Use DTrace and LLDB to attach to the UIKit host process and patch out…

… check
zhuowei · Jun 5, 2018 · fc3d2d9 · fc3d2d9
1 parent e56dc10
commit fc3d2d9
Show file tree

Hide file tree

Showing 4 changed files with 21 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -5,3 +5,9 @@ Not ready.
 - Other Linker Flags: -fuse-ld=$(PROJECT_DIR)/ldwrap
 - Code Signing: anything is fine (I use Don't Code Sign)
 - build for Simulator (iPhone SE is fine)
+
+In another terminal
+
+```
+sudo ./uikitenabler.sh
+```
diff --git a/tracescript.d b/tracescript.d
@@ -0,0 +1,5 @@
+proc:::start /execname == "UIKitHostApp"/ {
+	printf("New UIKit window!\n");
+	raise(SIGSTOP);
+	system("lldb -p %d -s uikitenabler.lldb", pid);
+}
diff --git a/uikitenabler.lldb b/uikitenabler.lldb
@@ -0,0 +1,8 @@
+breakpoint set -r "@objc UIKitHostApp.UHAService.authenticateConnection"
+breakpoint command add
+thread return 1
+process detach
+script import ctypes
+script ctypes.CDLL("libSystem.dylib").exit(0)
+DONE
+c
diff --git a/uikitenabler.sh b/uikitenabler.sh
@@ -0,0 +1,2 @@
+#!/bin/sh
+exec dtrace -w -s tracescript.d