fix: 图片密钥内存扫描通过子进程调用解决 task_for_pid 权限问题

Browse Source

Electron 进程缺少 com.apple.security.cs.debugger entitlement，
导致 ScanMemoryForImageKey 中的 task_for_pid 调用失败（kr=5）。

新增 image_scan_helper 子进程包装程序（与 xkey_helper 方案一致）：
- 新建 resources/image_scan_helper.c：dlopen libwx_key.dylib 并调用
  ScanMemoryForImageKey，通过 JSON stdout 返回结果
- 新建 resources/image_scan_entitlements.plist：包含 debugger 和
  allow-unsigned-executable-memory entitlements
- 编译为 universal binary（x86_64 + arm64）并 ad-hoc 签名
- 修改 keyServiceMac.ts _scanMemoryForAesKey()：优先 spawn
  image_scan_helper 子进程，失败时 fallback 到直接调 dylib

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

...

This commit is contained in:

Felix

2026-03-13 15:18:52 +11:00

parent 19ab4409a3

commit bff9e87096

4 changed files with 137 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

resources/image_scan_helper Executable file

Binary file not shown.