ginsudev / WDBFontOverwrite

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.
https://notnow.dev/zhuowei
886 stars 72 forks source link

Why the modified tccd file can pass the signature verification? #87

Open moqi2011 opened 1 year ago

moqi2011 commented 1 year ago

Recently, I am studying this project to see if I can use kfd to make it work on a newer system version. I have a doubt about how "patchTCCD" passes the signature verification after modifying the tccd file. I found that he only modified a few The pointer and added a string, and did not deal with the signature. I've tried modifying other files and it doesn't seem to pass the signature check. Is this a bug or a feature? Will it work on newer system versions? Can other executables be modified? Are there related articles describing him?

Thanks.