Post by @beccadax@soincredibly.gay

Becca Royal-Gordon

@beccadax@soincredibly.gay 9 hr. ago

Wh—what is the DVDPlayback framework doing???

Allow Unsigned Executable Memory Entitlement

A Boolean value that indicates whether the app may create writable and executable memory without the restrictions imposed by using the MAP_JIT flag.

(irrelevant text omitted)

In rare cases, an app might need to override or patch C code, use the long-deprecated NSCreateFileImageFromMemory (which is fundamentally insecure), or use the DVDPlayback framework. — Allow Unsigned Executable Memory Entitlement A Boolean value that indicates whether the app may create writable and executable memory without the restrictions imposed by using the MAP_JIT flag. (irrelevant text omitted) In rare cases, an app might need to override or patch C code, use the long-deprecated NSCreateFileImageFromMemory (which is fundamentally insecure), or use the DVDPlayback framework.

1 Boost

0 Likes

Rosyna Keller

@rosyna@mastodon.social 2 hr. ago

@beccadax @siracusa I originally wrote this document. The DVD Playback framework was decoding a blob for decryption, saving it unsigned to disk, and then manually loading the saved file into process memory. It no longer does this (I filed a radar as soon as I found the issue), but it stayed around for a couple of releases and we got some support requests about it, necessitating it be explicitly mentioned when rolling out the hardened runtime requirement.