iOS Binary Protection Missing

Detects iOS app configurations missing binary hardening features like ASLR, stack canaries, and ARC.

zakirkun Updated

File contents

iOS Binary Protection Missing

Overview

iOS binaries should be compiled with hardening flags:

  • PIE (ASLR): Randomizes memory addresses, making exploits harder
  • Stack Canaries: Detects stack smashing before return address overwrite
  • ARC (Automatic Reference Counting): Reduces use-after-free vulnerabilities
  • Bitcode: Allows Apple to re-optimize binary with future security improvements

Missing these protections makes reverse engineering and exploitation easier.

Remediation

  • Enable PIE: -pie linker flag
  • Enable Stack Canaries: -fstack-protector-all
  • Enable ARC in Objective-C projects
  • Build with latest Xcode toolchain

zakirkun/ice-tea/tree/main/skills/mobile/ios/binary-protection-missing commit bbab9ab769

Frequently asked questions

npx skillmds@latest add zakirkun/ios-binary-protection-missing