October 2009 - Darwin-dev - lists.apple.com

Re: Finding loaded kext binaries
by Rustam Muginov 20 Oct '09

20 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=WnRBnmzEobtb8lqQ4bdCqx4Vyyj8o8WDCvRMNOC/5hI=; b=I2RGIrApP0O+g0e0gf9omXNfwD4U68bTH+oh1wbVMe7nU06rvh8NBFowpPWkJtwpQk soolSNeJ55GXVh0VFfHq9HDf4VcZqM/wxOOmBLWGwRmzPpmbncuoZCkwQtsV+HKNN2kw IWR6yUF6N8aE8M3+CG5EyBRi+U0B65VGsbWXg= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=nlKps+mqDx0pTTrg0M4nOz3gm5eeX6o0wqVCzGpLiUc1TK7sX0Ewv6oDX6fepXcoax y90K64T3z2CZ74Qo71YQotqpkZnqCzWrf7uGzyK7YtR8SFPRiMA0SMQiD4O4esfS1cRb D0h6/xq5Qugghsq7k/ZB2iojfD6TI5bN2hKQo= On Oct 17, 2009, at 7:58 AM, Michael Smith wrote: = Mike Thank you for your advices. -- Sincerely, Rustam Muginov _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… If you were to tell us a bit more about the problem you're trying to solve, we might be able to offer some more constructive suggestions... Hello, Mike. I am trying to implement security software, which would analize running processes and loaded kexts. First step would be if the processes/kexts are signed by Apple. If yes and if signature is valid, then they are considered "good". If not, then closer attenstion would be paid for them, like calculating checksum, gathering metainfo and sending it onto the server to analize. This email sent to site_archiver(a)lists.apple.com

1 0

Re: /usr/lib/charset.alias file identified as Alias by FSIsAliasFile(), FSResolveAliasFile() fails to get the target
by Juan Manuel Palacios 20 Oct '09

20 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Oct 20, 2009, at 4:45 AM, rohan a wrote: Hello All, The file /usr/lib/charset.alias is identified by FSIsAliasFile() as an alias file. However, when I try to resolve it using FSResolveAliasFile() it fails to resolve. $[jmpp @jmpp: ~](8/0,0) -> sw_vers ProductName: Mac OS X ProductVersion: 10.5.8 BuildVersion: 9L31a $[jmpp @jmpp: ~](9/0,0) -> file /usr/lib/charset.alias /usr/lib/charset.alias: ASCII text Regards,... - jmpp Below is the code : #include<stdio.h> #include "/Developer/Headers/FlatCarbon/Aliases.h" int main(int argc,char *argv[]) { FSRef fileRef; Boolean aliasFileFlag, folderFlag,targetIsFolder,wasAliased; FSRef theRef; char path[255]; int i=0; int x; if(targetIsFolder == TRUE) printf("Target is Directory\n"); else printf("Target is file\n"); FSRefMakePath(&theRef,path,255); printf("\"%s\" points to \"%s\"\n",argv[1],path); return 0; } This code works for all other files. What might be the issue ? The output of GetFileInfo does not indicate that the file is an alias. /Developer/Tools/GetFileInfo /usr/lib/charset.alias file: "/usr/lib/charset.alias" type: "" creator: "" attributes: avbstclinmedz created: 04/01/1976 15:30:38 modified: 01/30/2006 13:41:33 Thanks _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/jmpalaciosp%40eml.cc _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… In my system that's a regular file, although I haven't tried FSIsAliasFile() on it to see what info I'd get. Have you checked manually at the terminal level? I would guess file(1) confirming it's not an alias would indeed have a lot of bearing on being able to resolve it. FSPathMakeRef((UInt8 *)argv[1],&fileRef,NULL); FSPathMakeRef((UInt8 *)argv[1],&theRef,NULL); FSIsAliasFile(&fileRef, &aliasFileFlag, &folderFlag); if(aliasFileFlag == TRUE) printf("Alias file\n"); else { if(folderFlag == 1) printf("Folder\n"); else printf("File\n"); return 0; } x = FSResolveAliasFile(&theRef,TRUE,&targetIsFolder,&wasAliased); if (x) printf("failed\n"); This email sent to jmpalaciosp(a)eml.cc This email sent to site_archiver(a)lists.apple.com

1 0

/usr/lib/charset.alias file identified as Alias by FSIsAliasFile(), FSResolveAliasFile() fails to get the target
by rohan a 20 Oct '09

20 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=KSYldUMlECzV7TZqbwbWZzdaiDebpqiasHYwAwlPUVg=; b=U9aO9Mr0qt3l/rN7TuWi8fmqlVWzGv6X6gSxZ1rjZQC0t+GCM7UHCpbpzzR7rqW4qn P22gNlDOjL9I6DTGrid1MtVFkLb7MXQkBH0/BJcptE1reWL+yQCXE8kLtzeJfY3RnqkW WsXTr9I0AurG9AOZfrYKr6ftDAvYxYe8nh+FY= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=G9j3PyVwPrVop9Qf/FNSKeaT5h9Va2g9Vp20/8ZV6f43NYPbvWZPdXhsYDP3szSP0p Wf0/tfZS6EzPCdZDaQEXigKblj/hRqAq2Ic1zoRQD8HNld20HtOPTpgsI5dzKDWEn0aq +eflB7vS+aGU7xIkO/ofPAZsrfr8eikY2uvug= Hello All, The file /usr/lib/charset.alias is identified by FSIsAliasFile() as an alias file. However, when I try to resolve it using FSResolveAliasFile() it fails to resolve. Below is the code : #include<stdio.h> #include "/Developer/Headers/FlatCarbon/Aliases.h" int main(int argc,char *argv[]) { FSRef fileRef; Boolean aliasFileFlag, folderFlag,targetIsFolder,wasAliased; FSRef theRef; char path[255]; int i=0; int x; FSPathMakeRef((UInt8 *)argv[1],&fileRef,NULL); FSPathMakeRef((UInt8 *)argv[1],&theRef,NULL); FSIsAliasFile(&fileRef, &aliasFileFlag, &folderFlag); if(aliasFileFlag == TRUE) printf("Alias file\n"); else { if(folderFlag == 1) printf("Folder\n"); else printf("File\n"); return 0; } x = FSResolveAliasFile(&theRef,TRUE,&targetIsFolder,&wasAliased); if (x) printf("failed\n"); if(targetIsFolder == TRUE) printf("Target is Directory\n"); else printf("Target is file\n"); FSRefMakePath(&theRef,path,255); printf("\"%s\" points to \"%s\"\n",argv[1],path); return 0; } This code works for all other files. What might be the issue ? The output of GetFileInfo does not indicate that the file is an alias. /Developer/Tools/GetFileInfo /usr/lib/charset.alias file: "/usr/lib/charset.alias" type: "" creator: "" attributes: avbstclinmedz created: 04/01/1976 15:30:38 modified: 01/30/2006 13:41:33 Thanks _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: getting undefined symbol when I do not initialize global variable
by Jens Alfke 19 Oct '09

19 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Oct 19, 2009, at 1:18 AM, rohan a wrote: There are a set of global variables used. When these are not initialized I get the linking error : Undefined symbols —Jens _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… What do you mean by "not initialized"? If you have a definition of the variable, just with no value: int gFoo; then the link error is definitely unexpected. (Is that source file in your target?) But if you don't have any non-extern declaration of the variable, then the linker is correct. Extern declarations are just a promise that you will actually define the variable somewhere else. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Crash reporter starting stack trace
by Arnab Ganguly 19 Oct '09

19 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=bfZ/lCoF8+EE9WcWgKzi6BYxtACC+IyWUpwXSdcEmoA=; b=h1UGZQNpKqd8/FPQD2Em/8HJg9iuUbAJNFEbjTZZfxRrtAqBN2rJJ/p2jgHJa8X5sc +xidEuT1FxPRQxvpYeF3rT0GRRO819LpDxq2wigzhy1rz1vUZR58Zq1CrnMCm1VfYxQN prVIjMBMImSn6E15jnZqJS2siZJhdaht3F6RQ= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=C31Vj5lJC5Sh3tysEq8nvaEFoLTDQjOG/ymmMS5DU6Ddu7hSb91bMj5xiiZVXDn7Md Y40W74cajnt0Pq8xSi/QwNpISRR0vcqsjZk7LfLAIMb6ZRzxcu2XfKz040DLlzTiDyOd w4hX0VtF5OSjyQNSkBnNDJqR4UWRnaNHaSt+E= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: getting undefined symbol when I do not initialize global variable
by Dave Keck 19 Oct '09

19 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:from:date:x-google-sender-auth:message-id:subject:to:cc :content-type; bh=T6wdevp3PFqtDcTdUfp87xOssBnEzf9dTjYTOPPa364=; b=i7UDUL6f1WNgDOd8SgFEUD9m3j9bgF/23ElWWlLB0AwH4+Xa2ybJkzo61DRnAM12SP TEfVk6HI4pSUKZVkAtvle7YFypRKg42D/nQuBWvV6zK177o/Kik5lfszlMsMDOJJd6vJ 2tQ8givzAALn3wXPxELFWc9a+vFXuxlaGiCNs= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; b=KaghfApmo3Ap9fkzqMBO9nay7y38JqJ8Ii+2TXv/qe44P9yLQyT4PvKGOfz9Fy1BSy MbGviP0BKxpi1doGDnkeD02ILhWDykWFnvOjZHpRSm3m2OIl5QMK6MsENKASjolAkaPh y3eF2hZ43sg2vYiHyMywFe/9+kSxEZ21n1H0Y= If I had to guess, I'd say you have some combination of extern symbols declared in a header that aren't defined in an implementation, and when you initialize the variables, the compiler ignores the 'extern.' I wouldn't be surprised if you were getting a related compiler warning somewhere...? Standard debug tactics apply, though: whittle down your project to the smallest amount possible while still displaying the problem. If that process itself doesn't illuminate the issue, post the example project. It's hard (for me, at least) to say why this might be happening without seeing some example code. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

getting undefined symbol when I do not initialize global variable
by rohan a 19 Oct '09

19 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=lXGDKTL139RKk0AF0FJbG9p6vHYOVB2Rdp8Xm8sOSpY=; b=eoVpgYQyX2HI6y02rfQMaoTdotU5nAntJlf9LRtonsUY8jUed9hgaRCbakwEX61772 dLnUAoPqiknbjztnU4zbt6uQL7E9cn+N6y7wSVvPfvyBuyAyYJujRmXjyt2K8U8dXx4w WrGD8F5tbx0RBS9do6C7EqcZN9BU24nZlxVNU= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=W4r17wPh325X9yOnzgBnNXMgUdqUXZJPkvfLyi/H+y/WXG/eqB1FeM6YJygEWaewOp vsDUHyJkxtaJqjxn2mizOnWKxqkf/qAq3n1ayxTeEz0dQrHrhPjDrM0OJ9kCiO4l89FQ UVCSrzSw5CZSVdNx/aMS1v+iL15WF7WeOjzUo= Hello All, I need to build a binary as a part of a project having lots of files. There are a set of global variables used. When these are not initialized I get the linking error : Undefined symbols However, when I initialize the variables the build goes through. I do not face this link issue on other platforms (ex. Linux) Thanks. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Framework to use for identifying and resolving Alias files
by Jens Alfke 18 Oct '09

18 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Oct 18, 2009, at 4:08 AM, rohan a wrote: 1. Using #include<Carbon/Carbon.h> -framework Carbon 2. Using #include<CoreServices/CoreServices.h> -framework CoreServices Both methods work fine. Which one should I be using ? —Jens _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Well, look at the specific header that defines the API for aliases — Aliases.h. It's in the CoreServices framework. Since CoreServices is lower-level than Carbon, it's better to link against it directly and avoid dragging in the rest of Carbon. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Crash reporter starting stack trace
by Brian Bergstrand 18 Oct '09

18 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Oct 18, 2009, at 4:12 PM, Dave Keck wrote: Based on Terry's response: Project/Target Settings > Build > Other Linker Flags > "-pie" Also how does ASLR is enabled from Xcode ? According to the ld man page you should also add "-fpie" to your "Other C Flags" setting. And as Terry mentioned, make sure "Generate Position-Dependent Code" is off. Not sure why XCode 3.2 did not make this an "official" setting. A single "Enable ASLR" boolean would be much simpler than mucking around with 3 different settings. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Crash reporter starting stack trace
by Dave Keck 18 Oct '09

18 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:from:date:x-google-sender-auth:message-id:subject:to:cc :content-type; bh=gU6/Uz7Zy0oWLL/VO3CYTTTICOBQgpLy6W9SFPM7LVY=; b=N5Ehd46FOi+bHXHBmUvbmQt1jSkKUIFZ3ETQBcWeKT44YHm4c1RQsh51t03+lNOlMf LnvKHMjaiOXl8m1iL/bjXbfjlCs1f2LSKg90IP/jSx+8C6B2MogCKSQDEJRv4WcYgQhX Lp8ubTNzX7nbMjxJYNoCbOcfV9pRCxdtJ8ghw= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; b=BtmbInBu/cZH0PxiGZdF6/OnRlc/BTQM4eWkgMH4P6xMhKhluJgFTXsb8FPVTBgYz9 2mGF9Y9ivwGrCJBjJnJVSoUcYZpahtcRA+dKLMhYPmHT+L4ur33EeVUg0nE8iw5kjY4Q Q1QwQRf0Fw8NzThz2DLoSwTVD+sFWY9uBNAEU= > Also how does ASLR is enabled from Xcode ? Based on Terry's response: Project/Target Settings > Build > Other Linker Flags > "-pie" If that's confusing, Google image search "other linker flags". _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0