T92-2020 Application of specific Microsoft Patches may cause failures in opening or searching Workbook Experiments
BIOVIA Workbook
Program
BIOVIA Workbook 2018, 2019, 2020
Operating Systems
Windows 10 and Windows Server 2019
Description
In Workbook 2018 and later, applying recent Microsoft patches for the cumulative update of .NET Framework 3.5, 4.7.2, and 4.8 (KB4566516, KB4565632, KB4565625) on Windows 10 clients or Windows Server 2019 application servers may cause issues with some experiments when opening and indexing the experiment for search purposes. These security patches enforce restrictions on the types of objects that may be present when deserializing a DataSet or DataTable from XML. If encountering a different object than expected, which may be the case for older Workbook experiments, the error message shown below will be displayed:
Error details:
Symyx.Framework.Vault.Exceptions.VaultException: An unexpected error occurred while retrieving vault objects ---> System.InvalidOperationException: Type 'Symyx.Framework.Vault.CustomSerializationPropertyValueWrapper`1[[Symyx.Framework.Vault.CheckoutState, Symyx.Framework, Version=19.1.1.3296, Culture=neutral, PublicKeyToken=fb4b5791c48b7e8a]], Symyx.Framework, Version=19.1.1.3296, Culture=neutral, PublicKeyToken=fb4b5791c48b7e8a' is not allowed here. See https://go.microsoft.com/fwlink/?linkid=2132227 for more information.
at System.Data.TypeLimiter.EnsureTypeIsAllowed(Type type, TypeLimiter capturedLimiter)
Resolution
The resolution is to add the following registry settings on Windows 10 client machines and Windows 2019 application servers, which will disable the type limiting checks of objects during deserialization. An Administrator must perform these changes, and the registry alterations will affect all applications running on the device.
Type | Value |
Registry keys | HKLM\SOFTWARE\Microsoft\.NETFramework\AppContext and HKLM\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\AppContext |
Value name | Switch.System.Data.AllowArbitraryDataSetTypeInstantiation |
Value type | REG_SZ |
Value data | true |
For more information on this topic, please see the following link from Microsoft:
https://docs.microsoft.com/en-us/dotnet/framework/data/adonet/dataset-datatable-dataview/security-guidance
BIOVIA logged this defect as NBK-32085.
BIOVIA Support
If you have any questions, please contact BIOVIA Support.