`dart` will not run on macOS, killed due to invalid Apple Developer cert

[jmagman]

The dev channel dart binary is killed when running on macOS.

Download https://storage.googleapis.com/dart-archive/channels/dev/release/3.10.0-43.0.dev/sdk/dartsdk-macos-arm64-release.zip

$ dart-sdk/bin/dart
zsh: killed     dart-sdk/bin/dart

Crash is:

Exception Type:        EXC_BAD_ACCESS (SIGKILL (Code Signature Invalid))
Exception Codes:       UNKNOWN_0x32 at 0x00000001054dba14
Exception Codes:       0x0000000000000032, 0x00000001054dba14

Termination Reason:    Namespace CODESIGNING, Code 2 Invalid Page

This doesn't seem to happening with the beta channel binaries.

[jmagman]

Actually that timestamp is when the codesigning happened, not the expiration. When I extract the certificate it says Not valid after March 26, 2029 so I'm not sure why this is happening...

[jmagman]

3.9.0-3.0.dev runs, but 3.10.0-43.0.dev doesn't...

[jmagman]

Log message:

CODE SIGNING: process 23918[dart]: rejecting invalid page at address 0x105534000 from offset 0x4000 in file "<nil>" (cs_mtime:0.0 == mtime:0.0) (signed:0 validated:0 tainted:0 nx:0 wpmapped:1 dirty:0 depth:0)

[athomas]

I can't reproduce this locally. @rmacnak-google any ideas what this is?

[rmacnak-google]

If I download 3.10.0-43.0.dev, I observe the sigkill and see it disappear if I unquarantine the file with xattr -c. If I build that version locally, it works as-built and still works even if I copy the quarantine xattr over.

Does this still fail after your recipe change? I don't see any signed builds since that change yet, but it looks plausible it would fix this.