Feb. 28, 2024, 4:41 p.m. | MalBot

Malware Analysis, News and Indicators - Latest topics malware.news

In one of the past tips we mentioned the __unused attribute which can be applied to function arguments. When can it be useful? 


Let’s consider this code from Apple’s dyld:



v19 is passed as fist argument to dyld4::ProcessConfig::PathOverrides::setString(). Since its name looks like a class method, the decompiler assigned the class type to the first argument (normally corresponding to the implicit this argument). However, strncmp returns a simple integer with the comparison result and has no relation to the PathOverrides …

apple argument can class code decompiler function malware analysis name tips week

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC