Technical Note TN2334

Accessing CrashWrangler to analyze crashes for security implications

This Technical Note discusses how to download CrashWrangler, a tool that can be used to determine if a crash is an exploitable security issue.

Downloading CrashWrangler
Document Revision History

Downloading CrashWrangler

CrashWrangler is a set of developer tools that help in analyzing crashes on OS X. The tools work by inspecting the application's state at the time of the crash, as well as the application crash logs. Using these tools on a reproducible test case can determine if a crash could lead to a potentially exploitable security issue.

It should be understood that CrashWrangler uses advanced heuristics, but that false positives and false negatives are possible. It's intended for quick assessment. A detailed manual inspection is the only way to be sure something is or isn't exploitable.

You can download CrashWrangler by going to https://developer.apple.com/downloads/index.action?name=CrashWrangler. This can be accessed with a free Registered Apple Developer account. Please see the README.txt file in the CrashWrangler download for instructions on how to use CrashWrangler and interpret its output.



Document Revision History


DateNotes
2014-03-03

New document that describes how to download CrashWrangler