XPCSnoop JLaunchCtl

Used for discussing the various tools in the book as well as encouraging members to share tools

XPCSnoop JLaunchCtl

Postby bob969 » Mon May 02, 2016 6:50 pm

Hi Jonathan,

I downloaded the source for XPCSnoop from http://newosxbook.com/articles/jlaunchctl.html and am trying to compile it from source. How do you compile this without linking to the library that contains xpc_pipe_routine?

Thanks
bob969
 
Posts: 8
Joined: Tue Mar 22, 2016 1:44 pm

Re: XPCSnoop JLaunchCtl

Postby Siguza » Tue May 03, 2016 4:56 pm

xpc_pipe_routine is exported by /usr/lib/system/libxpc.dylib, which /usr/lib/libSystem.dylib links against.

Code: Select all
bash$ jtool -L -arch x86_64 /usr/lib/libSystem.dylib | grep xpc
   /usr/lib/system/libxpc.dylib
Code: Select all
bash$ jtool -S -arch x86_64 /usr/lib/system/libxpc.dylib | grep xpc_pipe_routine
0000000000005d46 T _xpc_pipe_routine
000000000001bebb T _xpc_pipe_routine_async
000000000001bf7d T _xpc_pipe_routine_forward
000000000001bf1f T _xpc_pipe_routine_reply
User avatar
Siguza
Unicorn
 
Posts: 159
Joined: Thu Jan 28, 2016 10:38 am


Return to Tools

Who is online

Users browsing this forum: No registered users and 2 guests