You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@biosli I tested some funcs. some crashes. what puzzle me is that even offset changed normal dynamic binding still work without hook.maybe it's nothing to do with offset.
I found some case that vm_protect return KERN_SUCCESS , but memory don't set VM_PROT_WRITE success. like mprotect method
oldProtection = get_protection(rebindings); is wrong, It save struct rebindings_entry *rebindings memory protection. We should save section protection.
I commit code that oldProtection = get_protection((void *)trunc_address);.
and I found a problem when program set same section protection in multithread(iOS 14.5).
Activity
cfxiao commentedon Feb 3, 2021
cfxiao commentedon Feb 3, 2021
Hook
fsync
also crashes.feikang commentedon Feb 3, 2021
have the same problem. I can reproduce the crash with iPhone Xs and OS version 14.5(18E5140j) beta. but iPhone 7 can't reproduce it.
leirenbaobao commentedon Feb 4, 2021
@cfxiao can you supply detail codes? which func been hooked?
biosli commentedon Feb 4, 2021
@leirenbaobao it seems that he hook the dispatch_sync.
And I try to hook malloc / realloc get same crash report.
I'm pretty sure the iOS 14.5 beta at newer phones such as iPhoneXs, has change the memory offset of core library.
leirenbaobao commentedon Feb 7, 2021
@biosli I tested some funcs. some crashes. what puzzle me is that even offset changed normal dynamic binding still work without hook.maybe it's nothing to do with offset.
leirenbaobao commentedon Feb 8, 2021
I suppose write to a read-only address. https://stackoverflow.com/questions/19741409/whats-the-difference-between-code-1-and-code-2-in-exc-bad-access
maniackk commentedon Feb 28, 2021
I found some case that vm_protect return KERN_SUCCESS , but memory don't set VM_PROT_WRITE success. like mprotect method
oldProtection = get_protection(rebindings);
is wrong, It savestruct rebindings_entry *rebindings
memory protection. We should save section protection.I commit code that
oldProtection = get_protection((void *)trunc_address);
.and I found a problem when program set same section protection in multithread(iOS 14.5).
https://github.com/facebook/fishhook/pull/84/files
maniackk commentedon Mar 4, 2021
#84 fix bug
5 remaining items