Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add MachO support #81

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

john0x1a
Copy link
Contributor

@john0x1a john0x1a commented Sep 5, 2024

This PR introduces the following changes:

  • Entrypoint detection for Mach-O / FAT binaries
  • Different handling of reference symbols for Mach-O binaries, that are used by checkers. OSX Mach-O ABI enforces mangling (leading underscore) even for C symbols (e.g malloc -> _malloc).

The changes have been implemented/tested on MacOS 14.6 (Sonoma) / ARM - M2 and Ghidra 11.1.2.

If its needed I can also add arm64 / Mach-O binaries to https://github.com/KeenSecurityLab/BinAbsInspector-binaries and add the respective integration tests.

@john0x1a john0x1a marked this pull request as draft September 5, 2024 13:38
@john0x1a john0x1a marked this pull request as ready for review September 5, 2024 13:54
@john0x1a john0x1a changed the title Add mach o support Add MachO support Sep 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant