Security

This release contains security hardening fixes for a number of malformed-input parsing and path-traversal vulnerabilities:

• Bounds-checking for malformed event payloads in the BPerf ULZ777 decompressor and event-record parser
• Bounds-checking for malformed metadata in the GCDynamic, RegisteredTraceEventParser (TDH), Dynamic, and EventPipe V3 parsers
• Bounds-checking for malformed PE CodeView and Resource directory entries
• Path containment hardening for PDB extraction (zipped ETL + container PDBs), DiagSession resource extraction, R2R perf map writes, PdbScope module paths, and dynamic manifest writes
• Path-traversal and command-execution hardening for Source Server lookups

What's Changed

• Update CsWin32 Package Version by @brianrob in #2425
• Fix incorrect field offsets when parsing ETW events with fixed-count array fields by @Copilot in #2427
• Retarget Native Profiler Builds To VS 2026 V145 Toolset by @brianrob in #2428
• Stabilize XamlMessageBox UI-thread dispatch test by @brianrob in #2430

Full Changelog: v3.2.3...v3.2.4

What's Changed

• Upgrade Microsoft.Windows.CsWin32 to 0.3.209 (GHSA-ghhp-997w-qr28) by @Copilot in #2409
• Enable Spectre mitigations and linker optimizations for EtwClrProfiler by @danmoseley in #2410
• Fix 'unhanded' / 'occured' typos in UnhandledExceptionDialog body text by @SAY-5 in #2413
• Fix GCStats failures on dotnet trace gc-verbose collections (#2414) by @cincuranet in #2415
• C entrypoint fixes by @zachcmadsen in #2421

New Contributors

• @SAY-5 made their first contribution in #2413

Full Changelog: v3.2.2...v3.2.3

What's Changed

• Fix PDB Symbol Resolution for Unmerged Windows Traces by @brianrob in #2407

Full Changelog: v3.2.1...v3.2.2

Native and R2R Symbol Download and Parsing Now Available

As of this release, if you capture a trace using dotnet-trace collect-linux or record-trace, native and R2R symbols can now be downloaded and resolved at analysis time. All .NET symbols (both native and R2R) are available on the Microsoft Symbol Server. Additionally, many Azure Linux symbol files are available on the Microsoft Symbol Server. For those targeting other distros, PerfView and TraceEvent are capable of pulling those symbol files from local directories by adding a local symbol path pointing to the files.

Most of the work for this was completed in PerfView and TraceEvent 3.2.1 with the final required fixes present in this release.

What's Changed

• Optimize nettrace-to-TraceLog Conversion by @brianrob in #2403
• Embed missing System.Text.Json transitive dependencies in PerfView by @brianrob in #2404

Full Changelog: v3.2.0...v3.2.1

What's Changed

• Fix Debug.Assert failures in SpeedScope tests and DynamicTraceEventParser by @brianrob in #2368
• Add TraceParserGen.Tests project and fix code generation bugs by @Copilot in #2308
• Update UsersGuide.htm by @AftabAnsari10662 in #2370
• Strip .il and .ni suffixes from TraceModuleFile.Name by @leculver in #2364
• Handle provider names that start with a numeric digit. by @brianrob in #2369
• Dispose WebView2 controls before Environment.Exit to prevent finalizer crash by @brianrob in #2371
• Refactor GetManifestForRegisteredProvider to use XmlWriter by @Copilot in #2353
• docs: Add investigation guidance for JIT-inlined missing stack frames by @Copilot in #2377
• Fix spurious BROKEN frame at top of Linux thread stacks in CPU Stacks viewer by @Copilot in #2375
• Fix NRE in AddUniversalDynamicSymbol for invalid symbol address ranges by @brianrob in #2376
• Add missing authority parameter to log by @hoyosjs in #2379
• Replace individual code owners with microsoft/perfview-reviewers group by @brianrob in #2381
• Fix Dynamic Symbol Resolution for Mappings Shared Across Multiple Processes in Universal Traces by @brianrob in #2380
• Implement Symbol Demanglers for Linux Binaries by @brianrob in #2383
• Fix NullReferenceException race condition in TraceLog.AllocLookup/FreeLookup by @Copilot in #2387
• Add typed schema for AllocationSampled (EventID 303, .NET 10+) in ClrTraceEventParser by @Copilot in #2388
• Add ElfSymbolModule for Parsing ELF Symbol Tables by @brianrob in #2384
• Update BDN to latest version. by @cincuranet in #2389
• Fixed overflow when working with large dumps by @remilema in #2399
• Fix XamlMessageBox STA Threading Crash from Background Threads by @brianrob in #2400
• Add ELF Symbol Resolution for Linux .nettrace Traces by @brianrob in #2397
• Add Missing WCF Event Templates by @brianrob in #2390

New Contributors

• @AftabAnsari10662 made their first contribution in #2370
• @remilema made their first contribution in #2399

Full Changelog: v3.1.30...v3.2.0

What's Changed

• doc: fix typos by @chinwobble in #2359
• Fix SourceLink parsing to support both wildcard and exact path mappings by @ivberg in #2355
• add horizontal scrolling to eventviewer by @logangeorge01 in #2361
• Add SHA-384 and SHA-512 hash algorithm support for PDB checksums by @Copilot in #2366

New Contributors

• @chinwobble made their first contribution in #2359
• @logangeorge01 made their first contribution in #2361

Full Changelog: v3.1.29...v3.1.30

What's Changed

• Warn users when circular buffer overflow causes missing type info in allocation views for selected processes by @Copilot in #2326
• Special-Case BitMask Parsing by @brianrob in #2327
• Refactor PEFile and PEHeader to use ReadOnlySpan exclusively with zero-copy buffer sharing by @Copilot in #2317
• Fix cdbstack parser dropping last sample and missing metrics by @Copilot in #2329
• Fix unhandled ArgumentOutOfRangeException when exporting FlameGraph with unrendered canvas by @Copilot in #2339
• Add guidance for capturing ETW traces in Kubernetes pods by @Copilot in #2344
• Fix merge command line order in kubernetes documentation by @Copilot in #2346
• Fix GetRegisteredOrEnabledProviders() documentation claiming list is small by @Copilot in #2348
• Fix duplicate stringTable elements in instrumentation manifest by @Copilot in #2347
• Fix Histogram.AddMetric losing values after single-bucket to array transition by @Copilot in #2337
• Fix clipboard copy formatting based on selection dimensions in Stack Viewer by @Copilot in #2332
• Fix XML escaping in GetManifestForRegisteredProvider by @Copilot in #2351
• Fix race condition in ProviderNameToGuid causing ERROR_INSUFFICIENT_BUFFER crashes by @Copilot in #2357

Full Changelog: v3.1.28...v3.1.29

What's Changed

• Add support for Boolean8 to NetTrace V6. by @noahfalk in #2318
• Implement A Thread Time View for Universal Traces by @brianrob in #2320
• Remove Incorrect Argument Description by @brianrob in #2323

Full Changelog: v3.1.26...v3.1.28

Roll-up through 2025/10/10.

• Only dispose non-null handles in ETWTraceEventSource #2291
• Small cleanup in NettraceUniversalConverter #2292
• Fix hyperlink focus visibility in dark mode and improve keyboard navigation #2295
• Gracefully handle invalid characters in PATH #2296
• Fix copying First/Last columns with pipe symbols to work in time range input #2304

Roll-up through 2025/08/26.

• Implement NuGet Central Package Version Management [#2262]
• Fix broken stacks warning for universal traces [#2268]
• Fix jitted code symbols in universal traces to show assembly names instead of memfd:doublemapper [#2269]
• Use themed background brush for menu and filter [#2272]
• Improve rendering and dark mode [#2274]
• Implement configurable symbol server authentication with /SymbolsAuth command line argument for PerfView and HeapDump [#2278]
• Add a themed dialog [#2276]
• Fix regression: "Goto Item in Callers/Callees" now accumulates across all threads [#2284]
• Fix parsing issues and add support for additional events to the Linux perf text file parser [#2286]
• Fix TraceLog live session RelatedActivityID/ContainerID corruption by preserving ExtendedData [#2285]
• NetTrace LabelList metadata overrides and metadata flushing [#2281]
• Fix NullReferenceException in ProviderBrowser.LevelSelected when deselecting level [#2289]