iOS Binary Protection Missing

Detects iOS app configurations missing binary hardening features like ASLR, stack canaries, and ARC.

zakirkun bbab9ab 2 files · 1.8 KB Updated

File contents

iOS Binary Protection Missing

Overview

iOS binaries should be compiled with hardening flags:

  • PIE (ASLR): Randomizes memory addresses, making exploits harder
  • Stack Canaries: Detects stack smashing before return address overwrite
  • ARC (Automatic Reference Counting): Reduces use-after-free vulnerabilities
  • Bitcode: Allows Apple to re-optimize binary with future security improvements

Missing these protections makes reverse engineering and exploitation easier.

Remediation

  • Enable PIE: -pie linker flag
  • Enable Stack Canaries: -fstack-protector-all
  • Enable ARC in Objective-C projects
  • Build with latest Xcode toolchain

zakirkun/ice-tea/tree/main/skills/mobile/ios/binary-protection-missing commit bbab9ab769

Frequently asked questions

npx skillmds@latest add zakirkun/ios-binary-protection-missing