This project contains various documents published by Google Project Zero and small tools that don't need a separate GitHub project.
For individual topics, see subdirectories.
This is not an official Google product.
Project Zero Docs and Tools
Home Page: https://googleprojectzero.blogspot.com
License: Apache License 2.0
From a comment by saagarjha https://gist.github.com/saagarjha/a70d44951cb72f82efee3317d80ac07f?permalink_comment_id=4339417#gistcomment-4339417
setting the environment variable DYLD_SHARED_REGION allows a successful run in Ventura
Not sure if there is a smarter way to go about it, but it works
M1 Mac mini
macOS 11.6
> make
clang runner.c -o runner
# Replace this identity, find available certificates usign `security find-identity`
codesign -s "560DD5E3C43BCB88276E4A46407F87AF26997823" --entitlements entitlements.xml --force runner
runner: replacing existing signature
clang interpose.c -arch arm64 -o interpose.dylib -shared -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk
# Can link against existing frameworks/libraries here by copying them onto ./Frameworks and adding `-F /Users/minim1/Desktop/Code/p0tools/iOSOnMac/Frameworks -framework AME_OF_FRAMEWORK -Wl,-rpath,/Users/minim1/Desktop/Code/p0tools/iOSOnMac/Frameworks
clang main.c -arch arm64 -o main -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk interpose.dylib
> ./runner main
[*] Preparing to execute iOS binary main
[+] Child process created with pid: 94407
[*] Patching child process to allow dyld interposing...
[*] _amfi_check_dyld_policy_self at offset 0x56874 in /usr/lib/dyld
task_for_pid failed. Is this binary signed and posesses the com.apple.security.cs.debugger entitlement?
[*] Sending SIGCONT to continue child
[*] Child exited with status 9
> codesign -d --entitlements - runner
Executable=/Users/minim1/Desktop/Code/p0tools/iOSOnMac/runner
��qq<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.security.cs.debugger</key>
<true/>
</dict>
</plist>
Great work with the trapfuzz implementation. I was actually trying out to get the implementation running with the patch, the patch doesn't seem to work on honggfuzz latest 2.2 (API changes), so i switched to the honggfuzz repo (https://github.com/saelo/honggfuzz) by @saelo.
Now i run into SIGBUS errors, i obtained the patchpoints from ImageIO library and cross checked whether they are the correct offsets as well. I tried debugging the issue but couldn't somehow get it working. Does this have something to do with Shadow memory ?
System Configuration => MacOS : 10.15.4
The following is the error message as well:
SIGBUS.EXC_BAD_ACCESS.PC.00007fff315c09cf.STACK.00000000f1ece522.ADDR.00007fff71c0e836.fuzz' already exists, skipping
Am i doing something wrong here or missing something.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.