arm64 protected macho crashes

Issues related to VMProtect
Post Reply
NavilleZhang
Posts: 19
Joined: Fri May 27, 2022 6:23 am

arm64 protected macho crashes

Post by NavilleZhang »

I don't know why the previous thread is locked, but:

- Running the protected macho results in an instant ``killed: 9`` before even reaching the protected code, toggling between mutation and virtualization doesn't prevent the crash.
- Trying to codesign the protected MachO results in ``internal error in Code Signing subsystem``
Admin
Site Admin
Posts: 2814
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: arm64 protected macho crashes

Post by Admin »

Try to disable "System Integrity Protection" for testing of protected binaries:
https://developer.apple.com/documentati ... protection
NavilleZhang
Posts: 19
Joined: Fri May 27, 2022 6:23 am

Re: arm64 protected macho crashes

Post by NavilleZhang »

Admin wrote: Mon Sep 22, 2025 6:51 am Try to disable "System Integrity Protection" for testing of protected binaries:
https://developer.apple.com/documentati ... protection
```
dyld[2132]: section '__text' end address 0x103577DE4 is beyond containing segment's end address 0x100004000 in /Users/REDACTED/MYBIN
dyld[2132]: section '__text' end address 0x103577DE4 is beyond containing segment's end address 0x100004000
[1] 2132 abort
```
NavilleZhang
Posts: 19
Joined: Fri May 27, 2022 6:23 am

Re: arm64 protected macho crashes

Post by NavilleZhang »

that 0x100004000 belongs to __TEXT,__text, for some reason after vmp protecting just one function, the entire __TEXT,__text is only one page size.


The segment names are also completely invalid:

```
oad command 5
cmd LC_SEGMENT_64
cmdsize 72
segname .85_
...
Load command 6
cmd LC_SEGMENT_64
cmdsize 72
segname .6Mt
...
Load command 7
cmd LC_SEGMENT_64
cmdsize 552
segname .#GT
...
Section
sectname __la_symbol_ptr
segname .#GT
```
Admin
Site Admin
Posts: 2814
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: arm64 protected macho crashes

Post by Admin »

VMProtect works the same for x86, x86_64 and ARM64.
NavilleZhang
Posts: 19
Joined: Fri May 27, 2022 6:23 am

Re: arm64 protected macho crashes

Post by NavilleZhang »

What I meant is your packing step seems to produce invalid / malformed macho, so the OS refuses to load that MachO at all.

Just tried with the latest 2431 build and still the same error
NavilleZhang
Posts: 19
Joined: Fri May 27, 2022 6:23 am

Re: arm64 protected macho crashes

Post by NavilleZhang »

ping, any update?
Admin
Site Admin
Posts: 2814
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: arm64 protected macho crashes

Post by Admin »

Try to switch off the packing feature.
NavilleZhang
Posts: 19
Joined: Fri May 27, 2022 6:23 am

Re: arm64 protected macho crashes

Post by NavilleZhang »

turning off packing seems to work for now, hope packing gets fixed in the next release
Admin
Site Admin
Posts: 2814
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: arm64 protected macho crashes

Post by Admin »

Try the 2461 build.
Post Reply