From 3f4973e59a5768aa75ca0e5bc2b0e86e9ca58057 Mon Sep 17 00:00:00 2001 From: Clive Chan Date: Wed, 3 Jul 2024 16:23:51 -0700 Subject: [PATCH] Add 14.6 b1 --- nac/offsets.go | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/nac/offsets.go b/nac/offsets.go index 1f70219..02a8247 100644 --- a/nac/offsets.go +++ b/nac/offsets.go @@ -200,6 +200,23 @@ var offsets_14_3 = imdOffsetTuple{ }, } +var offsets_14_6_b1 = imdOffsetTuple{ + x86: imdOffsets{ + ReferenceSymbol: "IDSProtoKeyTransparencyTrustedServiceReadFrom", + ReferenceAddress: 0x0d6179, + NACInitAddress: 0x5586c0, + NACKeyEstablishmentAddress: 0x538700, + NACSignAddress: 0x54b9f0, + }, + arm64: imdOffsets{ + ReferenceSymbol: "IDSProtoKeyTransparencyTrustedServiceReadFrom", + ReferenceAddress: 0x0bf408, + NACInitAddress: 0x4c1cac, + NACKeyEstablishmentAddress: 0x4af510, + NACSignAddress: 0x48971c, + }, +} + // offsets is a map from sha256 hash of identityservicesd to the function pointer offsets in that binary. var offsets = map[[32]byte]imdOffsetTuple{ // macOS 10.13.6 @@ -250,6 +267,8 @@ var offsets = map[[32]byte]imdOffsetTuple{ hexToByte32("034fc179e1cce559931a8e46866f54154cb1c5413902319473537527a2702b64"): offsets_14_2, // macOS 14.3 hexToByte32("d3c6986fefcbd2efea2a8a7c88104bf22d60d1f4f2bbf3615a1e3ce098aba765"): offsets_14_3, + // macOS 14.6 Beta 1 + hexToByte32("8eb0048ced3801d71a89495dcab198f038cd35c378ee059c52264c7b4107daa1"): offsets_14_6_b1, } type imdOffsetTuple struct {