You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
With the merging of our Library Validation Exemption patch, we were able to finally remove the usage of amfi_get_out_of_my_way=0x1 argument allowing for far greater Secuirty. However an unintended consequence of this patch is we crash the Music.app in macOS Big Sur and older.
When running the binary directly:
dyld: Library not loaded: @executable_path/../Frameworks/libgnsdk_dsp.3.06.1.dylib
Referenced from: /System/Applications/Music.app/Contents/MacOS/Music
Reason: unsafe use of @executable_path in /System/Applications/Music.app/Contents/MacOS/Music with restricted binary (Codesign main executable with Library Validation to allow @ paths)
Below there will be more in-depth crash logs are provided. Currently only Music.app (iTunes in Mojave) are affected, all other apps seem to function without issue.
macOS Monterey does not experience this issue, reason for is that the application does not have a Frameworks folder/dylibs to load off local path. Instead likely residing within the dyld cache
Additional Notes
This issue with iTunes/Music.app was present with mologie's DisableLibraryValidation.kext back in Catalina and older:
The com.apple.security.libraryvalidation.plist solution used on Catalina does not experience the dylib load error, however is no longer functional in Big Sur and newer for unknown reasons.
Re-add amfi_get_out_of_my_way=0x1 in addition to _cs_require_lv
Application still crashed in the same way
Hints to potential issue with processes other than AMFI having issues with the _cs_require_lv patch
Disable _cs_restricted and _csproc_hardened_runtime in addition to _cs_require_lv
Same results
Temporary fixes
A "work-around" would be to simply revert our Library validation patch, however because of Security concerns this is very much not ideal. Recommended approach is provide an option in patcher settings to disable the _cs_require_lv patching and revert to amfi_get_out_of_my_way=0x1.
By default we should opt for the LV patch as this is for best security and even usability with 3rd party Applications without tcc usage. Update troubleshooting documentation accordingly.
Add AMFI option to Patcher Settings
Update documentation with Music.app troubleshooting
With the merging of our Library Validation Exemption patch, we were able to finally remove the usage of
amfi_get_out_of_my_way=0x1
argument allowing for far greater Secuirty. However an unintended consequence of this patch is we crash the Music.app in macOS Big Sur and older.When running the binary directly:
Below there will be more in-depth crash logs are provided. Currently only Music.app (iTunes in Mojave) are affected, all other apps seem to function without issue.
Frameworks
folder/dylibs to load off local path. Instead likely residing within the dyld cacheAdditional Notes
This issue with iTunes/Music.app was present with mologie's DisableLibraryValidation.kext back in Catalina and older:
The
com.apple.security.libraryvalidation.plist
solution used on Catalina does not experience the dylib load error, however is no longer functional in Big Sur and newer for unknown reasons.sudo defaults write /Library/Preferences/com.apple.security.libraryvalidation.plist DisableLibraryValidation -bool true
Failed Fixes
Some of the patches tested:
amfi_get_out_of_my_way=0x1
in addition to_cs_require_lv
_cs_require_lv
patch_cs_restricted
and_csproc_hardened_runtime
in addition to_cs_require_lv
Temporary fixes
A "work-around" would be to simply revert our Library validation patch, however because of Security concerns this is very much not ideal. Recommended approach is provide an option in patcher settings to disable the
_cs_require_lv
patching and revert toamfi_get_out_of_my_way=0x1
.By default we should opt for the LV patch as this is for best security and even usability with 3rd party Applications without tcc usage. Update troubleshooting documentation accordingly.
In-depth Crash Logs
Music.app Crash - macOS 11.6
Spoiler: Music.app Crash - macOS 11.6
iTunes.app Crash - macOS 10.14.6
Spoiler: iTunes.app Crash - macOS 10.14.6
The text was updated successfully, but these errors were encountered: