specter-mem 1.0.5

ARM64 memory manipulation framework for iOS/macOS — inline hooking, stealth code patching, hardware breakpoints, and shellcode loading
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88

//! Mach-O segment and section querying via Darwin APIs

use crate::memory::info::image::{ImageError, get_image_base};
use std::ffi::CString;
use thiserror::Error;

unsafe extern "C" {
    fn getsegmentdata(header: *const u8, segname: *const i8, size: *mut libc::c_ulong)
    -> *const u8;

    fn getsectiondata(
        header: *const u8,
        segname: *const i8,
        sectname: *const i8,
        size: *mut libc::c_ulong,
    ) -> *const u8;
}

#[derive(Error, Debug)]
pub enum MachoError {
    #[error("Image not found: {0}")]
    ImageNotFound(#[from] ImageError),
    #[error("Segment not found: {0}")]
    SegmentNotFound(String),
    #[error("Section not found: {0},{1}")]
    SectionNotFound(String, String),
}

pub struct SegmentData {
    pub start: usize,
    pub end: usize,
    pub size: usize,
}

/// Get a named segment from a loaded image
pub fn get_segment(image_name: &str, seg_name: &str) -> Result<SegmentData, MachoError> {
    let base = get_image_base(image_name)?;
    let header = base as *const u8;
    let c_seg =
        CString::new(seg_name).map_err(|_| MachoError::SegmentNotFound(seg_name.to_string()))?;

    let mut size: libc::c_ulong = 0;
    let ptr = unsafe { getsegmentdata(header, c_seg.as_ptr(), &mut size) };

    if ptr.is_null() {
        return Err(MachoError::SegmentNotFound(seg_name.to_string()));
    }

    let start = ptr as usize;
    let sz = size as usize;
    Ok(SegmentData {
        start,
        end: start + sz,
        size: sz,
    })
}

/// Get a named section within a segment from a loaded image
pub fn get_section(
    image_name: &str,
    seg_name: &str,
    sect_name: &str,
) -> Result<SegmentData, MachoError> {
    let base = get_image_base(image_name)?;
    let header = base as *const u8;
    let c_seg = CString::new(seg_name)
        .map_err(|_| MachoError::SectionNotFound(seg_name.to_string(), sect_name.to_string()))?;
    let c_sect = CString::new(sect_name)
        .map_err(|_| MachoError::SectionNotFound(seg_name.to_string(), sect_name.to_string()))?;

    let mut size: libc::c_ulong = 0;
    let ptr = unsafe { getsectiondata(header, c_seg.as_ptr(), c_sect.as_ptr(), &mut size) };

    if ptr.is_null() {
        return Err(MachoError::SectionNotFound(
            seg_name.to_string(),
            sect_name.to_string(),
        ));
    }

    let start = ptr as usize;
    let sz = size as usize;
    Ok(SegmentData {
        start,
        end: start + sz,
        size: sz,
    })
}