When targeting iOS14 or later, `denyFishHook` may not work
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- ios, swift
- Domain
- mobile-dev, security
Research direction
Start with the linked chained_fixups.md and swift-anti-fishhook implementation, then inspect denyFishHook and the existing FishHook and exports-trie parsing. Done means symbols in binaries targeting iOS 14 or later are found reliably, including cases covered by the reported parsing failures.
Written by the indexing model from the issue text.
Description
If the symbols given to denyFishHook are defined in binaries targeting iOS14 or later, it may not work.
Currently, symbols are searched based on binding information obtained from LC_DYLD_INFO. However, if targeting iOS14 or later, by default, it must be obtained from LC_DYLD_CHAINED_FIXUPS.
https://github.com/qyang-nj/llios/blob/main/dynamic_linking/chained_fixups.md
Here is an example of a tried and tested implementation.
https://github.com/p-x9/swift-anti-fishhook
I tried to fix it to send a pull request to this repository, but I noticed that the existing FishHook and exports trie parsing also needed some fixes.
(When the official fishhook was used, it succeeded, but in some cases it failed in the current implementation.)
I will add more information as soon as I have it.
Thank you
- Dominant language
- Swift
- Stars
- 2.7k
- Forks
- 346
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from securing/IOSSecuritySuite
-
iOS 27 crash Open
Difficulty 3/5 1-2 days Newbie friendliness 72/100
securing/IOSSecuritySuite#160 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
securing/IOSSecuritySuite#159 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
securing/IOSSecuritySuite#150 · 5 comments ·
-
Tag protection Open
Difficulty 2/5 Under an hour Newbie friendliness 35/100
securing/IOSSecuritySuite#115 · 1 comment ·
All issues in securing/IOSSecuritySuite
Similar issues
-
tvOS
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
skiptools/skip-fuse-ui#147 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
OneBusAway/onebusaway-ios#1438 · 1 reaction ·