dot/macho
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

overwrite old cstring data with random

Browse Source
This commit is contained in:
nganhkhoa 2024-08-26 16:08:10 +07:00
parent 7fa3ba0b7d
commit 9cdf9f0ff5
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
macho-go/pkg/ios/macho/edit.go
View File

@ -769,11 +769,17 @@ func (mc *MachoContext) RemoveStrings() {
mc.file.WriteAt(old_linkedit, int64(edit_segment.Fileoff())) mc.file.WriteAt(old_linkedit, int64(edit_segment.Fileoff()))
// prepare dummy bytes into new string segment, 0 for now // prepare dummy bytes into new string segment, 0 for now
// this is a way to divert their effort, writing fake strings
// will be written again at runtime
dummy := make([]byte, edit_segment.Fileoff() - string_segment.Fileoff()) dummy := make([]byte, edit_segment.Fileoff() - string_segment.Fileoff())
copy(dummy, []byte("We R BShield\n")) copy(dummy, []byte("We R BShield\n"))
mc.file.WriteAt(dummy, int64(string_segment.Fileoff())) mc.file.WriteAt(dummy, int64(string_segment.Fileoff()))
// TODO: erase old strings // TODO: erase old strings
cstring_start := uint64(cstring.Offset())
random := make([]byte, cstring.Size())
rand.Read(random)
mc.file.WriteAt(random, int64(cstring_start))
// re-read internal buffer // re-read internal buffer
last, _ := mc.file.Seek(0, io.SeekEnd) last, _ := mc.file.Seek(0, io.SeekEnd)
@ -870,7 +876,7 @@ func (mc *MachoContext) RemoveStrings() {
value := C.MakeRebaseFixupOpcode(C.int(symbol.next), C.ulonglong(target), C.ulonglong(high8)) value := C.MakeRebaseFixupOpcode(C.int(symbol.next), C.ulonglong(target), C.ulonglong(high8))
v := make([]byte, 8) v := make([]byte, 8)
mc.byteorder.PutUint64(v, uint64(value)) mc.byteorder.PutUint64(v, uint64(value))
fmt.Printf("change to rebase at %x\n", symbol.file_address) fmt.Printf("string rebase change at %x\n", symbol.file_address)
mc.file.WriteAt(v, int64(symbol.file_address)) mc.file.WriteAt(v, int64(symbol.file_address))
} }
} }