Crash on iPhone5/4s simulator caused by recursive function call about fishhook

[draveness]

I don't know that either. But after this pull request is merged, we will ship to the latest version of fishhook. But currently, we iterate all the images loaded by dyld and use regex to get the specific images by name. Ultimately use rebind_symbol_images method to solve this problem temporarily.

[draveness]

Update: Crash on iPad 2 Simulator which is 32 bits. And works fine on other 64 bits simulator.

[draveness]

It seems like when using fishhook to rebind symbols in all images on 32-bits simulator finally bind connect function to libsystem_sim_kernel.lib. And when using 64-bits finally bind to libsystem_kernel.dylib and the function imp of connect in libsystem_sim_kernel.lib may don't related to networking.

So when new_connect is being called, it doesn't return the correct result to the upper layer. This may lead to infinite looping problem.

I fixed this problem by using rebind_symbols_image function to change specific function imp in libsystem_network.dylib. Questions seem to be solved.

Only puzzle remains now, does the connect function in libsystem_kernel.dylib has the same function as which in libsystem_network.dylib, when using 64-bits simulator with rebind_symbols. Fishhook rebinds all the symbols in images and coincidently bind function in libsystem_kernel.dylib to our origianl_connect function pointer which has the same implementation. So all the code works fine?

I don't quite believe in fortune or coincidence. But really thanks feeding some info on this lib's usage.

👍

[kastiglione]

The solution here may be to support for mach-o's two-level namespaces. When rebinding a symbol, fishhook should first check to see if that symbol refers to a specific library. If there is a specific library, fishhook should not rebind symbols of the same name that are bound to other libraries.

[kastiglione]

I don't know if helps the problem you're hitting, but I put up a pull request (#34) to support two-level namespaces. If there are multiple functions named connect as you suggest, then the new code would allow the rebinding of only symbols from a specified library.