The Anatomy of a Mach-O
The Mach Object (Mach-O) is the binary format used on Apple’s operating systems for executables, libraries, and object code. It was created for the Mach kernel (hence the name) and introduced in NeXTSTEP, the predecessor to macOS, as a replacement for the a.out format.
[…]
In this post, we’ll explore Mach-O’s layout and history. Then, we will examine how macs use Mach-O for code signing integrity and for Pointer Authentication Codes (PAC) on ARM64e systems.
Previously:
- Archaeology 1.4
- PACMAN Attack on M1 Processor
- Auto Linking in MachO-Explorer
- Parsing Mach-O Files
- MachOView
- Mach-O vs. CFM
