21

Is it wise to redistribute the pdb files along with a commercial application?

Occasionally, I'm using the stack trace to get a more detailed error reporting logs from the deployed applications; can this functionality be achieved without relying to those files?

Also, how much hints of the original source code does these files contain? Would it be easier to reverse-engineer my application using it?

Pang
  • 9,564
  • 146
  • 81
  • 122
Silver Dragon
  • 5,480
  • 6
  • 41
  • 73

5 Answers5

13

It basically adds information for:

  • All non-public types, interfaces, structures, classes
  • Local variables in functions
  • Source file names for relevant code and corresponding line numbers in source code.

which all combined makes reverse engineering very easy for native code.

Luckily you can create a stripped down version of your PDB files which only contains public information with /PDBSTRIPPED parameter.

Oh you edited to add C#/.NET, so I'm not sure if "PDBSTRIPPED" is applicable. However .NET applications are very easy to reverse engineer even without any symbol information. I wouldn't mind including them in a .NET project.

Sedat Kapanoglu
  • 46,641
  • 25
  • 114
  • 148
4

The managed .pdb files contain the following information:

  • The names of all local variables
  • The names of all source code files and the mapping from IL instructions onto lines within those files.

Everything else is contained in the binary itself, including the names of all types, members and function arguments.

Source: PDB files: what every developer must know.

Roman Starkov
  • 59,298
  • 38
  • 251
  • 324
3

You could try using dia2dump to look at the contents.

Nick
  • 27,566
  • 12
  • 60
  • 72
2

Newer .Net compiler versions can embed the full source code with all comments in the PDB file.

The free JetBrains dotPeek decompiler uses this Blob to show the decompiled code. Check Assembly -> Metadata -> Portable PDB Metadata -> CustomDebugInformation -> Kind: guid 0003 0E8A571B-6926-466E-B4AD-8AB04611F5FE (Embedded Source).

This is documented here: https://github.com/dotnet/corefx/blob/master/src/System.Reflection.Metadata/specs/PortablePdb-Metadata.md#EmbeddedSource

Roman Bartke
  • 336
  • 3
  • 6
1

The PDB-files also include all comments of your source files. So with EXE AND PDB-file it is possible to generate a 1:1-copy from your original source code.

user1027167
  • 4,320
  • 6
  • 33
  • 40
  • I don't think so. The comments are not in pdb files neither you can generate 1:1 copy from pdb without the source files. – ActiveX Nov 30 '22 at 19:25