The question is simple:
How can I enable ASLR on my Xcode iOS project?
I don't find any ASLR options in the target settings.
Asked
Active
Viewed 1,031 times
2
-
ASLR or ALSR ? I think you mean ASLR. Why would you enable it ? Everything is handled by iOS and I think it is at kernel level. – Adam Sep 05 '19 at 09:11
-
We had a security audit and one of the remarks was, I quote: "The application does not enforce ASLR binary protection." They checked using otool: --> NOUNDEFS DYLDLINK TWOLEVEL PIE – Joris Mans Sep 05 '19 at 10:10
-
Joris even in my company they are doing security audit. Did you found any solution how to enable ASLR in Xcode project ? – Arshad Shaik Dec 24 '20 at 04:39
1 Answers
1
ASLR is an important exploit mitigation technique introduced in iOS 4.3. ASLR makes the remote exploitation of memory corruption vulnerabilities significantly more difficult by randomizing the application objects’ location in the memory. By default, iOS applications use limited ASLR and only randomize part of the objects in the memory.
Follow the link where deply describe about ASLR and may be you can find solution.
Sagar Chauhan
- 5,715
- 2
- 22
- 56
-
1If I understand it correctly, the fact that PIE is included means the app is built with ASLR? otool shows "PIE" in its output, on my build. – Joris Mans Sep 06 '19 at 12:09
-