Search code examples
macosbinarysymbolsmach-o

reconstructing symbols stripped from Mach-O binary


Using Mac OS X 10.5 I'm trying to figure out how to use dtrace to track the execution of a Mach-O binary. However, it seems the symbols have all be stripped out so any attempts to put use probes based on internal class/method names fail.

I was able to use class-dump to dump the classes, method names and the address they are implemented at so I'm assuming you can use that to rebuild the symbols in the binary. Is that even possible, and if so does anyone know of any tools that might help with it or some reading materials that would help me understand it better?

This is my first attempt at working with binaries at this level so any help would be appreciated.


Solution

  • Reconstructing Objective-C symbols for use in gdb is possible, see my answer at Import class-dump info into GDB.