Dynamic validation and code modification detection

Hello all. Would codesigning SecCodeCheckValidity detect, if someone modified the running code in memory without touching mach-o container? Like changing conditional branch to unconditional, or changing some variable in the global/static data?

Thank you.

Related Posts

Tags: , , , ,

This entry was posted on Tuesday, February 9th, 2010 at 9:16 am and is filed under Apple. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

  1. Perry The Cynic says:
    February 9, 2010 at 9:33 pm
  1. There are no trackbacks for this post yet.

Leave a Reply