Tags: frida/frida-gum
Tags
gumjs: Avoid freeing NULL ffi_closure (#1089) NativeCallback construction may fail before an ffi_closure is allocated, for example when invalid argument types are provided. In this case the finalizer was still calling ffi_closure_free() with a NULL pointer, causing libffi to crash instead of allowing the exception to propagate to JavaScript.
darwin-mapper: Validate local shared cache lookup While the symbol's module might appear to be in the shared cache, the actual lookup may give us an address in a dylib outside it. For example an introspection build of libsystem_pthread.dylib. Co-authored-by: Håvard Sørbø <havard@hsorbo.no>
darwin: Fix query_shared_cache_range() The previous VM-walk approach was fragile and could report incorrect ranges once any shared cache pages were copy-on-written. We now read the dyld cache header and mapping table to compute the range reliably. Co-authored-by: Håvard Sørbø <havard@hsorbo.no>
PreviousNext