Skip to content

iOS 14.5 crashed #82

Open
Open
@cfxiao

Description

@cfxiao
0 perform_rebinding_with_section(fishhook.c:137)
1 perform_rebinding_with_section(fishhook.c:131)
2 rebind_symbols_for_image(fishhook.c:208)
3 rebind_symbols(fishhook.c:252)

iOS 14.5 crashed when hook GCD.

Activity

cfxiao

cfxiao commented on Feb 3, 2021

@cfxiao
Author

image

cfxiao

cfxiao commented on Feb 3, 2021

@cfxiao
Author

Hook fsync also crashes.

feikang

feikang commented on Feb 3, 2021

@feikang

have the same problem. I can reproduce the crash with iPhone Xs and OS version 14.5(18E5140j) beta. but iPhone 7 can't reproduce it.

leirenbaobao

leirenbaobao commented on Feb 4, 2021

@leirenbaobao

@cfxiao can you supply detail codes? which func been hooked?

biosli

biosli commented on Feb 4, 2021

@biosli

@leirenbaobao it seems that he hook the dispatch_sync.
And I try to hook malloc / realloc get same crash report.

I'm pretty sure the iOS 14.5 beta at newer phones such as iPhoneXs, has change the memory offset of core library.

leirenbaobao

leirenbaobao commented on Feb 7, 2021

@leirenbaobao

@biosli I tested some funcs. some crashes. what puzzle me is that even offset changed normal dynamic binding still work without hook.maybe it's nothing to do with offset.

leirenbaobao

leirenbaobao commented on Feb 8, 2021

@leirenbaobao
maniackk

maniackk commented on Feb 28, 2021

@maniackk

I found some case that vm_protect return KERN_SUCCESS , but memory don't set VM_PROT_WRITE success. like mprotect method

oldProtection = get_protection(rebindings); is wrong, It save struct rebindings_entry *rebindings memory protection. We should save section protection.

I commit code that oldProtection = get_protection((void *)trunc_address);.

and I found a problem when program set same section protection in multithread(iOS 14.5).

https://github.com/facebook/fishhook/pull/84/files

maniackk

maniackk commented on Mar 4, 2021

@maniackk

@leirenbaobao it seems that he hook the dispatch_sync.
And I try to hook malloc / realloc get same crash report.

I'm pretty sure the iOS 14.5 beta at newer phones such as iPhoneXs, has change the memory offset of core library.

#84 fix bug

5 remaining items

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @kaspesla@biosli@leirenbaobao@cfxiao@maniackk

        Issue actions

          iOS 14.5 crashed · Issue #82 · facebook/fishhook