Hello all,
I apologize if it's not in the right section.
I'm working on a little app, mostly a CRUD and three HTTP requests. We will use MDM software to deploy the application (not the App Store). There is no pods, package, or specific framework, it's only basic Swift code.
Unfortunately, I must do a pentest to push my app into production. The security engineer said he would use the mobile security framework tools.
So I tried myself before to be sure that we would succeed. After using the static analyzer, I discovered several issues.
The first issue is :
The binary may use _malloc function instead of calloc.
And I don't know how to prevent that since it is low level, and I don't have access to that.
My second issue is a warning :
This binary is not encrypted.
Honestly, I don't know how to fix that since it seems impossible to encrypt the codebase. Or maybe I'm wrong?
Thanks to everyone who will take the time to read and try to help.
Regards
