Accessing CrashWrangler to analyze crashes for security implications
This Technical Note discusses how to download CrashWrangler, a tool that can be used to determine if a crash is an exploitable security issue.
Downloading CrashWrangler
CrashWrangler is a set of developer tools that help in analyzing crashes on OS X. The tools work by inspecting the application's state at the time of the crash, as well as the application crash logs. Using these tools on a reproducible test case can determine if a crash could lead to a potentially exploitable security issue.
It should be understood that CrashWrangler uses advanced heuristics, but that false positives and false negatives are possible. It's intended for quick assessment. A detailed manual inspection is the only way to be sure something is or isn't exploitable.
You can download CrashWrangler by going to https://developer.apple.com/downloads/index.action?name=CrashWrangler. This can be accessed with a free Registered Apple Developer account. Please see the README.txt file in the CrashWrangler download for instructions on how to use CrashWrangler and interpret its output.
Document Revision History
Date | Notes |
---|---|
2014-03-03 | New document that describes how to download CrashWrangler |
Copyright © 2014 Apple Inc. All Rights Reserved. Terms of Use | Privacy Policy | Updated: 2014-03-03