Questions tagged [lldb]

LLDB is the debugger of the LLVM compiler infrastructure project.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

reaching unexpected breakpoint (defined by file/line) when debugging objc code with lldb

'm using lldb to debug objc based service. several breakpoints (which is set have been placed in the code, and I see that one of them is reached unexpectedly according to the stack trace. The method ...
0
votes
0answers
22 views

How can I lookup the current address of a location by file address in lldb?

Going back and forth with a debugger, I can very easily determine the file address of a memory location by doing (lldb) image lookup -a 0x102802574 Address: Program[0x0000000000002574] (Program....
0
votes
0answers
30 views

lldb errors when attaching to iOS processes

While doing some analysis on a jailbroken iPhone (iOS 12.2), I wanted to put a breakpoint on a function inside the DVIA-v2 (Swift) application but I will see these errors b ...
0
votes
0answers
91 views

Learning Certificate Pinning Bypass iOS

I want to understand how to do a Cert pinning bypass. So this is what I've attempted: Attempt 1 Use frida-trace -U THEAPPNAME -i "*NSURL*" The problem with this approach is that is not matching ...
2
votes
1answer
460 views

gdb list functions names equivalent for lldb

is possible with lldb have a list of functions at runtime like gdb info functions? I had a look at help but didn't find it.
1
vote
1answer
226 views

how watchpoint on register works

GDB has an option to set watchpoint on register*, how does it work ? what happens during context switching ? why the only implementation is for mips ? Is there a way to make it work for lldb also ? *...
2
votes
0answers
156 views

(iOS lldb) Unable to debug past a splash/loading screen

I'm trying to lldb debug this certain iOS application. Its behavior is that when I click the application, the splash/loading screen comes up, then the main activity. However, whenever I try to debug ...
1
vote
0answers
383 views

IDA Pro macOS kernel debugging and lldb support

I'm trying to revers some kexts on macOS and I can't find a way to achieve the same level of debugging you can do on Windows kernel with IDA and WinDBG. Is there a way to add support for lldb? Or can ...
2
votes
1answer
989 views

How to check which thread crashed?

Given I've opened core file via lldb, how can I check which thread crashed? $ lldb -c core.45583 -o 'bt all' | grep -A2 'thread #' * thread #1, stop reason = signal SIGSTOP * frame #0: ...
2
votes
1answer
370 views

Why lldb seems to not stop at breakpoints?

While reverse engineering an iPhone app remotely, I set up breakpoints to some function's adresses. These adresses comes from the disassembled binary analysed with Hopper, and it seems like they must ...
3
votes
0answers
331 views

When I start up a remote thread in an application, why does it always crash when it tries to access data in the thread structure?

I'm on OS X 10.10 64 bit (x86_64) and created a chunk of memory called code with vm_allocate. I allocate a chunk of memory for a stack. I load a library to memory and determine an entry point to ...
1
vote
2answers
578 views

Load symbols from __objc_* sections in LLDB

When an executable that has been stripped is opened in lldb, lldb doesn't know the names of any functions and breakpoints have to be set manually on hex addresses, which is very annoying. However, ...
1
vote
1answer
3k views

How to run automatically executable from CLI using lldb?

In gdb, I can run automatically the binary as (as per this post): gdb -ex run /bin/true What's the equivalent parameter for lldb? This works: echo run | lldb /bin/true but I'd like to back to ...
3
votes
2answers
2k views

How to stop debugger right after the execution?

I'm using /bin/true as my sample binary (without available main method): $ lldb /bin/true (lldb) target create "/bin/true" Current executable set to '/bin/true' (x86_64). (lldb) break main invalid ...
1
vote
2answers
248 views

How to debug binary which doesn't have executable flags?

I'm trying to debug the binary which is not executable. As sample I'm using /bin/true with 644 permission: install -m 644 /bin/true . and I'm trying to run it as: $ lldb true (lldb) target create "...
1
vote
0answers
155 views

How to dump PHP backtrace on live running script in lldb?

I'm trying to print PHP backtrace of the live running script using the following 2 simple steps: Run PHP script as: php -r "sleep(1000);" On another console, I've called directly ...
4
votes
1answer
1k views

How to find the entry point in LLDB on OS X?

How can I identify the entry point of an executable in LLDB? In GDB, we can use the info file command, but that won't work in LLDB. Can anyone show me how to do that?
1
vote
0answers
528 views

Why darwin kernel crashes on function call via lldb while debugging the process?

I wanted to debug the hanging ruby process, but instead my kernel crashes each time when I'm doing the following steps: I'm re-running my ruby script (vagrant) which hangs: $ vagrant destroy -f &...
2
votes
1answer
455 views

lldb - breakpoint not reached when attach do process (but executing when set before app running)

I am trying to set breakpoint to existing processes, but when i am trying to do it breakpoint is not reached, but when i am running app directly in lldb and set breakpoint before it runs all ...
1
vote
1answer
958 views

Setting Breakpoints at functions decoded by Hopper/IDA Pro in an iOS app

So, its been very interesting to reverse engineer an iOS application and I have made significant improvement into learning how to read disassembly and understand them. Now I was trying to debug the ...
2
votes
1answer
4k views

What does Hopper's Debugger Server do?

Hopper offers a GDB/LLDB Debugger Server companion to the standard program. I'm unclear on what this should / can be used for. When I run the debugger server on the same machine that I'm using I see ...
-1
votes
1answer
2k views

Reversing iOS games with LLDB and IDA on arm64

Cracked the game with clutch and set watchpoint on the value address, when the value changes it breaks just fine but when i go to that binary address in IDA it shows me different instruction, here's ...
3
votes
2answers
3k views

lldb: break at start of actual code, not entrypoint

I want lldb to break at the start of the actual code of an OS X application (which might be called main if symbols are existing). I am currently looking this up by hand, but as I want to script some ...
2
votes
1answer
950 views

How to set a breakpoint when a method is called using LLDB on OS X?

I'm trying to hit a breakpoint that I set in LLDB (CLI), but for whatever reason I'm not hitting my breakpoint. I am messing around with the stock Calculator.app on OS X, and am trying to call / hit ...