Comments on: Gdb patches http://reverse.put.as/2009/08/26/gdb-patches/ Reverse Engineering for fun and pleasure! Sat, 04 Feb 2012 02:28:35 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15228 fG! Sun, 20 Feb 2011 10:58:52 +0000 http://reverse.put.as/?p=442#comment-15228 Very well! Part of the reversing effort is searching, reading and thinking. That's why it's fun! Very well! Part of the reversing effort is searching, reading and thinking. That’s why it’s fun!

]]> By: Neo http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15219 Neo Sun, 20 Feb 2011 03:02:22 +0000 http://reverse.put.as/?p=442#comment-15219 Dear fG! After some googling I found out how to patch and compile gdb, using the Snow Leopard 10.6.6 (Build 10J567) darwinbuild. I followed your instructions to build gdb from source, then I unpacked the "gdb-1344.tar.gz", patched with your "all_patches.patch" file, and I packed it again as "gdb-1344.tar." So I issued a "darwinbuild -nochroot gdb" command and it compiled like a charm! Now I'm able to take advantage of all your output improvements on gdb :-) By the way, I love how gdb now displays the raw bytes in x/i and disassemble commands! Thanks a lot once more for all your attention and help. Now I'm already making some progresses in my reversing efforts. I'll keep you posted how it goes ;-) Regards, Neo Dear fG!

After some googling I found out how to patch and compile gdb, using the Snow Leopard 10.6.6 (Build 10J567) darwinbuild.

I followed your instructions to build gdb from source, then I unpacked the “gdb-1344.tar.gz”, patched with your “all_patches.patch” file, and I packed it again as “gdb-1344.tar.”

So I issued a “darwinbuild -nochroot gdb” command and it compiled like a charm!

Now I’m able to take advantage of all your output improvements on gdb :-)

By the way, I love how gdb now displays the raw bytes in x/i and disassemble commands!

Thanks a lot once more for all your attention and help. Now I’m already making some progresses in my reversing efforts.

I’ll keep you posted how it goes ;-)

Regards,

Neo

]]> By: Neo http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15207 Neo Sat, 19 Feb 2011 17:18:04 +0000 http://reverse.put.as/?p=442#comment-15207 Dear fG! I start gdb using "sudo gdb", then I issue "exec-file ./example" command and gdb gives me the output "unable to read unknown load command 0×80000022". Maybe we can try another approach. I've been able to compile gdb with darwin build following your instructions. I can play around with your example file and with other programs as well, but I really want to apply your patches to display raw bytes in x/i and disassemble commands. Inside /usr/libexec/gdb I issue: sudo patch -p2 gdb-i386-apple-darwin all_patches.patch But I receive this output: patching file gdb-i386-apple-darwin Hunk #1 FAILED at 1905. Hunk #2 FAILED at 1955. Hunk #3 FAILED at 1993. Hunk #4 FAILED at 2017. Hunk #5 FAILED at 2068. Hunk #6 FAILED at 2096. 6 out of 6 hunks FAILED -- saving rejects to file gdb-i386-apple-darwin.rej can't find file to patch at input line 177 Perhaps you used the wrong -p or --strip option? The text leading up to this was: -------------------------- |diff -r b4b157088bc8 gdb-768/src/gdb/disasm.c |--- a/gdb-768/src/gdb/disasm.c Wed Aug 12 10:58:48 2009 +0100 |+++ b/gdb-768/src/gdb/disasm.c Wed Aug 26 15:09:04 2009 +0100 -------------------------- File to patch: How can I properly apply your all_patches.patch? Thanks again for your patience! Neo Dear fG!

I start gdb using “sudo gdb”, then I issue “exec-file ./example” command and gdb gives me the output “unable to read unknown load command 0×80000022″.

Maybe we can try another approach. I’ve been able to compile gdb with darwin build following your instructions.

I can play around with your example file and with other programs as well, but I really want to apply your patches to display raw bytes in x/i and disassemble commands.

Inside /usr/libexec/gdb I issue:

sudo patch -p2 gdb-i386-apple-darwin all_patches.patch

But I receive this output:

patching file gdb-i386-apple-darwin
Hunk #1 FAILED at 1905.
Hunk #2 FAILED at 1955.
Hunk #3 FAILED at 1993.
Hunk #4 FAILED at 2017.
Hunk #5 FAILED at 2068.
Hunk #6 FAILED at 2096.
6 out of 6 hunks FAILED — saving rejects to file gdb-i386-apple-darwin.rej
can’t find file to patch at input line 177
Perhaps you used the wrong -p or –strip option?
The text leading up to this was:
————————–
|diff -r b4b157088bc8 gdb-768/src/gdb/disasm.c
|— a/gdb-768/src/gdb/disasm.c Wed Aug 12 10:58:48 2009 +0100
|+++ b/gdb-768/src/gdb/disasm.c Wed Aug 26 15:09:04 2009 +0100
————————–
File to patch:

How can I properly apply your all_patches.patch?

Thanks again for your patience!

Neo

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15196 fG! Fri, 18 Feb 2011 23:51:13 +0000 http://reverse.put.as/?p=442#comment-15196 Just re-tested the example and it's ok for me. How did you started gdb? And the next steps? This shouldn't have an impact but try to execute the following commands: sudo chown root:procmod /usr/libexec/gdb/gdb-i386-apple-darwin sudo chmod g+s /usr/libexec/gdb/gdb-i386-apple-darwin This should fix permissions for gdb binary (but the problem shouldn't be originated in this). Just re-tested the example and it’s ok for me.
How did you started gdb? And the next steps?

This shouldn’t have an impact but try to execute the following commands:
sudo chown root:procmod /usr/libexec/gdb/gdb-i386-apple-darwin
sudo chmod g+s /usr/libexec/gdb/gdb-i386-apple-darwin

This should fix permissions for gdb binary (but the problem shouldn’t be originated in this).

]]> By: Neo http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15164 Neo Thu, 17 Feb 2011 17:17:38 +0000 http://reverse.put.as/?p=442#comment-15164 Dear fG! Following your beginners-tutorial-II.txt, I've been able to write and compile the example.c program, but under gdb I receive this message: gdb$ exec-file ./example unable to read unknown load command 0x80000022 And this is my gdb configuration is: -rwxrwsr-x 1 Neo-Mac procmod 3051328 Feb 16 20:03 /usr/libexec/gdb/gdb-i386-apple-darwin Is any else that I must do make gdb work properly? Thanks, Neo Dear fG!

Following your beginners-tutorial-II.txt, I’ve been able to write and compile the example.c program, but under gdb I receive this message:

gdb$ exec-file ./example

unable to read unknown load command 0×80000022

And this is my gdb configuration is:

-rwxrwsr-x 1 Neo-Mac procmod 3051328 Feb 16 20:03 /usr/libexec/gdb/gdb-i386-apple-darwin

Is any else that I must do make gdb work properly?

Thanks,

Neo

]]> By: Neo http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15148 Neo Thu, 17 Feb 2011 01:16:25 +0000 http://reverse.put.as/?p=442#comment-15148 Thanks fG! Now all is working. I'll let you know how things are going. Neo Thanks fG!

Now all is working.

I’ll let you know how things are going.

Neo

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15147 fG! Thu, 17 Feb 2011 00:49:39 +0000 http://reverse.put.as/?p=442#comment-15147 You don't need to, the binary has all the patches applied. If you ever want to compile and hack other patches, read http://reverse.put.as/2009/01/14/how-to-compile-gdb-and-other-apple-open-source-packages-in-mac-os-x/ You don’t need to, the binary has all the patches applied.
If you ever want to compile and hack other patches, read http://reverse.put.as/2009/01/14/how-to-compile-gdb-and-other-apple-open-source-packages-in-mac-os-x/

]]> By: Neo http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15146 Neo Thu, 17 Feb 2011 00:31:57 +0000 http://reverse.put.as/?p=442#comment-15146 Just another question. Now that I have a working copy of your modified gdb binary, how do I apply the "all_patches.patch"? Thanks, Neo Just another question.

Now that I have a working copy of your modified gdb binary, how do I apply the “all_patches.patch”?

Thanks,

Neo

]]> By: Neo http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15145 Neo Thu, 17 Feb 2011 00:29:37 +0000 http://reverse.put.as/?p=442#comment-15145 Dear gG! It WORKED!!! WOW! What a UNIX lesson! Thanks a bunch! Sure, I won't share cracks around. I'll do it just for fun and for challenges' sake. This is one thing that I always wanted to do, mess around with Assembly. I'm a Mac OS X programmer wanna be and I was kinda bored with my programming tasks routine. Many, many thanks once more. You rule! Neo Dear gG!

It WORKED!!!

WOW! What a UNIX lesson! Thanks a bunch!

Sure, I won’t share cracks around. I’ll do it just for fun and for challenges’ sake. This is one thing that I always wanted to do, mess around with Assembly. I’m a Mac OS X programmer wanna be and I was kinda bored with my programming tasks routine.

Many, many thanks once more.

You rule!

Neo

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15143 fG! Wed, 16 Feb 2011 23:47:03 +0000 http://reverse.put.as/?p=442#comment-15143 Ok I replicated your issue and I understand it now :-) After unpacking, you need to issue the following commands: "sudo cp /usr/libexec/gdb/gdb-i386-apple-darwin gdb-i386-apple-darwin.orig" (this will backup the original binary) "sudo cp gdb-i386-apple-darwin /usr/libexec/gdb/" (this will copy the unpacked binary over the original, you should the full path to the unpacked binary or position yourself there) "sudo chmod +x /usr/libexec/gdb/gdb-i386-apple-darwin" (cp should inherit permissions but to be safe, just readd executable permissions to the new binary) You need to do this because in reality the gdb command is a script that further calls for the correct binary in that location. Your document problem is because the unpacked binary doesn't have execution permission (you can verify this by adding the execute permission to that binary "chmod +x binary_name"). This is a security feature of Unix systems :-) Have fun, don't spread the cracks ;-) fG! Ok I replicated your issue and I understand it now :-)
After unpacking, you need to issue the following commands:
“sudo cp /usr/libexec/gdb/gdb-i386-apple-darwin gdb-i386-apple-darwin.orig”
(this will backup the original binary)
“sudo cp gdb-i386-apple-darwin /usr/libexec/gdb/”
(this will copy the unpacked binary over the original, you should the full path to the unpacked binary or position yourself there)
“sudo chmod +x /usr/libexec/gdb/gdb-i386-apple-darwin”
(cp should inherit permissions but to be safe, just readd executable permissions to the new binary)

You need to do this because in reality the gdb command is a script that further calls for the correct binary in that location. Your document problem is because the unpacked binary doesn’t have execution permission (you can verify this by adding the execute permission to that binary “chmod +x binary_name”). This is a security feature of Unix systems :-)

Have fun, don’t spread the cracks ;-)
fG!

]]> By: Neo http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15142 Neo Wed, 16 Feb 2011 23:34:10 +0000 http://reverse.put.as/?p=442#comment-15142 Dear fG! Thanks for your quick reply. What I mean by "Text Document" is that when I hit command + I on the uncompressed bz2 file downloaded from http://reverse.put.as/wp-content/uploads/2009/08/gdb-i386-apple-darwin.bz2, it shows me in the "Kind" of file as being "Document", instead of "Unix Executable File". I did try to uncompress via Terminal, as you taught me, but the result is the same as double clicking the compressed file, giving me the "Document" kind of file and not a "Unix Executable File". If you don't mind, could you please send me the gdb uncompressed binary to my e-mail address? By the way, now I'm really exited to get started reverse-engineering under Mac OS X, because you really are a great teacher for beginners, sharing true knowledge. That's the hacker spirit from the 80's! I do appreciate your attention! Regards, Neo Dear fG!

Thanks for your quick reply.

What I mean by “Text Document” is that when I hit command + I on the uncompressed bz2 file downloaded from http://reverse.put.as/wp-content/uploads/2009/08/gdb-i386-apple-darwin.bz2, it shows me in the “Kind” of file as being “Document”, instead of “Unix Executable File”.

I did try to uncompress via Terminal, as you taught me, but the result is the same as double clicking the compressed file, giving me the “Document” kind of file and not a “Unix Executable File”.

If you don’t mind, could you please send me the gdb uncompressed binary to my e-mail address?

By the way, now I’m really exited to get started reverse-engineering under Mac OS X, because you really are a great teacher for beginners, sharing true knowledge. That’s the hacker spirit from the 80′s!

I do appreciate your attention!

Regards,
Neo

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15138 fG! Wed, 16 Feb 2011 21:59:21 +0000 http://reverse.put.as/?p=442#comment-15138 Hum.. what do you mean by text file ? It should decompress a binary. Try to decompress via Terminal: bunzip2 gdb-i386-apple-darwin.bz2 Hum.. what do you mean by text file ? It should decompress a binary. Try to decompress via Terminal: bunzip2 gdb-i386-apple-darwin.bz2

]]> By: Neo http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-15123 Neo Wed, 16 Feb 2011 16:17:55 +0000 http://reverse.put.as/?p=442#comment-15123 Hi fG! Thanks for your G-R-E-A-T blog! When I download the file gdb-i386-apple-darwin.bz2 and decompress it a text document file appears, instead of your binary. What should a I do? Thanks! Neo Hi fG!

Thanks for your G-R-E-A-T blog!

When I download the file gdb-i386-apple-darwin.bz2 and decompress it a text document file appears, instead of your binary.

What should a I do?

Thanks!

Neo

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-12489 fG! Tue, 26 Oct 2010 00:10:17 +0000 http://reverse.put.as/?p=442#comment-12489 Thank you :-) All the credits for gdbinit go to Mammon and all the authors that fixed and added a lot of stuff! I just jumped in and added a few more! Thank you :-)

All the credits for gdbinit go to Mammon and all the authors that fixed and added a lot of stuff! I just jumped in and added a few more!

]]> By: Han Solo http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-12488 Han Solo Mon, 25 Oct 2010 22:52:38 +0000 http://reverse.put.as/?p=442#comment-12488 fG: your patches absolutely rock... Just wanted to stop by and say thanks that you share your knowledge and your tools. I absolutely love your Softice derived UI ;-) And now with IDA being QT based and available with GUI on Mac, I really feel like home. Kudos... fG: your patches absolutely rock…

Just wanted to stop by and say thanks that you share your knowledge and your tools. I absolutely love your Softice derived UI ;-)

And now with IDA being QT based and available with GUI on Mac, I really feel like home.

Kudos…

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-5466 fG! Thu, 28 Jan 2010 18:13:26 +0000 http://reverse.put.as/?p=442#comment-5466 Nope. You have to patch and recompile. Nope. You have to patch and recompile.

]]> By: NeoBetas http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-5411 NeoBetas Mon, 25 Jan 2010 08:44:56 +0000 http://reverse.put.as/?p=442#comment-5411 Is there anyways to modified .gdb_init to show the raw bytes instead patching and recompiling? Is there anyways to modified .gdb_init to show the raw bytes instead patching and recompiling?

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-4101 fG! Fri, 23 Oct 2009 21:54:26 +0000 http://reverse.put.as/?p=442#comment-4101 The patches work for Snow Leopard without a problem. Someone already left all the required steps to compile it for Snow Leopard :) The patches work for Snow Leopard without a problem. Someone already left all the required steps to compile it for Snow Leopard :)

]]> By: Dave http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-4100 Dave Fri, 23 Oct 2009 15:19:08 +0000 http://reverse.put.as/?p=442#comment-4100 Also what about patches for Snow Leopard / 64-bit? :) Also what about patches for Snow Leopard / 64-bit? :)

]]> By: Dave http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-4099 Dave Fri, 23 Oct 2009 15:18:19 +0000 http://reverse.put.as/?p=442#comment-4099 Did you file a radar about this? It's possible that Apple would fix these bugs. Did you file a radar about this? It’s possible that Apple would fix these bugs.

]]> By: x_O http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3864 x_O Tue, 15 Sep 2009 23:13:39 +0000 http://reverse.put.as/?p=442#comment-3864 Nope. That was it. It's all working now. Thanks fG! Nope. That was it. It’s all working now. Thanks fG!

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3863 fG! Tue, 15 Sep 2009 23:09:57 +0000 http://reverse.put.as/?p=442#comment-3863 $ ls -la /usr/libexec/gdb/gdb-i386-apple-darwin -rwxr-sr-x 1 root procmod 3051328 Aug 26 23:31 /usr/libexec/gdb/gdb-i386-apple-darwin Do you have the s bit set and group procmod ? $ ls -la /usr/libexec/gdb/gdb-i386-apple-darwin
-rwxr-sr-x 1 root procmod 3051328 Aug 26 23:31 /usr/libexec/gdb/gdb-i386-apple-darwin

Do you have the s bit set and group procmod ?

]]> By: x_O http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3862 x_O Tue, 15 Sep 2009 23:04:21 +0000 http://reverse.put.as/?p=442#comment-3862 I backed up the original gdb-i386-apple-darwin to gdb-i386-apple-darwin.orig and copied your patched version to /usr/libexec/gdb/. I load a file in GDB using exec-file and upon executing the "run" command, I too receive the error: "Unable to find Mach task port for process-id 70506: (os/kern) failure (0×5)." The only way I've found to get rid of the error is to issue "sudo gdb" instead of just "gdb". Is there a way to I could run GDB without having to issue the sudo command (to circumvent that error)? I'm running as an Admin account and the file permissions on gdb-i386-apple-darwin (patched version) are the same as the original I backed up. I backed up the original gdb-i386-apple-darwin to gdb-i386-apple-darwin.orig and copied your patched version to /usr/libexec/gdb/. I load a file in GDB using exec-file and upon executing the “run” command, I too receive the error: “Unable to find Mach task port for process-id 70506: (os/kern) failure (0×5).” The only way I’ve found to get rid of the error is to issue “sudo gdb” instead of just “gdb”. Is there a way to I could run GDB without having to issue the sudo command (to circumvent that error)? I’m running as an Admin account and the file permissions on gdb-i386-apple-darwin (patched version) are the same as the original I backed up.

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3768 fG! Thu, 10 Sep 2009 11:14:33 +0000 http://reverse.put.as/?p=442#comment-3768 Ahhhhhhhhhhhhhhhhh ! That explains... I tried to understand if you had copied it or not. I assumed you did because you tried to change permissions (which now seems like a rather lame assumption since I should have remembered that copy preserves permissions hehehe). You have to copy the binary because gdb command in reality is a script at /usr/bin/gdb. It does some magic due to different architectures :) Ahhhhhhhhhhhhhhhhh ! That explains… I tried to understand if you had copied it or not. I assumed you did because you tried to change permissions (which now seems like a rather lame assumption since I should have remembered that copy preserves permissions hehehe).

You have to copy the binary because gdb command in reality is a script at /usr/bin/gdb. It does some magic due to different architectures :)

]]> By: wishi http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3766 wishi Thu, 10 Sep 2009 08:58:29 +0000 http://reverse.put.as/?p=442#comment-3766 I missed something... I didn't copy the binary to /usr/libexec/gdb/ but just called it directly. - Debugging as root was/is possible without problems: task_for_pid() by default is only accessible by root (or procmod) (http://developer.apple.com/legacy/mac/library/documentation/MacOSX/Conceptual/universal_binary/universal_binary_tips/universal_binary_tips.html). However I wonder why the binary has to be in a specific path... Anyhow. Sorry ;) But I learned something. I missed something… I didn’t copy the binary to /usr/libexec/gdb/ but just called it directly.
- Debugging as root was/is possible without problems: task_for_pid() by default is only accessible by root (or procmod) (http://developer.apple.com/legacy/mac/library/documentation/MacOSX/Conceptual/universal_binary/universal_binary_tips/universal_binary_tips.html).

However I wonder why the binary has to be in a specific path… Anyhow.

Sorry ;) But I learned something.

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3764 fG! Wed, 09 Sep 2009 22:28:04 +0000 http://reverse.put.as/?p=442#comment-3764 I had some free time but I can't reproduce the bug... I tested with a clean vmware snapshot and replaced original gdb binary with this one and it works... Tried to attach to a running program and it was fine. Tried to run a new program and it was fine... Hummm something is missing ! My Xcode version is 3.1. Any ideas ? Must find some more free time to try to reproduce this hehehe I had some free time but I can’t reproduce the bug… I tested with a clean vmware snapshot and replaced original gdb binary with this one and it works… Tried to attach to a running program and it was fine. Tried to run a new program and it was fine… Hummm something is missing ! My Xcode version is 3.1.

Any ideas ? Must find some more free time to try to reproduce this hehehe

]]> By: anonym http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3756 anonym Sun, 06 Sep 2009 23:31:41 +0000 http://reverse.put.as/?p=442#comment-3756 I got the same err on test using your binary: "Unable to find Mach task port for process-id 70506: (os/kern) failure (0×5)." whatever i will use your patch and compile it later... You have a very nice and informative blog! i know you from the windows world for over 5 years ago. i am a still reader, but i come twice time almost every day here. please add the link to wishi's blog in your "Links" collection. (very nice blog too, wishi!) Thank you and keep update! :D I got the same err on test using your binary:
“Unable to find Mach task port for process-id 70506: (os/kern) failure (0×5).”
whatever i will use your patch and compile it later…

You have a very nice and informative blog!
i know you from the windows world for over 5 years ago.
i am a still reader, but i come twice time almost every day here.
please add the link to wishi’s blog in your “Links” collection. (very nice blog too, wishi!)

Thank you and keep update! :D

]]> By: wishi http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3754 wishi Sun, 06 Sep 2009 09:26:50 +0000 http://reverse.put.as/?p=442#comment-3754 I guess I compile that stuff... because for testing reasons I used your binary. Debugging a Debugger: sounds like fun! ;) I guess I compile that stuff… because for testing reasons I used your binary. Debugging a Debugger: sounds like fun! ;)

]]> By: fG! http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3752 fG! Sat, 05 Sep 2009 20:57:22 +0000 http://reverse.put.as/?p=442#comment-3752 Hello, Thank you for the compliment :) Are you using the binary I provided or compiled it yourself (knowing your blog I would bet on this hehehe) ? I had that same error when I compiled gdb from Apple package out of the source. To compile correctly you need to refer to this process http://reverse.put.as/2009/01/14/how-to-compile-gdb-and-other-apple-open-source-packages-in-mac-os-x/ . You have to use darwinbuild. If you I can upload my image with my building environment. Keep up the good work with your blog :) fG! Hello,

Thank you for the compliment :) Are you using the binary I provided or compiled it yourself (knowing your blog I would bet on this hehehe) ? I had that same error when I compiled gdb from Apple package out of the source. To compile correctly you need to refer to this process http://reverse.put.as/2009/01/14/how-to-compile-gdb-and-other-apple-open-source-packages-in-mac-os-x/ . You have to use darwinbuild. If you I can upload my image with my building environment.

Keep up the good work with your blog :)

fG!

]]> By: wishi http://reverse.put.as/2009/08/26/gdb-patches/comment-page-1/#comment-3751 wishi Sat, 05 Sep 2009 10:35:53 +0000 http://reverse.put.as/?p=442#comment-3751 Hi ;) You've got a very interesting blog. Especially optimizing the Apple Dev Tools to be more reversing friendly is a kewl project. However I gave this a try and it doesn't work: gdb$ r Unable to find Mach task port for process-id 70506: (os/kern) failure (0x5). gdb$ quit Even if: wishi@dawn ~/patched % sudo chgrp procmod gdb-i386-apple-darwin wishi@dawn ~/patched % sudo chmod 2755 gdb-i386-apple-darwin You don't get it working. Maybe I miss something crucial? Hi ;)

You’ve got a very interesting blog. Especially optimizing the Apple Dev Tools to be more reversing friendly is a kewl project. However I gave this a try and it doesn’t work:

gdb$ r
Unable to find Mach task port for process-id 70506: (os/kern) failure (0×5).
gdb$ quit

Even if:

wishi@dawn ~/patched
% sudo chgrp procmod gdb-i386-apple-darwin

wishi@dawn ~/patched
% sudo chmod 2755 gdb-i386-apple-darwin

You don’t get it working. Maybe I miss something crucial?

]]>