JonZu Groups

Hello all. Would codesigning SecCodeCheckValidity detect, if someone modified the running code in memory without touching mach-o container? Like changing conditional branch to unconditional, or changing some variable in the global/static data?

Thank you.

Related posts:

1. Modified “modification date”
2. Modified “modification date”
3. Modified “modification date”
4. Modified “modification date”
5. Modified “modification date”
6. Modified “modification date”
7. HPA/DCO detection
8. VoiceOver detection
9. NSURL Name of a File: Content nor Attribute, how to check for modification?
10. iPhone/iPod Device Detection Necessary for App Approval?

Tags: Code, detection!!, Dynamic, modification, validation

This entry was posted on Tuesday, February 9th, 2010 at 9:16 am and is filed under Apple. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.