avast / avast/retdec

Mach-o TLS callbacks support

Open
#522 0 comments 0 reactions 0 assignees View on GitHub
C-fileformat new-feature T-format-macho
Dominant language
C++
Stars
8.6k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

PE file format contains TLS Directory with callback frunction addresses. Mach-o supports similar functionality in `S_THREAD_LOCAL_INIT_FUNCTION_POINTERS` section.

Add support for Mach-o callbacks parsing.
https://opensource.apple.com/source/dyld/dyld-195.6/src/threadLocalVariables.c.auto.html

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by comparing the existing PE TLS Directory callback parsing with Mach-O's S_THREAD_LOCAL_INIT_FUNCTION_POINTERS section, then read the linked dyld threadLocalVariables.c source. Done means Mach-O callback addresses are parsed and exposed consistently with the existing PE support; the issue names no implementation files or tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
reverse-engineering
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.