Repository navigation
iOS 14.5 crashed #82
Description
Activity
Hook
fsyncalso crashes.have the same problem. I can reproduce the crash with iPhone Xs and OS version 14.5(18E5140j) beta. but iPhone 7 can't reproduce it.
@cfxiao can you supply detail codes? which func been hooked?
@leirenbaobao it seems that he hook the dispatch_sync.
And I try to hook malloc / realloc get same crash report.I'm pretty sure the iOS 14.5 beta at newer phones such as iPhoneXs, has change the memory offset of core library.
@biosli I tested some funcs. some crashes. what puzzle me is that even offset changed normal dynamic binding still work without hook.maybe it's nothing to do with offset.
I suppose write to a read-only address. https://stackoverflow.com/questions/19741409/whats-the-difference-between-code-1-and-code-2-in-exc-bad-access
Reacted by Nguyen Tien DungI found some case that vm_protect return KERN_SUCCESS , but memory don't set VM_PROT_WRITE success. like mprotect method
oldProtection = get_protection(rebindings);is wrong, It savestruct rebindings_entry *rebindingsmemory protection. We should save section protection.I commit code that
oldProtection = get_protection((void *)trunc_address);.and I found a problem when program set same section protection in multithread(iOS 14.5).
@leirenbaobao it seems that he hook the dispatch_sync.
And I try to hook malloc / realloc get same crash report.I'm pretty sure the iOS 14.5 beta at newer phones such as iPhoneXs, has change the memory offset of core library.
#84 fix bug
When will the crash be fixed？
I used #84 code and it worked.But it's not merged into the main branch，so can I use it？
When will the crash be fixed？
I used #84 code and it worked.But it's not merged into the main branch，so can I use it？
you can use it !
crash reason:
int mprotect(void *address, size_t size, int protect);function Require address alignment at all iOS version(Not only iOS 14.5). apple doc- The memory mapped to the __DATA_CONST section is readable and writable before iOS 14.5； but in iOS 14.5 maybe readwrite，maybe readonly。
Reacted by EchoYang, daybreak, <svg onload=alert(1)>, harryphone and maniaciOS15 crash
Thanks for the fix!! In case anyone else is using fishhook on the Mac, you will need this fix for macOS 12.
Reacted by Jacob Hearst and zhouvtp
iOS 14.5 crashed when hook GCD.