Mach-O par Stéphane Sudre
•
0 j'aime•6,504 vues
Un aperçu du format Mach-O, en particulier où sont situées les chaînes de caractères constantes et où sont définies les classes, méthodes ObjC 1.0/2.0. Mais tout cela avec un besoin concret effectivement rencontré : pouvoir réusiner du code après sa compilation.
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
En vedette
En vedette (20)
Similaire à Mach-O par Stéphane Sudre
Similaire à Mach-O par Stéphane Sudre (20)
Plus de CocoaHeads France
Plus de CocoaHeads France (20)
Dernier
Dernier (20)
Mach-O par Stéphane Sudre
- 1. Ton Mach-O en strings devant Prisu
- 3. “Houston, on a un problème…”
- 5. Des plugins, des plugins et encore des plugins…
- 12. DesktopPictures
- 16. ScreenEffects
- 17. ScreenEffects
- 18. Cyclone.xcodeproj Plasma.xcodeproj Solar Winds.xcodeproj
- 19. Cyclone.xcodeproj Plasma.xcodeproj Solar Winds.xcodeproj github.com/…/cyclone github.com/…/plasma github.com/…/solarwinds
- 20. Cyclone.xcodeproj Plasma.xcodeproj Solar Winds.xcodeproj github.com/…/cyclone github.com/…/plasma github.com/…/solarwinds github.com/…/rsscommon submodules submodules RSSWindow RSSAboutBoxWindowController RSSAboutBoxWindowController.xib RSSSettings RSSSecondaryBox RSSCollectionView RSSCollectionViewItem RSSStandardSettingsView.xib
- 21. 1 #import "RSSAboutBoxWindowController.h" 2 3 @interface RSSAboutBoxWindowController () 4 { 5 ... 6 } 7 8 @end 9 10 @implementation RSSAboutBoxWindowController 11 12 - (NSString *)windowNibName 13 { 14 return @"RSSAboutBoxWindowController"; 15 } 16 ... RSSAboutBoxWindowController.m RSSStandardSettingsView.xib
- 22. Solutions possibles et imaginables surtout
- 25. Noms uniques dans le code source
- 26. Noms uniques dans le code source
- 27. Noms uniques dans l’exécutable
- 28. Refactorisation allégée de nib binary property list
- 31. Mach-O 0000000 cf fa ed fe 0000010 15 00 00 00 0000020 19 00 00 00 0000030 00 00 00 00 0000040 00 d0 00 00 0000050 00 d0 00 00 0000060 0b 00 00 00 0000070 00 00 00 00 Tampon mémoire Rechercher / Remplacer 0000000 cf fa ed fe 0000010 15 00 00 00 0000020 19 00 00 00 0000030 00 00 00 00 0000040 00 d0 00 00 0000050 00 d0 00 00 0000060 0b 00 00 00 0000070 00 00 00 00 Mach-O
- 32. Mach-O Mach-O cf fa ed fe 15 00 00 00 19 00 00 00 00 00 00 00 00 d0 00 00 00 d0 00 00 0b 00 00 00 00 00 00 00 Structure analysée 00 00 00 00 b6 88 00 00 00 00 00 00 c0 88 00 00 00 00 00 00 c5 88 00 00 00 00 00 00 c9 88 00 00 Rechercher / Remplacer
- 33. $ man Mach-O et non pas l’inverse
- 37. Mach-O file 1 architecture Mach-O file 1 architecture FAT header
- 38. Mach-O file 1 architecture Mach-O file 1 architecture FAT header struct fat_header { uint32_t magic; uint32_t nfat_arch; }; struct fat_arch { cpu_type_t cputype; cpu_subtype_t cpusubtype; uint32_t offset; uint32_t size; uint32_t align; }; 0xcafebabe BIG ENDIAN CPU_TYPE_ARM CPU_SUBTYPE_ARM_V7F struct fat_arch { cpu_type_t cputype; cpu_subtype_t cpusubtype; uint32_t offset; uint32_t size; uint32_t align; }; 2
- 39. Mach-O file 1 architecture Mach-O file 1 architecture FAT header
- 40. Mach-O file
- 43. Header Data Load Commands struct mach_header_64 { uint32_t magic; cpu_type_t cputype; cpu_subtype_t cpusubtype; uint32_t filetype; uint32_t ncmds; uint32_t sizeofcmds; uint32_t flags; uint32_t reserved; }; 0xfeedfacf CPU_TYPE_ARM CPU_SUBTYPE_ARM_V7F BIG ENDIAN | LITTLE ENDIAN MH_EXECUTE
- 46. Data Load Command Load Command Load Command Load Command
- 47. struct load_command { uint32_t cmd; uint32_t cmdsize; }; Data Load Command Load Command Load Command Load Command
- 48. struct load_command { uint32_t cmd; uint32_t cmdsize; }; struct dylinker_command { uint32_t cmd; uint32_t cmdsize; union lc_str name }; LC_LOAD_DYLINKER Data Load Command Load Command Load Command Load Command
- 49. struct load_command { uint32_t cmd; uint32_t cmdsize; }; struct dylinker_command { uint32_t cmd; uint32_t cmdsize; union lc_str name }; LC_LOAD_DYLINKER struct dylib_command { uint32_t cmd; uint32_t cmdsize; struct dylib dylib; }; LC_LOAD_DYLIB Data Load Command Load Command Load Command Load Command
- 50. struct load_command { uint32_t cmd; uint32_t cmdsize; }; struct dylinker_command { uint32_t cmd; uint32_t cmdsize; union lc_str name }; LC_LOAD_DYLINKER struct dylib_command { uint32_t cmd; uint32_t cmdsize; struct dylib dylib; }; LC_LOAD_DYLIB struct segment_command_64 { uint32_t cmd; uint32_t cmdsize; char segname[16]; uint64_t vmaddr; uint64_t vmsize; uint64_t fileoff; uint64_t filesize; vm_prot_t maxprot; vm_prot_t initprot; uint32_t nsects; uint32_t flags; }; LC_SEGMENT_64 “__TEXT”Data Section Section Section Segment Load Command Load Command Load Command Load Command
- 51. struct load_command { uint32_t cmd; uint32_t cmdsize; }; struct dylinker_command { uint32_t cmd; uint32_t cmdsize; union lc_str name }; LC_LOAD_DYLINKER struct dylib_command { uint32_t cmd; uint32_t cmdsize; struct dylib dylib; }; LC_LOAD_DYLIB struct segment_command_64 { uint32_t cmd; uint32_t cmdsize; char segname[16]; uint64_t vmaddr; uint64_t vmsize; uint64_t fileoff; uint64_t filesize; vm_prot_t maxprot; vm_prot_t initprot; uint32_t nsects; uint32_t flags; }; LC_SEGMENT_64 “__TEXT”Data Section Section Section Segment Load Command Load Command Load Command Load Command struct segment_command { uint32_t cmd; uint32_t cmdsize; char segname[16]; uint32_t vmaddr; uint32_t vmsize;
- 52. struct load_command { uint32_t cmd; uint32_t cmdsize; }; struct dylinker_command { uint32_t cmd; uint32_t cmdsize; union lc_str name }; struct dylib_command { uint32_t cmd; uint32_t cmdsize; struct dylib dylib; }; struct segment_command_64 { uint32_t cmd; uint32_t cmdsize; char segname[16]; uint64_t vmaddr; uint64_t vmsize; uint64_t fileoff; uint64_t filesize; vm_prot_t maxprot; vm_prot_t initprot; uint32_t nsects; uint32_t flags; }; Data Section Section Section Segment Load Command Load Command Load Command Load Command struct segment_command { uint32_t cmd; uint32_t cmdsize; char segname[16]; uint32_t vmaddr; uint32_t vmsize;
- 56. struct segment_command_64 { uint32_t cmd; uint32_t cmdsize; char segname[16]; … uint64_t fileoff; uint64_t filesize; … uint32_t nsects; … }; LC_SEGMENT_64 “__TEXT” Section Section Section Segment Section Section Section Segment Section Segment Section Load Command struct section_64 { char sectname[16]; char segname[16]; uint64_t addr; uint64_t size; uint32_t offset; … uint32_t flags; … }; “__TEXT” “__cstring” struct section_64 { char sectname[16]; char segname[16]; uint64_t addr; uint64_t size; uint32_t offset; … uint32_t flags; … }; “__TEXT” “__ustring” struct section_64 { char sectname[16]; char segname[16]; 3 LC_SEGMENT_64 Section Segment Section
- 62. Recherche des noms de classes Objective-C 2.x / 64-bit
- 63. 0000da40 a0 08 01 00 00 00 00 00 18 09 01 00 00 00 00 00 0000da50 40 09 01 00 00 00 00 00 90 09 01 00 00 00 00 00 0000da60 08 0a 01 00 00 00 00 00 30 0a 01 00 00 00 00 00 0000da70 a8 0a 01 00 00 00 00 00 f8 0a 01 00 00 00 00 00 0000da80 48 0b 01 00 00 00 00 00 70 0b 01 00 00 00 00 00 0000da90 c0 0b 01 00 00 00 00 00 10 0c 01 00 00 00 00 00 __DATA, __objc_classlist
- 64. 000108a0 c8 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 000108b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108c0 f0 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108e0 00 00 00 00 00 00 00 00 d0 da 00 00 00 00 00 00 000108f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00010900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00010910 38 dd 00 00 00 00 00 00 f0 08 01 00 00 00 00 00 ........ 0000da40 a0 08 01 00 00 00 00 00 18 09 01 00 00 00 00 00 0000da50 40 09 01 00 00 00 00 00 90 09 01 00 00 00 00 00 0000da60 08 0a 01 00 00 00 00 00 30 0a 01 00 00 00 00 00 0000da70 a8 0a 01 00 00 00 00 00 f8 0a 01 00 00 00 00 00 0000da80 48 0b 01 00 00 00 00 00 70 0b 01 00 00 00 00 00 0000da90 c0 0b 01 00 00 00 00 00 10 0c 01 00 00 00 00 00 __DATA, __objc_classlist __DATA, __objc_data
- 65. 000108a0 c8 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 000108b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108c0 f0 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108e0 00 00 00 00 00 00 00 00 d0 da 00 00 00 00 00 00 ........ __DATA, __objc_data
- 66. 000108a0 c8 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 000108b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108c0 f0 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108e0 00 00 00 00 00 00 00 00 d0 da 00 00 00 00 00 00 ........ __DATA, __objc_data
- 67. 000108a0 c8 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 000108b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108c0 f0 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108e0 00 00 00 00 00 00 00 00 d0 da 00 00 00 00 00 00 ........ __DATA, __objc_data struct objc2_class_t { uint64_t isa; uint64_t superclass; uint64_t cache; uint64_t vtable; uint64_t data; uint64_t reserved1; uint64_t reserved2; uint64_t reserved3; }; 0x000000000108c8 0x00000000000000 0x00000000000000 0x00000000000000 0x0000000000dcf0 0x00000000000000 0x00000000000000 0x00000000000000
- 68. 000108a0 c8 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 000108b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108c0 f0 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 000108e0 00 00 00 00 00 00 00 00 d0 da 00 00 00 00 00 00 ........ __DATA, __objc_data ........ 0000dcf0 84 01 00 00 88 00 00 00 b0 00 00 00 00 00 00 00 0000dd00 55 a6 00 00 00 00 00 00 3f a6 00 00 00 00 00 00 0000dd10 18 db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd20 10 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd30 b8 dc 00 00 00 00 00 00 81 00 00 00 28 00 00 00 0000dd40 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd50 58 a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ __DATA, __objc_const
- 69. 0000dcf0 84 01 00 00 88 00 00 00 b0 00 00 00 00 00 00 00 0000dd00 55 a6 00 00 00 00 00 00 3f a6 00 00 00 00 00 00 0000dd10 18 db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd20 10 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd30 b8 dc 00 00 00 00 00 00 81 00 00 00 28 00 00 00 ........ __DATA, __objc_const
- 70. 0000dcf0 84 01 00 00 88 00 00 00 b0 00 00 00 00 00 00 00 0000dd00 55 a6 00 00 00 00 00 00 3f a6 00 00 00 00 00 00 0000dd10 18 db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd20 10 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd30 b8 dc 00 00 00 00 00 00 81 00 00 00 28 00 00 00 ........ __DATA, __objc_const
- 71. 0000dcf0 84 01 00 00 88 00 00 00 b0 00 00 00 00 00 00 00 0000dd00 55 a6 00 00 00 00 00 00 3f a6 00 00 00 00 00 00 0000dd10 18 db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd20 10 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd30 b8 dc 00 00 00 00 00 00 81 00 00 00 28 00 00 00 ........ __DATA, __objc_const struct objc2_class_ro_t { uint32_t flags; uint32_t instanceStart; uint32_t instanceSize; uint32_t reserved; uint64_t iVarLayout; uint64_t name; uint64_t baseMethods; uint64_t baseProtocols; uint64_t ivars; uint64_t weakIvarLayout; uint64_t baseProperties; }; 0x0000000000a63f
- 72. 0000dcf0 84 01 00 00 88 00 00 00 b0 00 00 00 00 00 00 00 0000dd00 55 a6 00 00 00 00 00 00 3f a6 00 00 00 00 00 00 0000dd10 18 db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd20 10 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd30 b8 dc 00 00 00 00 00 00 81 00 00 00 28 00 00 00 ........ __DATA, __objc_const 0000a63f 52 53 53 43 6f 6c 6c 65 63 74 69 6f 6e 56 69 65 0000a64f 77 49 74 65 6d 00 04 10 00 52 53 53 57 69 6e 64 0000a65f 6f 77 00 52 53 53 53 6f 6c 61 72 57 69 6e 64 73 0000a66f 56 69 65 77 00 11 11 00 52 53 53 53 6f 6c 61 72 0000a67f 57 69 6e 64 73 53 65 74 74 69 6e 67 73 00 52 53 0000a68f 53 43 6f 6c 6c 65 63 74 69 6f 6e 56 69 65 77 49 0000a69f 74 65 6d 4c 61 62 65 6c 00 52 53 53 53 6f 6c 61 0000a6af 72 57 69 6e 64 73 43 6f 6e 66 69 67 75 72 61 74 ........ __TEXT, __objc_classname
- 73. 0000dcf0 84 01 00 00 88 00 00 00 b0 00 00 00 00 00 00 00 0000dd00 55 a6 00 00 00 00 00 00 3f a6 00 00 00 00 00 00 0000dd10 18 db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd20 10 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000dd30 b8 dc 00 00 00 00 00 00 81 00 00 00 28 00 00 00 ........ __DATA, __objc_const 0000a63f R S S C o l l e c t i o n V i e 0000a64f w I t e m 00 04 10 00 R S S W i n d 0000a65f o w 00 R S S S o l a r W i n d s 0000a66f V i e w 00 11 11 00 R S S S o l a r 0000a67f W i n d s S e t t i n g s 00 R S 0000a68f S C o l l e c t i o n V i e w I 0000a69f t e m L a b e l 00 R S S S o l a 0000a6af r W i n d s C o n f i g u r a t ........ __TEXT, __objc_classname
- 74. Recherche des chaînes de caractères Objective-C 2.x / 64-bit
- 75. 0000d4a0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4b0 b6 88 00 00 00 00 00 00 09 00 00 00 00 00 00 00 0000d4c0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4d0 c0 88 00 00 00 00 00 00 04 00 00 00 00 00 00 00 0000d4e0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 ........ __DATA, __cfstring
- 76. 0000d4a0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4b0 b6 88 00 00 00 00 00 00 09 00 00 00 00 00 00 00 0000d4c0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4d0 c0 88 00 00 00 00 00 00 04 00 00 00 00 00 00 00 0000d4e0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 ........ __DATA, __cfstring
- 77. 0000d4a0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4b0 b6 88 00 00 00 00 00 00 09 00 00 00 00 00 00 00 0000d4c0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4d0 c0 88 00 00 00 00 00 00 04 00 00 00 00 00 00 00 0000d4e0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 ........ __DATA, __cfstring struct cfstring_record_64_t { uint64_t reserved; uint64_t encoding; uint64_t address; uint64_t length; }; 0x00000000000000 0x000000000007c8 0x000000000088b6 0x00000000000009 = ASCII
- 78. 0000d4a0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4b0 b6 88 00 00 00 00 00 00 09 00 00 00 00 00 00 00 0000d4c0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4d0 c0 88 00 00 00 00 00 00 04 00 00 00 00 00 00 00 0000d4e0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 ........ __DATA, __cfstring 000088b6 74 68 75 6d 62 6e 61 69 6c 00 6e 61 6d 65 00 74 000088c6 61 67 00 00 54 40 22 4e 53 53 74 72 69 6e 67 22 000088d6 2c 26 2c 4e 2c 56 5f 74 68 75 6d 62 6e 61 69 6c ........ ........ 00008d16 51 38 5e 63 31 36 00 52 53 53 41 62 6f 75 74 42 00008d26 6f 78 57 69 6e 64 6f 77 43 6f 6e 74 72 6f 6c 6c 00008d36 65 72 00 43 46 42 75 6e 64 6c 65 4e 61 6d 65 00 ........ __TEXT, __cstring
- 79. 0000d4a0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4b0 b6 88 00 00 00 00 00 00 09 00 00 00 00 00 00 00 0000d4c0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 0000d4d0 c0 88 00 00 00 00 00 00 04 00 00 00 00 00 00 00 0000d4e0 00 00 00 00 00 00 00 00 c8 07 00 00 00 00 00 00 ........ __DATA, __cfstring 000088b6 t h u m b n a i l 00 n a m e 00 t 000088c6 a g 00 00 54 40 " N S S t r i n g " 000088d6 2c 26 2c 4e 2c 56 _ t h u m b n a i l ........ ........ 00008d16 51 38 5e 63 31 36 00 R S S A b o u t B 00008d26 o x W i n d o w C o n t r o l l 00008d36 e r 00 C F B u n d l e N a m e 00 ........ __TEXT, __cstring
- 80. Références • OS X ABI Mach-O File Format Reference developer.apple.com/library/mac/documentation/DeveloperTools/Conceptual/MachORuntime/ • mach-o header files /usr/include/mach-o/ • class-dump github.com/nygard/class-dump • otool www.opensource.apple.com/source/cctools/cctools-829/otool/ • Really Slick Screen Savers OS X Ports s.sudre.free.fr/Software.html
- 81. QA&