Skip to content

Add MachO support #81

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

BeyondTheG4te
Copy link
Contributor

This PR introduces the following changes:

  • Entrypoint detection for Mach-O / FAT binaries
  • Different handling of reference symbols for Mach-O binaries, that are used by checkers. OSX Mach-O ABI enforces mangling (leading underscore) even for C symbols (e.g malloc -> _malloc).

The changes have been implemented/tested on MacOS 14.6 (Sonoma) / ARM - M2 and Ghidra 11.1.2.

If its needed I can also add arm64 / Mach-O binaries to https://github.com/KeenSecurityLab/BinAbsInspector-binaries and add the respective integration tests.

@BeyondTheG4te BeyondTheG4te marked this pull request as draft September 5, 2024 13:38
@BeyondTheG4te BeyondTheG4te marked this pull request as ready for review September 5, 2024 13:54
@BeyondTheG4te BeyondTheG4te changed the title Add mach o support Add MachO support Sep 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant