000010][offset 0x00000001] Unmanaged pointers are not a verifiable type.
[ : <Module>::?A0x06aa64bb.??__E??_R0PEAD@8@@YMXXZ][mdToken=0x6000011][offset 0x0000000A][found address of value '<CppImplementationDetails>.$ArrayType$$$BY01Q6MXXZ'][expected address of Long] Unexpected type on the stack.
[ : <Module>::?A0x06aa64bb.??__E??_R0PEAD@8@@YMXXZ][mdToken=0x6000011][offset 0x0000000A][found address of value '<CppImplementationDetails>.$ArrayType$$$BY01Q6MXXZ'] Unexpected type on the stack.
[ : <Module>::?A0x06aa64bb.??__E??_R0PEAX@8@@YMXXZ][mdToken=0x6000012][offset 0x0000...

That surely can't be the case?!?!??!  We'll be other-than-ESRI database app customers pretty quickly if we can't use SDE to store 50% of our data.....instructions, as per Install ST_Raster in SQL Server—Help | ArcGIS for Desktop , such as installing it as sysadmin, have been followed. Still an unsafe assembly.


The ESRI-provided SQL script to register the assembly includes these lines, which are both security holes.

CREATE ASSEMBLY esri_raster FROM '$(st_raster_path)' WITH permission_set=UNSAFE
.....
EXEC sp_configure 'clr enabled',1

Some shifting of IT security winds are putting a lot of scrutiny on stuff like CLR and unsafe assemblies, not sure why ESRI would push out a product, that pretty soon, no one is going to be able to use due to stuff like this.

Tags (3)
0 Kudos
6 Replies
George_Thompson
Esri Frequent Contributor

Hi Thomas,

I would recommend that you create a case with Technical Support to have this looked into in more detail.

Here is the reference to the other GeoNet post: https://community.esri.com/thread/120204

Thanks!

George T.

GeodatabaseEnterprise GIS

--- George T.
0 Kudos
ThomasColson
MVP Frequent Contributor

I see this isn't fixed with 10.4. http://downloads.esri.com/support/downloads/other_/104-IssuesAddressedList.pdf   How could something as simple as digitally signing a dll be so hard for Esri?

0 Kudos
George_Thompson
Esri Frequent Contributor

Hi Thomas,

I would recommend filling out this form: Report a Security Concern | ArcGIS

Also feel free to visit Trust | ArcGIS  with any security related concerns.

Did you ever open a support case?

-George

--- George T.
ThomasColson
MVP Frequent Contributor

Yes, on both counts. No response, on both counts.

0 Kudos
JoshuaBixby
MVP Esteemed Contributor

Not surprising, but a sad state of affairs nonetheless. 

0 Kudos
George_Thompson
Esri Frequent Contributor

Thomas,

I just checked and the case that you logged back in Sept of 2015 had an enhancement logged.

It has been closed as a Known Limit:

ST_Raster uses external Win32 APIs for the Esri projection engine and spatial reference system. SAFE permissions cannot access external resources.

Hope this help clear up some of the confusion.

-George

--- George T.