With the introduction of ARM Pointer authentication into the most recent iOS kernels we should write an analyzer to detect its use as it gets introduced into other ARM based platforms.
References:
https://lwn.net/Articles/718888/
https://www.qualcomm.com/documents/whitepaper-pointer-authentication-armv83
https://developer.arm.com/products/architecture/cpu-architecture/a-profile/docs/ddi0596/a/a64-base-instructions-alphabetic-order/pacda-pacdza-pointer-authentication-code-for-data-address-using-key-a
Looks like with the update of Capstone to ~4.0 ARM8 is still not merged into capstone master. This means that PAC* instructions are still not supported.
Reference capstone issue: capstone-engine/capstone#1343
With the introduction of ARM Pointer authentication into the most recent iOS kernels we should write an analyzer to detect its use as it gets introduced into other ARM based platforms.
References:
https://lwn.net/Articles/718888/
https://www.qualcomm.com/documents/whitepaper-pointer-authentication-armv83
https://developer.arm.com/products/architecture/cpu-architecture/a-profile/docs/ddi0596/a/a64-base-instructions-alphabetic-order/pacda-pacdza-pointer-authentication-code-for-data-address-using-key-a
Looks like with the update of Capstone to ~4.0 ARM8 is still not merged into capstone master. This means that PAC* instructions are still not supported.
Reference capstone issue: capstone-engine/capstone#1343