Debug vs Release in optimization of .net (concerns when distributing to users)

Question

Is there any security or performance issues with distributing the Debug vs the Release build to the public?

Most of the time I just pack the .exe file in the Debug folder (along with required dependencies) and give it to users.

Are there any reason to prefer one more than the other to be distributed ?

Also see [performance-differences-between-debug-and-release-builds?lq=1](http://stackoverflow.com/questions/4043821/performance-differences-between-debug-and-release-builds?lq=1) — nawfal, Oct 14 '13 at 06:38

score 10 · Answer 1 · edited May 23 '17 at 12:16

10

Yes, of course there are - both security and performance implications.

Debug builds contain more information than release builds and many compiler optimizations are off for debug builds.

Also see Debug/Release difference here.

Are there any reason to prefer one more than the other to be distributed ?

Yes. If you want to have a faster binary that has been compiled with optimizations, use release.

edited May 23 '17 at 12:16

Community

1
1

answered Jan 06 '13 at 16:12

Oded

489,969
99
883
1,009

2

Hanselman gets this pretty wrong (as usual), the default release build does in fact generate debug symbols. It is not very relevant to this question anyway, they don't affect anything and you just don't ship the pdbs. – Hans Passant Jan 06 '13 at 16:46
@HansPassant - Thanks for that. I thought the symbols were only in the pdbs and that was a bit strange in the post. – Oded Jan 06 '13 at 18:18
What security implications exactly? – yakya Jun 11 '18 at 13:13

score 8 · Accepted Answer · edited May 23 '17 at 11:48

There is no security issue that I can think of. There is most certainly a performance issue, the Debug build of your assemblies contains an attribute (DebuggableAttribute) that will always prevent the jitter optimizer from optimizing the code. This can make a great deal of difference on the perf of the running program. Optimizations performed by the jitter are documented in this answer.

You could have a problem with memory consumption. The garbage collector will operate differently, keeping local variables alive until the end of the method body. This is a corner case and such a problem should have been diagnosed while testing the app, assuming you used realistic data.

Specific to VB.NET, shipping the Debug build can very easily cause your program to crash with an OutOfMemoryException when it is run on your user's machine without a debugger attached. It fails due to a leak on WeakReferences, used by Edit+Continue to keep track of classes that have an event handler with the WithEvents keyword.

If you don't have a need for the perf enhancements produced by the jitter optimizer and don't ship VB.NET assemblies then there isn't much to worry about.

Debug vs Release in optimization of .net (concerns when distributing to users)

2 Answers2