relikd/QLAppBundle
1
0
Fork 0
Code Pull Requests Releases Activity

fix: check for empty entitlements dict

Browse Source
This commit is contained in:
relikd
2025-11-05 02:04:28 +01:00
parent 596ad18412
commit 6dec6530c5
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/Entitlements.swift
View File

@@ -67,6 +67,8 @@ struct Entitlements {
// MARK: - SecCode in-memory reader // MARK: - SecCode in-memory reader
// Same as system call:
// `codesign -d ./binary --entitlements - --xml` or: `codesign -d ./binary --entitlements :-`
/// use in-memory `SecCode` for entitlement extraction /// use in-memory `SecCode` for entitlement extraction
private func getSecCodeEntitlements() -> PlistDict? { private func getSecCodeEntitlements() -> PlistDict? {
let url = URL(fileURLWithPath: self.binaryPath) let url = URL(fileURLWithPath: self.binaryPath)
@@ -84,13 +86,13 @@ struct Entitlements {
// if 'entitlements-dict' key exists, use that one // if 'entitlements-dict' key exists, use that one
os_log(.debug, log: log, "[entitlements] read SecCode 'entitlements-dict' key") os_log(.debug, log: log, "[entitlements] read SecCode 'entitlements-dict' key")
if let plist = requirementInfo[kSecCodeInfoEntitlementsDict as String] as? PlistDict { if let plist = requirementInfo[kSecCodeInfoEntitlementsDict as String] as? PlistDict, !plist.isEmpty {
return plist return plist
} }
// else, fallback to parse data from 'entitlements' key // else, fallback to parse data from 'entitlements' key
os_log(.debug, log: log, "[entitlements] read SecCode 'entitlements' key") os_log(.debug, log: log, "[entitlements] read SecCode 'entitlements' key")
guard let data = requirementInfo[kSecCodeInfoEntitlements as String] as? Data else { guard let data = requirementInfo[kSecCodeInfoEntitlements as String] as? Data, !data.isEmpty else {
return nil return nil
} }
@@ -107,7 +109,10 @@ struct Entitlements {
os_log(.error, log: log, "[entitlements] unpack error for FADE7171 size %lu != %lu", data.count, size) os_log(.error, log: log, "[entitlements] unpack error for FADE7171 size %lu != %lu", data.count, size)
// but try anyway // but try anyway
} }
return data.subdata(in: 8..<data.count).asPlistOrNil() guard let rv = data.subdata(in: 8..<data.count).asPlistOrNil(), !rv.isEmpty else {
return nil
}
return rv
} }