On 5 Apr 2012, at 15:31, Quinn The Eskimo! wrote:
On 4 Apr 2012, at 12:28, Gerriet M. Denkmann wrote:
Given a normal app (NOT a kext) (which might run as root if necessary) and the pid of another process, how to I get the slide of it?
One way to do it--and I'm certainly not sure that this is the best way--is to find dyld and then use the dyld debug interface to find all the images in the process.
Could you be a bit more specific? I don't know how to "find dyld". Do you mean find a memory region starting at 'a' where proc_regionfilename( pid, a, ... ) gives: "/usr/lib/dyld" ? If so, there are typically about half a dozen of those. And where (in which header file?) is the "dyld debug interface" documented? Sorry for being so clueless. Kind regards, Gerriet. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.... This email sent to site_archiver@lists.apple.com