Image list Foundation没有偏移后模块基地址

Foundation 和很多模块都没有最后括号里的偏移后模块基地址。
Xcode7.1的lldb。
iOS是9.0.2。
为什么呢?

(lldb) image list -o -f
[ 0] 0x0000000000018000 /Applications/MobileSMS.app/MobileSMS(0x0000000100018000)
[ 1] 0x00000000000b4000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/usr/lib/dyld
[ 2] 0x0000000100050000 /Library/MobileSubstrate/MobileSubstrate.dylib(0x0000000100050000)
[ 3] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/Foundation.framework/Foundation
[ 4] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/UIKit.framework/UIKit
[ 5] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/AddressBook.framework/AddressBook

c一下,再im li -o -f看看

c 了好几次了

改成im li -f -o看看

补充:应该是这个原因,后面显示的是我电脑上的路径。


貌似还是不行。Foundation后面还是缺少括号内的地址。

(lldb) image list -f -o
[ 0] /Applications/MobileSMS.app/MobileSMS 0x0000000000048000(0x0000000100048000)
[ 1] /Library/MobileSubstrate/MobileSubstrate.dylib 0x0000000100094000(0x0000000100094000)
[ 2] /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/Foundation.framework/Foundation 0x0000000002ba0000
[ 3] /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/UIKit.framework/UIKit 0x0000000002ba0000
[ 4] /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/AddressBook.framework/AddressBook 0x0000000002ba0000
[ 5] /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/MobileCoreServices.framework/MobileCoreServices 0x0000000002ba0000
[ 6] /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/AVFoundation.framework/AVFoundation 0x0000000002ba0000

另外,所有系统framework的ASLR偏移都是 0x0000000002ba0000

[ 2] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/Foundation.framework/Foundation
[ 3] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/UIKit.framework/UIKit
[ 4] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/AddressBook.framework/AddressBook
[ 5] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/MobileCoreServices.framework/MobileCoreServices
[ 6] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/Frameworks/AVFoundation.framework/AVFoundation
[ 7] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/PrivateFrameworks/AssistantServices.framework/AssistantServices
[ 8] 0x0000000002ba0000 /Users/everettjf/Library/Developer/Xcode/iOS DeviceSupport/9.0.2 (13A452)/Symbols/System/Library/PrivateFrameworks/FTServices.framework/FTServices
[ 9] 0x0000000002ba0000 /Users/everettjf/Lib

和楼主遇到同样的情况 ,楼主解决了吗

原因见上面。
没有解决。不过这个不影响分析。

请问楼主现在解决了么

原因以上说明了呀

1 个赞