Skip to content

SensitiveInformationDetailsVC Compiler Optimization #23

@chriszielinski

Description

@chriszielinski

Compiler optimization strips the initialization of passwd within initializeLogin. Consequently, searching for it in the heap is futile. Below is the disassembled method from the included .ipa:

screen shot 2017-10-09 at 2 15 52 am

Tagging the variable volatile wasn't enough, but returning the pointer sufficed to throw the compiler off.

-(NSString *)initializeLogin {
    //DO random stuff
    NSString *passwd = @"MYw0r1d1821";
    //Finish doing random stuff
    return passwd;
}

screen shot 2017-10-09 at 3 07 49 am

screen shot 2017-10-09 at 3 10 38 am

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions