diff options
| author | kat <kat@vector35.com> | 2025-04-03 14:13:51 -0400 |
|---|---|---|
| committer | kat <kat@vector35.com> | 2025-04-03 14:14:05 -0400 |
| commit | 59aa91f6d3844a4996a35d45848cc86ab3ac30f3 (patch) | |
| tree | 77098f9785227ee0c67484cb32cd480ae37181b4 /view/macho | |
| parent | ddbe690994e89f8a61997414f8f986f4d300bc9a (diff) | |
Implement Kernel64 path for Chained Fixups in Mach-O View
Diffstat (limited to 'view/macho')
| -rw-r--r-- | view/macho/machoview.cpp | 16 |
1 files changed, 14 insertions, 2 deletions
diff --git a/view/macho/machoview.cpp b/view/macho/machoview.cpp index 4b932b5a..86deee1d 100644 --- a/view/macho/machoview.cpp +++ b/view/macho/machoview.cpp @@ -3207,7 +3207,6 @@ void MachoView::ParseChainedFixups(MachOHeader& header, linkedit_data_command ch // case DYLD_CHAINED_PTR_ARM64E_FIRMWARE: Unsupported. case DYLD_CHAINED_PTR_64: case DYLD_CHAINED_PTR_64_OFFSET: - case DYLD_CHAINED_PTR_64_KERNEL_CACHE: strideSize = 4; format = Generic64FixupFormat; break; @@ -3220,9 +3219,13 @@ void MachoView::ParseChainedFixups(MachOHeader& header, linkedit_data_command ch strideSize = 4; format = Firmware32FixupFormat; break; + case DYLD_CHAINED_PTR_64_KERNEL_CACHE: + strideSize = 4; + format = Kernel64Format; + break; case DYLD_CHAINED_PTR_X86_64_KERNEL_CACHE: strideSize = 1; - format = Generic64FixupFormat; + format = Kernel64Format; break; default: { @@ -3317,6 +3320,10 @@ void MachoView::ParseChainedFixups(MachOHeader& header, linkedit_data_command ch nextEntryStrideCount = pointer.firmware32.next; bind = false; break; + case Kernel64Format: + nextEntryStrideCount = pointer.kernel64.next; + bind = false; + break; } m_logger->LogTrace("Chained Fixups: @ 0x%llx ( 0x%llx ) - %d 0x%llx", chainEntryAddress, @@ -3347,6 +3354,8 @@ void MachoView::ParseChainedFixups(MachOHeader& header, linkedit_data_command ch case DYLD_CHAINED_PTR_32: ordinal = pointer.generic32.bind.ordinal; break; + case DYLD_CHAINED_PTR_64_KERNEL_CACHE: // no binding + case DYLD_CHAINED_PTR_X86_64_KERNEL_CACHE: // '' default: m_logger->LogWarn("Chained Fixups: Unknown Bind Pointer Format at %llx", GetStart() + (chainEntryAddress - m_universalImageOffset)); @@ -3577,6 +3586,9 @@ void MachoView::ParseChainedStarts(MachOHeader& header, section_64 chainedStarts nextEntryStrideCount = pointer.firmware32.next; bind = false; break; + case Kernel64Format: + nextEntryStrideCount = pointer.kernel64.next; + bind = false; } m_logger->LogTrace("Chained Starts: @ 0x%llx ( 0x%llx ) - %d 0x%llx", chainEntryAddress, |