Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix #4905 #4907

Merged
merged 1 commit into from
Feb 23, 2025
Merged

Fix #4905 #4907

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions Reports/2025/#324-2025.02.24.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,12 @@
### 🐢 [asm lessons](https://github.com/FFmpeg/asm-lessons)
[@老驴](https://weibo.com/u/6090610445)：很多人敲碗等待的 FFmpeg 汇编课终于来了。FFmpeg 现在基本是业界最重要的开源视频编解码库了。这种对于性能极度敏感的库，自然会有一些特殊手段来进一步优化性能。FFmpeg 团队就在库里使用了大量的汇编，按照他们的说法，可以大幅提升性能。但是现在会手写汇编语言的人也越来越少，所以很多人就敲碗让团队出一个汇编课程。这就是这个课程的来历。略微可惜的是，这个课程目前是基于 x86 的汇编，不过团队也说之后会添加 ARM 的汇编内容。鉴于 FFmpeg 在业界的地位，值得大家花一点时间来学习一下。

### 🐕 [First analysis of Apple's USB Restricted Mode bypass (CVE-2025-24200)](https://blog.quarkslab.com/first-analysis-of-apples-usb-restricted-mode-bypass-cve-2025-24200.html)

[@david-clang](https://github.com/david-clang)：本文分析了 iOS 中 [CVE-2025-24200](https://support.apple.com/en-ca/122174) 漏洞的技术细节，该漏洞利用 Accessibility 框架中状态管理不严密的问题，使得攻击者能够在设备锁定时绕过 [USB Restricted Mode](https://support.apple.com/en-us/111806)，从而实现未授权的 USB 数据连接。文章中的分析思路和手段很值得学习。

作者通过对比补丁前后的固件，详细说明了漏洞修复涉及的关键代码改动，例如在 AXSpringBoardServerInstance 和 profiled 守护进程中新增的状态检查逻辑。接着展示了利用辅助功能（如 Assistive Touch 或 Switch Control ）触发漏洞的可能攻击路径，即在设备锁定且辅助功能激活时，通过触发警告弹窗诱导用户点击“ OK ”，进而调用 `_setUSBRMPreferenceDisabled` 函数禁用 USB Restricted Mode，使攻击者有机会绕过物理安全防护措施。

## 工具

### 🐎 [你的 iPhone 也可以离线运行 DeepSeek「含原理介绍」](https://mp.weixin.qq.com/s/oXfrBKwZzXIzg-k_KRQEbQ)
Expand Down