CodeQL library for C#
Search

Module Serialization

Provides classes to identify any .Net serializable type such as types attributed with SerializableAttribute and types implementing the ISerializable interface.

Import path

import semmle.code.csharp.serialization.Serialization

Imports

csharp

The default C# QL library.

Classes

BinarySerializableType

To be serializable by the BinaryFormatter, a class must have the Serializable attribute.

CustomBinarySerializableType

If a class annotated with the Serializable attribute also implements ISerializable, then it is serialized and deserialized in a special way.

SerializableType

A serializable type, using any of the built-in .NET serialization mechanisms.

SerializationConstructor

A constructor with SerializationInfo and StreamingContext parameters.