Feb. 28, 2024, 4:41 p.m. | MalBot

Malware Analysis, News and Indicators - Latest topics malware.news

In one of the past tips we mentioned the __unused attribute which can be applied to function arguments. When can it be useful? 


Let’s consider this code from Apple’s dyld:



v19 is passed as fist argument to dyld4::ProcessConfig::PathOverrides::setString(). Since its name looks like a class method, the decompiler assigned the class type to the first argument (normally corresponding to the implicit this argument). However, strncmp returns a simple integer with the comparison result and has no relation to the PathOverrides …

apple argument can class code decompiler function malware analysis name tips week

Sr Security Engineer - Colombia

@ Nubank | Colombia, Bogota

Security Engineer, Investigations - i3

@ Meta | Menlo Park, CA | Washington, DC | Remote, US

Cyber Security Engineer

@ ASSYSTEM | Bridgwater, United Kingdom

Security Analyst

@ Northwestern Memorial Healthcare | Chicago, IL, United States

GRC Analyst

@ Richemont | Shelton, CT, US

Security Specialist

@ Peraton | Government Site, MD, United States