Dynamic validation and code modification detection

Hello all. Would codesigning SecCodeCheckValidity detect, if someone modified the running code in memory without touching mach-o container? Like changing conditional branch to unconditional, or changing some variable in the global/static data?

Thank you.

Share and Enjoy:
  • Print
  • email
  • PDF
  • Digg
  • Facebook
  • LinkedIn
  • Twitter
  • Live
  • Yahoo! Bookmarks
  • Google Bookmarks

Related posts:

  1. HPA/DCO detection
  2. VoiceOver detection
  3. Modified “modification date”
  4. Modified “modification date”
  5. Modified “modification date”
  6. Modified “modification date”
  7. Modified “modification date”
  8. Modified “modification date”
  9. iPhone/iPod Device Detection Necessary for App Approval?
  10. Automatic language detection – a bug (again) or what. Snow Foundation NSSpellServer.

Tags: , , , ,

This entry was posted on Tuesday, February 9th, 2010 at 9:16 am and is filed under Apple. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

  1. Perry The Cynic says:
    February 9, 2010 at 9:33 pm
  1. There are no trackbacks for this post yet.

Leave a Reply