hicccc77/WeFlow
1
0
Fork 0
mirror of https://github.com/hicccc77/WeFlow.git synced 2026-03-24 23:06:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: 图片密钥内存扫描通过子进程调用解决 task_for_pid 权限问题

Browse Source 
Electron 进程缺少 com.apple.security.cs.debugger entitlement，
导致 ScanMemoryForImageKey 中的 task_for_pid 调用失败（kr=5）。

新增 image_scan_helper 子进程包装程序（与 xkey_helper 方案一致）：
- 新建 resources/image_scan_helper.c：dlopen libwx_key.dylib 并调用
  ScanMemoryForImageKey，通过 JSON stdout 返回结果
- 新建 resources/image_scan_entitlements.plist：包含 debugger 和
  allow-unsigned-executable-memory entitlements
- 编译为 universal binary（x86_64 + arm64）并 ad-hoc 签名
- 修改 keyServiceMac.ts _scanMemoryForAesKey()：优先 spawn
  image_scan_helper 子进程，失败时 fallback 到直接调 dylib

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Felix
2026-03-13 15:18:52 +11:00
parent 19ab4409a3
commit bff9e87096
4 changed files with 137 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
resources/image_scan_entitlements.plist Normal file
View File

@@ -0,0 +1,10 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.security.cs.debugger</key>
<true/>
<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
<true/>
</dict>
</plist>