AFLplusplus/LibAFL

DeExit for latest MacOS

Open

#922 opened on Dec 1, 2022

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Rust (476 forks)github user discovery
enhancementhelp wantedmacos

Repository metrics

Stars
 (2,615 stars)
PR merge metrics
 (Avg merge 17d 22h) (10 merged PRs in 30d)

Description

Apple seems to have killed their LD_PRELOAD-like honking on the latest MacOS, see: https://github.com/AFLplusplus/AFLplusplus/issues/1594#issuecomment-1326414145

As suggested in that thread, we might try calls-interposing to replace exits with abort, or, alternatively, find a pre-exit hook for MacOS.

Interposing docs: https://opensource.apple.com/source/dyld/dyld-733.6/include/mach-o/dyld-interposing.h.auto.html

Contributor guide

Research direction
Implement dyld interposing to replace exits with abort, or find a pre exit hook for MacOS.
Tech stack
rust
Domain
security
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
RustMacOS
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
50