Page 1 of 1

XPCSnoop JLaunchCtl

PostPosted: Mon May 02, 2016 6:50 pm
by bob969
Hi Jonathan,

I downloaded the source for XPCSnoop from http://newosxbook.com/articles/jlaunchctl.html and am trying to compile it from source. How do you compile this without linking to the library that contains xpc_pipe_routine?

Thanks

Re: XPCSnoop JLaunchCtl

PostPosted: Tue May 03, 2016 4:56 pm
by Siguza
xpc_pipe_routine is exported by /usr/lib/system/libxpc.dylib, which /usr/lib/libSystem.dylib links against.

Code: Select all
bash$ jtool -L -arch x86_64 /usr/lib/libSystem.dylib | grep xpc
   /usr/lib/system/libxpc.dylib
Code: Select all
bash$ jtool -S -arch x86_64 /usr/lib/system/libxpc.dylib | grep xpc_pipe_routine
0000000000005d46 T _xpc_pipe_routine
000000000001bebb T _xpc_pipe_routine_async
000000000001bf7d T _xpc_pipe_routine_forward
000000000001bf1f T _xpc_pipe_routine_reply