I'm searching for signals call in a Mach-O mutliarch using radare2. This is what I start with:

file sample
/tmp/sample (for architecture x86_64): Mach-O 64-bit executable x86_64
/tmp/sample (for architecture arm64): Mach-O 64-bit executable arm64

As I'm interested by the arm64 arch, I load the program in radare2 with:

r2 -a arm -b 64 -A sample

Then trying to find the signal calls I'm surprise by the results:

> asl~signal,sigaction
sigaction = 0x80.46

Why is radare2 talking about the 0x80 interruption although arm64 should use svc instruction as stated by man 2 syscall ?

From there how can I find all functions calling a SIGTRAP ?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.