objective-see / WhatsYourSign

WhatsYourSign adds a menu item to Finder.app. Simply right-, or control-click on any file to display its cryptographic signing information!
GNU General Public License v3.0
282 stars 27 forks source link

Process stuck on Xcode signature check #18

Open proton1k opened 3 years ago

proton1k commented 3 years ago

Hi,

On Macbook (see details below) the WhatsYourSign process is stuck holding around half of the CPU capacity on the background with infinite spinner loading on Xcode.

Model Name: MacBook Air Model Identifier: MacBookAir6,2 Processor Name: Dual-Core Intel Core i7 Processor Speed: 1,7 GHz Number of Processors: 1 Total Number of Cores: 2 L2 Cache (per Core): 256 KB L3 Cache: 4 MB Hyper-Threading Technology: Enabled System Firmware Version: 430.0.0.0.0

XCode version 12.4 (12D4e) - apparently the latest stable at the moment.

Can this be related to patching of XCode or am I paranoid? Why could be the signature check is not completed and stuck on running spinner?

objective-see commented 3 years ago

I'm guessing this due to the fact that Xcode is 15.82 GB ...hence generating/checking its code signature / hashes, etc simply takes a really long time :/

proton1k commented 3 years ago

you-re-goddamn-right

You're probably right, though it couldn't complete the signature calculation on the Xcode - just closed the window and sort of unloaded itself (? aka not in the windows manager menu anymore). The process probably was killed. I am sure it's a minor thing, most apps require less calculation, but if you need, I can provide some additional info to help.

blacktop commented 2 years ago
Screen Shot 2021-11-19 at 6 06 04 PM
blacktop commented 2 years ago

I airdrop-ed XCode-beta from one M1 to another today and Monterey 12.1b3 said that XCodebeta signature wasn't recognized so I tried your tool, but it just spins (probably due to what you said above about it's size) but Apple itself not liking the sig is pretty scary?

zhangzhen0370 commented 2 years ago

I'm guessing this due to the fact that Xcode is 15.82 GB ...hence generating/checking its code signature / hashes, etc simply takes a really long time :/ but, why codesign work fast? use api(SecStaticCodeCheckValidity) to check whether "/Applications/Xcode.app/Contents/MacOS/Xcode" is signed, stucking... image