5GUIs icon indicating copy to clipboard operation
5GUIs copied to clipboard

Switch from `objdump` to dlopen on macOS BS to detect nested dependencies

Open helje5 opened this issue 3 years ago • 3 comments

macOS BS has the "dyld shared cache" which breaks running objdump on the dependencies. E.g. this results in BS Safari not having any features detected.

$ otool -L /Applications/Safari.app/Contents/MacOS/Safari
/Applications/Safari.app/Contents/MacOS/Safari (architecture x86_64):
	/System/Library/PrivateFrameworks/Safari.framework/Versions/A/Safari (compatibility version 528.0.0, current version 610.2.6)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1292.0.0)
/Applications/Safari.app/Contents/MacOS/Safari (architecture arm64e):
	/System/Library/PrivateFrameworks/Safari.framework/Versions/A/Safari (compatibility version 528.0.0, current version 610.2.6)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1292.0.0)

W/ the "dyld shared cache", the /System/Library/PrivateFrameworks/Safari.framework doesn't actually exist on disk anymore (hence objdump can't analyse it).

Maybe we can use dlopen to load and open an executable and then somehow traverse the link list (w/o actually executing the binary)?

helje5 avatar Oct 03 '20 12:10 helje5

Alternatively, you could dump the shared cache and save the link graph, as I expect this to only be a problem if an app links a system framework that transitively links AppKit.

Alternatively you can just launch the app, stop it, and see what's loaded into the process.

saagarjha avatar Oct 04 '20 03:10 saagarjha

Alternatively, you could dump the shared cache and save the link graph

How would I do this?

helje5 avatar Oct 05 '20 10:10 helje5

You can use something like https://github.com/saagarjha/dyld-shared-cache-big-sur to grab all the files and they read the dependencies from everything.

saagarjha avatar Oct 07 '20 22:10 saagarjha