You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Where can I find the rules for parsing segment section data and fixing pointers?
There are numerous sections within the data segment that require analysis. After many of these sections are loaded into memory, their pointers are fixed. Taking the (DATA, const) section as an example, the exact size of each field is not known in advance, and the sizes of these fields do not follow any specific pattern. Are there any Apple open-source materials that deal with the loading of the entire data segment?
iOS 15.7.2 macho apsd
The following is the apsd file extracted from the iOS 15.7.2 image for the iPhone 6S. IDA has perfectly repaired the (data, const) section, clearly identifying the size of each structure and accurately fixing the pointers within. This seems amazing. Additionally, it marks the bytes that have been patched in the hex view.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Where can I find the rules for parsing segment section data and fixing pointers?
There are numerous sections within the data segment that require analysis. After many of these sections are loaded into memory, their pointers are fixed. Taking the (DATA, const) section as an example, the exact size of each field is not known in advance, and the sizes of these fields do not follow any specific pattern. Are there any Apple open-source materials that deal with the loading of the entire data segment?
iOS 15.7.2 macho apsd
The following is the apsd file extracted from the iOS 15.7.2 image for the iPhone 6S. IDA has perfectly repaired the (data, const) section, clearly identifying the size of each structure and accurately fixing the pointers within. This seems amazing. Additionally, it marks the bytes that have been patched in the hex view.
Beta Was this translation helpful? Give feedback.
All reactions