News for hackers. Stuff that matters.

A comment on Debugging an Undebuggable App. Parent comment

Re:Debugging an Undebuggable App by kmfpl on Tuesday February 18, 2025 @11:12AM (#43091236)
Compiler can sometimes inline syscall wrappers, so not that easy to check statically. For the same reason searching for SVC instructions would yield tons of results. If you search for the exact syscall ID moved into X16 you’d find it immediately.
[ Parent | on HN ]
Re:Debugging an Undebuggable App by eddd-ddde on Tuesday February 18, 2025 @12:42PM (#43092706)
But how can you safely inline a non-stable ABI?
[ Parent | on HN ]
Re:Debugging an Undebuggable App by lilyball on Tuesday February 18, 2025 @01:48PM (#43093536)
The stable interface to syscalls on Apple platforms is libSystem, which is a dynamic library. Compilers cannot inline syscalls on Apple platforms as that would defeat the whole point of making libSystem the stable ABI. In fact, compilers don't even see libSystem itself when linking, they just see a .tbd file that lists all of libSystem's symbols.
[ Parent | on HN ]