Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Import nygard fixes #1

Merged
merged 31 commits into from
Apr 2, 2019
Merged

Import nygard fixes #1

merged 31 commits into from
Apr 2, 2019

Conversation

andyvand
Copy link
Owner

@andyvand andyvand commented Apr 2, 2019

No description provided.

nygard and others added 30 commits April 21, 2015 21:19
OpenSSL was deprecated in 10.7, and isn't available in 10.11.
Looks like this was left over from #3.
When initializing fixed size structure fields from strings, the number
of bytes copied needs to be the minimum of the structure field and the
string byte count.

Fixes the following class of errors found when running a version of
class-dump build with ASan (Address Sanitizer):

==67822==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6030000095a0 at pc 0x0001068b4d2d bp 0x7fff595270b0 sp 0x7fff59526860
READ of size 16 at 0x6030000095a0 thread T0
    #0 0x1068b4d2c in __asan_memcpy (libclang_rt.asan_osx_dynamic.dylib+0x40d2c)
    #1 0x106716ed4 in -[CDLCSegment initWithDataCursor:] (class-dump+0x100040ed4)
    #2 0x10672d82b in +[CDLoadCommand loadCommandWithDataCursor:] (class-dump+0x10005782b)
    ...
CommonCrypto on OS X 10.11.5 started enforcing limits on the keysize which
are too small, and so this couldn't dump Finder and Dock after that.
This fixes most of the remaining parse errors.
Remove framework reference to OpenSSL's libcrypto
@andyvand andyvand closed this Apr 2, 2019
@andyvand andyvand reopened this Apr 2, 2019
@andyvand andyvand closed this Apr 2, 2019
@andyvand
Copy link
Owner Author

andyvand commented Apr 2, 2019

Merge latest fixes

@andyvand andyvand reopened this Apr 2, 2019
@andyvand
Copy link
Owner Author

andyvand commented Apr 2, 2019

Merge latest fixes

@andyvand andyvand closed this Apr 2, 2019
@andyvand andyvand reopened this Apr 2, 2019
@andyvand andyvand merged commit 9d25635 into andyvand:master Apr 2, 2019
andyvand pushed a commit that referenced this pull request Apr 2, 2019
When initializing fixed size structure fields from strings, the number
of bytes copied needs to be the minimum of the structure field and the
string byte count.

Fixes the following class of errors found when running a version of
class-dump build with ASan (Address Sanitizer):

==67822==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6030000095a0 at pc 0x0001068b4d2d bp 0x7fff595270b0 sp 0x7fff59526860
READ of size 16 at 0x6030000095a0 thread T0
    #0 0x1068b4d2c in __asan_memcpy (libclang_rt.asan_osx_dynamic.dylib+0x40d2c)
    #1 0x106716ed4 in -[CDLCSegment initWithDataCursor:] (class-dump+0x100040ed4)
    #2 0x10672d82b in +[CDLoadCommand loadCommandWithDataCursor:] (class-dump+0x10005782b)
    ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants