4 ms·
Likely the compiler will have optimized away the rest of the function as dead-code, so it's not as simple as just getting rid of the unconditional jump.
by gsnedders 13y ago
Likely the compiler will have optimized away the rest of the function as dead-code, so it's not as simple as just getting rid of the unconditional jump.
- lisper 13y agoAh, right. Good point.
- lunixbochs 13y agoIf the code to Security.framework is complete and builds, we might not need to patch the binary directly.
- lstamour 13y agoIt appears to be in a cursory glance. Loaded for me in Xcode. That said, signing the security framework would be another issue ;-) I can't imagine apple would let malware replace security binaries that easily.
- lunixbochs 13y agoIt's almost buildable for me: https://news.ycombinator.com/item?id=7283601 https://news.ycombinator.com/item?id=7283601 I think it'd break one of the binaries, but I could replace that with the real one.