BinaryFormatter.UnsafeDeserializeMethodResponse Method

Definition

Namespace:

System.Runtime.Serialization.Formatters.Binary

Assembly:

mscorlib.dll

Deserializes a response to a remote method call from the provided Stream.

public:
 System::Object ^ UnsafeDeserializeMethodResponse(System::IO::Stream ^ serializationStream, System::Runtime::Remoting::Messaging::HeaderHandler ^ handler, System::Runtime::Remoting::Messaging::IMethodCallMessage ^ methodCallMessage);

[System.Runtime.InteropServices.ComVisible(false)]
[System.Security.SecurityCritical]
public object UnsafeDeserializeMethodResponse (System.IO.Stream serializationStream, System.Runtime.Remoting.Messaging.HeaderHandler handler, System.Runtime.Remoting.Messaging.IMethodCallMessage methodCallMessage);

[<System.Runtime.InteropServices.ComVisible(false)>]
[<System.Security.SecurityCritical>]
member this.UnsafeDeserializeMethodResponse : System.IO.Stream * System.Runtime.Remoting.Messaging.HeaderHandler * System.Runtime.Remoting.Messaging.IMethodCallMessage -> obj

Public Function UnsafeDeserializeMethodResponse (serializationStream As Stream, handler As HeaderHandler, methodCallMessage As IMethodCallMessage) As Object

Parameters

serializationStream

Stream

The stream from which to deserialize the object graph.

handler

HeaderHandler

The HeaderHandler that handles any headers in the serializationStream. Can be null.

methodCallMessage

IMethodCallMessage

The IMethodCallMessage that contains details about where the call came from.

Returns

Object

The deserialized response to the remote method call.

Attributes

ComVisibleAttribute SecurityCriticalAttribute

Exceptions

ArgumentNullException

The serializationStream is null.

SerializationException

The serializationStream supports seeking, but its length is 0.

SecurityException

The caller does not have the required permission.

Remarks

Warning

BinaryFormatter is insecure and can't be made secure. For more information, see the BinaryFormatter security guide.

Details about the caller object are not sent to the remote object during the method call. Instead, these details are obtained from the original method call that's passed to the current method in the methodCallMessage parameter.

For successful deserialization, the current position in the stream must be at the beginning of the object graph.

Important

Calling this method with untrusted data is a security risk. Call this method only with trusted data. For more information, see Validate All Inputs.