Class-dump Facebook.decrypted报错Segmentation fault: 11


#1

代码及日志:
55:/var/mobile/Containers/Data/Application/C8D0E25D-3474-4B2A-8585-E9AB0D0E6353/Documents root# DYLD_INSERT_LIBRARIES=dumpdecrypted.dylib /var/mobile/Containers/Bundle/Application/50F2EED2-60AB-4ED4-8E6F-834D2C177899/Facebook.app/Facebook
mach-o decryption dumper

DISCLAIMER: This tool is only meant for security research purposes, not for application crackers.

[+] detected 32bit ARM binary in memory.
[+] offset to cryptid found: @0xe3b0c(from 0xe3000) = b0c
[+] Found encrypted data at address 00004000 of length 5505024 bytes - type 1.
[+] Opening /private/var/mobile/Containers/Bundle/Application/50F2EED2-60AB-4ED4-8E6F-834D2C177899/Facebook.app/Facebook for reading.
[+] Reading header
[+] Detecting header type
[+] Executable is a FAT image - searching for right architecture
[+] Correct arch is at offset 16384 in the file
[+] Opening Facebook.decrypted for writing.
[+] Copying the not encrypted start of the file
[+] Dumping the decrypted data into the file
[+] Copying the not encrypted remainder of the file
[+] Setting the LC_ENCRYPTION_INFO->cryptid to 0 at offset 4b0c
[+] Closing original file
[+] Closing dump file

XXX-Air:Documents XXX$ class-dump --arch armv7 -S -s -H ~/Desktop/Facebook.decrypted -o ~/Desktop/FB_Headfile/
Segmentation fault: 11

系统8.1.2 iphone5c facebook版本147.0
同样的操作方式别的app是可以正常dump出文件的 这个facebook版本是比较新的 看了别的帖子有提及说是因为混合了swfit代码 ida是可以反编译Facebook.decrypted的文件信息的 现在想用logify跟踪函数调用过程 所以需要dump出来的文件生成tweak

望知情的朋友告知一下Segmentation fault: 11 错误的原因 解决的方向 十分感谢


#2

已经更换一个class-dump解决了问题
下载链接
https://github.com/AloneMonkey/MonkeyDev/blob/master/bin/class-dump
感谢作者的提供