frida / frida-website

Frida's website

Frida's Website

Live at frida.re.

Development

$ sudo apt install ruby-bundler
$ bundle install
$ bundle exec jekyll serve -w

frida-website's Issues

Failed to attach

I'm following the tutorial for Android; frida-ps -R works as expected but when I try to attach to Chrome I get this error message:
Failed to attach: unexpectedly timed out while waiting for FIFO to establish

Trying again the error change in
Failed to attach: remote_exec PTRACE_CONT wait failed: 11
sometime in
Failed to attach: remote_exec PTRACE_CONT wait failed: 5

Every time the Chrome App crash in my device.

I tried also with some other app but it's always the same problem.

Trying from a windows 7 towards a LG G2 with Lollipop device

Failed to load the Frida native extension

Hi, I have got the error trying to install Frida for Windows: Failed to load the Frida native extension: DLL load failed: ..... Please ensure that the extension was compiled for Python 3.x.

The install procedure was:

1. Downloaded: https://www.python.org/ftp/python/3.6.0/python-3.6.0a3-amd64.exe
2. Executed: python-3.6.0a3-amd64.exe
3. Downloaded: https://bootstrap.pypa.io/ez_setup.py
4. Executed: python ez_setup.py --insecure
5. Executed: pip install Frida
6. Executed: Frida

The output was

Failed to load the Frida native extension: DLL load failed: Не найден указанный модуль.
Please ensure that the extension was compiled for Python 3.x.

---

Traceback (most recent call last):
File "C:\Software\Python36\Scripts\frida-script.py", line 9, in
load_entry_point('frida==7.2.16', 'console_scripts', 'frida')()
File "c:\software\python36\lib\site-packages\pkg_resources__init__.py", line 542, in load_entry_point
return get_distribution(dist).load_entry_point(group, name)
File "c:\software\python36\lib\site-packages\pkg_resources__init__.py", line 2569, in load_entry_point
return ep.load()
File "c:\software\python36\lib\site-packages\pkg_resources__init__.py", line 2229, in load
return self.resolve()
File "c:\software\python36\lib\site-packages\pkg_resources__init__.py", line 2235, in resolve
module = import(self.module_name, fromlist=['name'], level=0)
File "c:\software\python36\lib\site-packages\frida__init__.py", line 26, in
raise ex
File "c:\software\python36\lib\site-packages\frida__init__.py", line 6, in
import _frida
ImportError: DLL load failed: Не найден указанный модуль.

What should I do to correct?

The frida.re website design is a rip-off from jekyllrb.com. Shame!

The website design, including the logo, is a blatant copy of the design of the wonderful jekyll static blogging software (www.jekyllrb.com) that we use to generate the frida.re site.

We need an expert in computers to help us with a new website design.

Failed to attach: process not found

Happened so far:

$ sudo easy_install frida
[sudo] password for me: 
Searching for frida
Reading https://pypi.python.org/simple/frida/
Best match: frida 1.6.8
Downloading https://pypi.python.org/packages/2.7/f/frida/frida-1.6.8-py2.7-linux-x86_64.egg#md5=2cdbb88696e9665929e5844365c128d4
Processing frida-1.6.8-py2.7-linux-x86_64.egg
***snip***
Finished processing dependencies for frida
$ frida-trace -i "recv*" Skype
Failed to attach: process not found                    
$

Now what?

Frida CLI – simple example of calc.js would be helpful

I've tried to load one of the files which was generated by running frida-trace but it only trigger error:

Failed to load script: gDBus.Error:re.frida.Error.InvalidArgument: Script(line 22): SyntaxError: Unexpected token (```

iOS 9.0.3 connection refused from MacOS Sierra

I'm having issues while connecting to the frida-server on my iPhone.
I'm using an old iPhone 5S running 9.0.2 (because that is what I've got jailbroken).

frida-ps -U works correctly from the MacBook, however, everytime I try frida -U <appName/PID/whatever> I get:

MacBook:~ miguel$ frida -U 4385
    ____
    / _  |   Frida 10.2.2 - A world-class dynamic instrumentation framework
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at http://www.frida.re/docs/home/
Failed to attach: the connection is closed

This is what is running on the iPhone:

iPhone:~ root# frida-server --version
10.2.2

iPhone:~ root# frida-server
2017-07-17 16:16:31.784 frida-server[4667:366659] Frida: Unable to check in with launchd: are we running standalone?
2017-07-17 16:16:59.314 frida-server[4667:366665] Frida: frida-gum/gum/backend-darwin/gumdarwinmodule.c:1310:gum_darwin_module_load_image_from_blob: assertion failed: (header_64 != NULL)
Abort trap: 6

On the MacBook I am running Sierra 10.12.5.

can't find frida-version.h

in my vs2015 ：
Connecting to build.frida.re (build.frida.re)|176.58.104.186|:443... connected.
1> HTTP request sent, awaiting response... 500 Internal Server Error
1> 2015-09-13 13:44:49 ERROR 500: Internal Server Error.

and then
C:\Program Files (x86)\MSBuild\Microsoft.Cpp\v4.0\V140\Microsoft.CppCommon.targets(171,5): error MSB6006:

sudo easy_install frida

I am unable to install frida using this command on ubuntu 14.04. Please help me.
The output of couple of commands in my system are:

->which easy_install
/usr/bin/easy_install

-> easy_install --verbose frida
http://pastebin.com/58BstLMC

-> easy_install --version
setuptools 3.3

->python -V
Python 2.7.6

Web site lacks information about constraints / limits / versions supported

I wonder if there could not be a part of the Web site explaining certain constraints/limits/version dependencies etc.

E.g.,

• Xposed installed on an Android device will result in Java.available always return false
• frida-server not supported on Android 7.x
• ...

As a frida-user, where would I send my information to right now? A lot of the stuff I have been looking for is also not to be found in google groups.

"connection refused" when connecting to iOS device

I was once successfully got it right for frida-ps -U, when I tried to open an app and hooked up again, the "connection refused" error came up. Subsequent commands failed as well.

> $ frida-ps -U
Failed to enumerate processes: connect failed (connection refused)

My settings:

• iPad Mini with iOS 8.1.2
• OSX 10.10

libffi not found

When I try to run frida-trace, I get the an error message about libffi.

Failed to attach: libffi.so.5: cannot open shared object file: No such file or directory

I have libffi and libffi-devel both installed. Fedora 19. Let me know if there is any other info I can provide.

Frida fails to install

I saw no mention of minimum version for Python, so I assume this ought to have worked:

$ sudo easy_install frida
Password:
Searching for frida
Reading https://pypi.python.org/simple/frida/
No local packages or download links found for frida
error: Could not find suitable distribution for Requirement.parse('frida')
$ python --version
Python 2.7.6

Testing your installation not work on Mac

Testing your installation not work on Mac,
say,
frida.ProcessNotFoundError: unable to find process with name 'cat'

I really already run 'cat' in another terminal and it is waiting for input

Frida not compatible with Pip install

I saw the report on Hacker News already, filling just for reference.

To reproduce:
pip install frida

Result:

Downloading/unpacking frida
  Could not find any downloads that satisfy the requirement frida
Cleaning up...
No distributions at all found for frida
Storing debug log for failure in -----

Expected:
Install Frida package

Configuration:
Mac OSX 10.9.1

undefined symbol: PyUnicodeUCS2_AsUTF8String

Hi,

As can be seen below, a straight forward install on Ubuntu 14.04.
Please advise.

Thank you,
Sagi

x@x:~$ sudo easy_install frida
Searching for frida
Reading https://pypi.python.org/simple/frida/
Best match: frida 3.0.1
Downloading https://pypi.python.org/packages/2.7/f/frida/frida-3.0.1-py2.7-linux-x86_64.egg#md5=65481a60d5c84ac456e8e1933259c241
Processing frida-3.0.1-py2.7-linux-x86_64.egg
Moving frida-3.0.1-py2.7-linux-x86_64.egg to /usr/local/lib/python2.7/dist-packages
Adding frida 3.0.1 to easy-install.pth file
Installing frida-repl script to /usr/local/bin
Installing frida-ps script to /usr/local/bin
Installing frida-trace script to /usr/local/bin
Installing frida-discover script to /usr/local/bin

Installed /usr/local/lib/python2.7/dist-packages/frida-3.0.1-py2.7-linux-x86_64.egg
Processing dependencies for frida
Finished processing dependencies for frida
x@x:~$ python
Python 2.7.6 (default, Mar 22 2014, 22:59:56) 
[GCC 4.8.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import frida
>>> session = frida.attach("cat")

***
Failed to load the Frida native extension: /home/x/.python-eggs/frida-3.0.1-py2.7-linux-x86_64.egg-tmp/_frida.so: undefined symbol: PyUnicodeUCS2_AsUTF8String
Please ensure that the extension was compiled for Python 2.7.
***

Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/local/lib/python2.7/dist-packages/frida-3.0.1-py2.7-linux-x86_64.egg/frida/__init__.py", line 16, in attach
  File "/usr/local/lib/python2.7/dist-packages/frida-3.0.1-py2.7-linux-x86_64.egg/frida/__init__.py", line 84, in get_device_manager
ImportError: /home/x/.python-eggs/frida-3.0.1-py2.7-linux-x86_64.egg-tmp/_frida.so: undefined symbol: PyUnicodeUCS2_AsUTF8String

Problem with Android example

I am trying to run Android example from here: http://www.frida.re/docs/examples/android/

Upon running the ctf.py script, I get this error:

Traceback (most recent call last):
File "<pyshell#2>", line 1, in
process = frida.get_usb_device().attach('com.example.seccon2015.rock_paper_scissors')
File "/Library/Frameworks/Python.framework/Versions/3.5/lib/python3.5/site-packages/frida/core.py", line 96, in attach
return Session(self._impl.attach(self._pid_of(target)))
File "/Library/Frameworks/Python.framework/Versions/3.5/lib/python3.5/site-packages/frida/core.py", line 108, in _pid_of
return self.get_process(target).pid
File "/Library/Frameworks/Python.framework/Versions/3.5/lib/python3.5/site-packages/frida/core.py", line 66, in get_process
matching = [process for process in self._impl.enumerate_processes() if fnmatch.fnmatchcase(process.name.lower(), process_name_lc)]
frida.ServerNotRunningError: unable to connect to remote frida-server: device 'ZX1PD2B527' not found

I don't understand why it is looking for device ZX1PD2B527, as this is not the USB device connected to my laptop (should be 01a4968dd882b783). Any ideas?

Thanks,
Igor

Error in use of frida in Ubuntu 14.04.2 LTS

I've installed the frida using easy_install no problem in the installation but when I use it always same error:

---

Failed to load the Frida native extension: /home/XXXXXXX/.python-eggs/frida-3.0.1-py2.7-linux-i686.egg-tmp/_frida.so: undefined symbol: PyUnicodeUCS2_AsUTF8String
Please ensure that the extension was compiled for Python 2.7.

---

Do you know how to solve the problem?

Thanks

AttributeError: 'module' object has no attribute 'attach'

Using example.py on the website:
(and frida-1.0.8)

Traceback (most recent call last):
File "./frida.py", line 1, in
import frida
File "/home/maswanso/src/test/spidermonkey/frida.py", line 2, in
p = frida.attach("cat")
AttributeError: 'module' object has no attribute 'attach'

This happens with 1.0.5 and 1.0.8.
Ubuntu 12 - 64-bit.
Python 2.7.3

Proof I'm using 1.0.8:
strings /usr/local/bin/frida-trace

!/usr/bin/python

EASY-INSTALL-ENTRY-SCRIPT: 'frida==1.0.8','console_scripts','frida-trace'

requires = 'frida==1.0.8'
import sys
from pkg_resources import load_entry_point
if name == 'main':
sys.exit(
load_entry_point('frida==1.0.8', 'console_scripts', 'frida-trace')()
)

NOTE: frida-discover worked

NOTE: frida-trace seems to work. I get:
frida-trace -i uv_accept testprog
Uploading data...
Started tracing 1 function. Press ENTER to stop. y/handlers/libuv.so.11.0.0/uv_accept.js"

(and it logs when uv_accept is called) YAY!

Modifying the handlers javascript also works. Yay!

However, I'm still unable to use the python API.
It doesn't help if I sudo to root.

I read that I can do much more with the Python API.
However, I can't seem to find what new features are available using the Python API. It seems to me that the Python API has identical features to the JavaScript (__handlers*) - except that you can more easily switch between different scripts.
Is that the difference in a nutshell?

Thanks

Hook example not working Windows. Was working and suddenly stopped.

Doing everything exactly as I was doing before it stopped working and now it no longer works.
Here's a screen showing that I get nothing... Being someone that is semi new to dealing with Python things, I figured why not reinstall Python... Nothing. I'm at a loss here and I was still messing around trying to learn about this kind of stuff.

http://theaquila.net/KevStuff/cmd_2017-01-16_17-33-53.png

It looks like my onEnter is failing to work even though I have the correct address.

Tested on another computer and it doesn't seem to hook either.

sudo easy_install frida

When trying to install frida via easy_install get this error:

Searching for frida
Reading https://pypi.python.org/simple/frida/
No local packages or download links found for frida
error: Could not find suitable distribution for Requirement.parse('frida')

how to hook "snprintf"

i want to hook "snprintf", this is my code:
userinfo = """
Interceptor.attach(Module.findExportByName("libcommon.so", "snprintf"),{
onEnter:function(args){
send("[dest=(" + Memory.readUtf8String(args[0]) + ")]");
},
onLeave:function(retval){
send("[Return value: "+Memory.readUtf8String(retval) + "]");
}
});
"""
but there is an error when i run the code:
{u'columnNumber': 1, u'description': u'Error: expected a pointer', u'fileName': u'frida/runtime/core.js', u'lineNumber': 427, u'type': u'error', u'stack': u'Error: expected a pointer\n at frida/runtime/core.js:427\n at script1.js:9'}

macos install problems

Not sure what info you need but if this is not enough let me know.

$ sudo -H pip install frida
Collecting frida
Downloading frida-8.1.1.zip
Requirement already satisfied (use --upgrade to upgrade): colorama>=0.2.7 in /Library/Python/2.7/site-packages (from frida)
Collecting prompt-toolkit>=0.57 (from frida)
Downloading prompt_toolkit-1.0.8-py2-none-any.whl (240kB)
100% |████████████████████████████████| 245kB 2.2MB/s
Collecting pygments>=2.0.2 (from frida)
Downloading Pygments-2.1.3-py2.py3-none-any.whl (755kB)
100% |████████████████████████████████| 757kB 1.2MB/s
Collecting six>=1.9.0 (from prompt-toolkit>=0.57->frida)
Downloading six-1.10.0-py2.py3-none-any.whl
Collecting wcwidth (from prompt-toolkit>=0.57->frida)
Downloading wcwidth-0.1.7-py2.py3-none-any.whl
Installing collected packages: six, wcwidth, prompt-toolkit, pygments, frida
Found existing installation: six 1.4.1
DEPRECATION: Uninstalling a distutils installed project (six) has been deprecated and will be removed in a future version. This is due to the fact that uninstalling a distutils project will only partially uninstall the project.
Uninstalling six-1.4.1:
Exception:
Traceback (most recent call last):
File "/Library/Python/2.7/site-packages/pip/basecommand.py", line 215, in main
status = self.run(options, args)
File "/Library/Python/2.7/site-packages/pip/commands/install.py", line 317, in run
prefix=options.prefix_path,
File "/Library/Python/2.7/site-packages/pip/req/req_set.py", line 736, in install
requirement.uninstall(auto_confirm=True)
File "/Library/Python/2.7/site-packages/pip/req/req_install.py", line 742, in uninstall
paths_to_remove.remove(auto_confirm)
File "/Library/Python/2.7/site-packages/pip/req/req_uninstall.py", line 115, in remove
renames(path, new_path)
File "/Library/Python/2.7/site-packages/pip/utils/init.py", line 267, in renames
shutil.move(old, new)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/shutil.py", line 302, in move
copy2(src, real_dst)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/shutil.py", line 131, in copy2
copystat(src, dst)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/shutil.py", line 103, in copystat
os.chflags(dst, st.st_flags)
OSError: [Errno 1] Operation not permitted: '/tmp/pip-6Nqhkj-uninstall/System/Library/Frameworks/Python.framework/Versions/2.7/Extras/lib/python/six-1.4.1-py2.7.egg-info'
$ uname -a
Darwin Casalt001142s-MacBook-Pro.local 15.2.0 Darwin Kernel Version 15.2.0: Fri Nov 13 19:56:56 PST 2015; root:xnu-3248.20.55~2/RELEASE_X86_64 x86_64

run frida for android: GDBus.Error:re.frida.Error

I run the following script:

import frida
import sys

session = frida.get_remote_device().attach('com.example.myapp')
print session.enumerate_modules()

The following is the output。

Traceback (most recent call last):
File "android-test.py", line 4, in
session = frida.get_remote_device().attach('com.example.myapp')
File "C:\Python27\lib\site-packages\frida-3.0.1-py2.7-win32.egg\frida\core.py"
, line 69, in attach
return Session(self._impl.attach(self._pid_of(target)))
SystemError: GDBus.Error:re.frida.Error.ProcessNotResponding: GDBus.Error:re.fri
da.Error.ProcessNotResponding: Unexpectedly timed out while waiting for FIFO to
establish

What may result in this?

Frida seg fault 11

Hello,

I'd really like to get frida going so I can do some work with apps on my iDevice, but I'm having a heck of a time getting it to start. I tried the easy_install route first, but ended up with problems connecting to my iPad (frida-ps would error out when I attached the iPad - sorry didn't capture the error message)

So I went the route of building frida from source. Downloaded, ran make to do the config stuff, then ran 'make install-mac PYTHON=/Library/Frameworks/Python.framework/Versions/2.7/bin/python' Seems like it all worked.

Fired up a python console and did the smoke-test:

jigsaw:[frida]$ python -V
Python 2.7.10
jigsaw:[frida]$ which python
/Library/Frameworks/Python.framework/Versions/2.7/bin/python
jigsaw:[frida]$ python
Python 2.7.10 (v2.7.10:15c95b7d81dc, May 23 2015, 09:33:12)
[GCC 4.2.1 (Apple Inc. build 5666) (dot 3)] on darwin
Type "help", "copyright", "credits" or "license" for more information.

import frida
s = frida.attach("cat")
Segmentation fault: 11
jigsaw:[frida]$

need help plz

this is my script
==== my script (ref. javascript api -> File) =====
import frida,sys
....
var outFile = new File("/data/local/tmp/fwdex2","wb"); <-- it's ok
write(data); <-- error (write is not defined)
flush(); <-- error (flush is not defined)
close(); <-- error (close is not defined)

i need help ;-;

Error using frida in ubuntu 14.04

Hey :)
I have successfully installed frida, I followed the steps in the installation guide for linux, and I have enabled Ptracing for non-child processes (sudo sysctl kernel.yama.ptrace_scope=0).
Everything went well until I tried to run the example in the installation page. To see if the problem is not specific to this example, I have tried to run the hello.c in the functions page. (http://www.frida.re/docs/functions/).
Both gave me the same response:
user@ubuntu:~/Desktop/tmp$ sudo python hook.py 0x40057d /usr/lib/python2.7/dist-packages/pkg_resources.py:1031: UserWarning: /home/user/.python-eggs is writable by group/others and vulnerable to attack when used with get_resource_filename. Consider a more secure location (set with .set_extraction_path or the PYTHON_EGG_CACHE environment variable). warnings.warn(msg, UserWarning)
Traceback (most recent call last): File "hook.py", line 4, in <module> session = frida.attach("hello")
File "/usr/local/lib/python2.7/dist-packages/frida-4.0.6-py2.7-linux-x86_64.egg/frida/__init__.py", line 54, in attach
File "/usr/local/lib/python2.7/dist-packages/frida-4.0.6-py2.7-linux-x86_64.egg/frida/core.py", line 70, in attach
frida.NotSupportedError: remote_exec PTRACE_CONT wait failed: 0

And the process frida tried to attach to crushed with a segmentation_fault:
user@ubuntu:~/Desktop/tmp$ ./hello
f() is at 0x40057d
Number: 0
Number: 1
Number: 2
Number: 3
Number: 4
Number: 5
Number: 6
Number: 7
Number: 8
Number: 9
Segmentation fault (core dumped)

Any ideas why would it happen ??

Crashes

OSX 10.10.3
python 2.7.3
frida 4.1.2

frida-discover -n "Activity Monitor"

$ frida-discover -n "Activity Monitor"
Tracing 11 threads. Press ENTER to stop.
Target process terminated.
Stopping...

Process:               Activity Monitor [25087]
Path:                  /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor
Identifier:            com.apple.ActivityMonitor
Version:               10.10.0 (968)
Build Info:            ActivityMonitor-973001000000000~2
Code Type:             X86-64 (Native)
Parent Process:        ??? [1]
Responsible:           Activity Monitor [25087]
User ID:               501

Date/Time:             2015-06-05 11:51:14.397 +0300
OS Version:            Mac OS X 10.10.3 (14D136)
Report Version:        11
Anonymous UUID:        B334F0B7-35EE-3114-FD3E-D3BC88B2B7C0

Sleep/Wake UUID:       63B46C26-88A7-4ED5-B8EC-DAC530067D4D

Time Awake Since Boot: 180000 seconds
Time Since Wake:       8400 seconds

Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BAD_ACCESS (SIGABRT)
Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000000000008

External Modification Warnings:
Thread creation by external task.

VM Regions Near 0x8:
--> 
    __TEXT                 0000000106196000-00000001061f5000 [  380K] r-x/rwx SM=COW  /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor

Application Specific Information:
abort() called

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib          0x00007fff99d1d286 __pthread_kill + 10
1   libsystem_c.dylib               0x00007fff8bde6b53 abort + 129
2   ???                             0x000000010de1373e 0 + 4527830846
3   libsystem_platform.dylib        0x00007fff97eaaf1a _sigtramp + 26
4   ???                             0x00000001061faba0 0 + 4397706144
5   com.apple.ActivityMonitor       0x00000001061e0c73 0x106196000 + 306291
6   com.apple.ActivityMonitor       0x00000001061e0676 0x106196000 + 304758
7   com.apple.ActivityMonitor       0x00000001061e08a6 0x106196000 + 305318
8   com.apple.ActivityMonitor       0x00000001061ded90 0x106196000 + 298384
9   com.apple.ActivityMonitor       0x00000001061a6ab3 0x106196000 + 68275
10  com.apple.ActivityMonitor       0x00000001061b9658 0x106196000 + 144984
11  libdispatch.dylib               0x00007fff95606c13 _dispatch_client_callout + 8
12  libdispatch.dylib               0x00007fff9561404e _dispatch_barrier_sync_f_slow_invoke + 412
13  libdispatch.dylib               0x00007fff95606c13 _dispatch_client_callout + 8
14  libdispatch.dylib               0x00007fff95612cbf _dispatch_main_queue_callback_4CF + 861
15  com.apple.CoreFoundation        0x00007fff931dc3f9 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ + 9
16  com.apple.CoreFoundation        0x00007fff9319768f __CFRunLoopRun + 2159
17  com.apple.CoreFoundation        0x00007fff93196bd8 CFRunLoopRunSpecific + 296
18  com.apple.HIToolbox             0x00007fff9203356f RunCurrentEventLoopInMode + 235
19  com.apple.HIToolbox             0x00007fff920332ea ReceiveNextEventCommon + 431
20  com.apple.HIToolbox             0x00007fff9203312b _BlockUntilNextEventMatchingListInModeWithFilter + 71
21  com.apple.AppKit                0x00007fff8bea79bb _DPSNextEvent + 978
22  com.apple.AppKit                0x00007fff8bea6f68 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 346
23  com.apple.AppKit                0x00007fff8be9cbf3 -[NSApplication run] + 594
24  com.apple.AppKit                0x00007fff8be19354 NSApplicationMain + 1832
25  libdyld.dylib                   0x00007fff8f9585c9 start + 1

Thread 1:: Dispatch queue: com.apple.libdispatch-manager
0   ???                             0x000000010f55c99a 0 + 4552247706
1   libdispatch.dylib               0x00007fff95609a6a _dispatch_mgr_thread + 52

Thread 2:
0   ???                             0x000000010ca3c000 0 + 4507025408
1   libsystem_pthread.dylib         0x00007fff8a65740d start_wqthread + 13

Thread 3:
0   libsystem_kernel.dylib          0x00007fff99d1d94a __workq_kernreturn + 10
1   libsystem_pthread.dylib         0x00007fff8a65740d start_wqthread + 13

Thread 4:: Dispatch queue: sample process queue
0   libsystem_kernel.dylib          0x00007fff99d1851a semaphore_wait_trap + 10
1   libsystem_platform.dylib        0x00007fff97ea9c5b _os_semaphore_wait + 16
2   libdispatch.dylib               0x00007fff95610557 _dispatch_barrier_sync_f_slow + 597
3   com.apple.ActivityMonitor       0x00000001061b7d59 0x106196000 + 138585
4   com.apple.ActivityMonitor       0x00000001061be785 0x106196000 + 165765
5   libdispatch.dylib               0x00007fff95606c13 _dispatch_client_callout + 8
6   libdispatch.dylib               0x00007fff95607e5e _dispatch_barrier_sync_f_invoke + 57
7   com.apple.ActivityMonitor       0x00000001061be5c9 0x106196000 + 165321
8   libsysmon.dylib                 0x000000010628a46a __sysmon_request_execute_block_invoke_2 + 224
9   libxpc.dylib                    0x00007fff963ded4d _xpc_connection_call_event_handler + 58
10  libxpc.dylib                    0x00007fff963de8cb _xpc_connection_mach_event + 1901
11  libdispatch.dylib               0x00007fff9560c0f8 _dispatch_client_callout4 + 9
12  libdispatch.dylib               0x00007fff9560d1a3 _dispatch_mach_msg_invoke + 445
13  libdispatch.dylib               0x00007fff9560a154 _dispatch_queue_drain + 571
14  libdispatch.dylib               0x00007fff9560ba10 _dispatch_mach_invoke + 232
15  libdispatch.dylib               0x00007fff9560a154 _dispatch_queue_drain + 571
16  libdispatch.dylib               0x00007fff9560becc _dispatch_queue_invoke + 202
17  libdispatch.dylib               0x00007fff956096b7 _dispatch_root_queue_drain + 463
18  libdispatch.dylib               0x00007fff95617fe4 _dispatch_worker_thread3 + 91
19  libsystem_pthread.dylib         0x00007fff8a659637 _pthread_wqthread + 729
20  libsystem_pthread.dylib         0x00007fff8a65740d start_wqthread + 13

Thread 5:
0   libsystem_kernel.dylib          0x00007fff99d1d94a __workq_kernreturn + 10
1   libsystem_pthread.dylib         0x00007fff8a65740d start_wqthread + 13

Thread 6:
0   ???                             0x000000010eebf000 0 + 4545310720
1   libsystem_pthread.dylib         0x00007fff8a65740d start_wqthread + 13

Thread 7:
0   ???                             0x000000010eec7000 0 + 4545343488
1   libsystem_pthread.dylib         0x00007fff8a65740d start_wqthread + 13

Thread 8:
0   ???                             0x000000010eecf000 0 + 4545376256
1   libsystem_pthread.dylib         0x00007fff8a65740d start_wqthread + 13

Thread 9:
0   ???                             0x000000010eed7000 0 + 4545409024
1   libsystem_pthread.dylib         0x00007fff8a65740d start_wqthread + 13

Thread 10:
0   ???                             0x0000000112ac6000 0 + 4608253952
1   com.apple.CoreFoundation        0x00007fff93197eb4 __CFRunLoopServiceMachPort + 212
2   com.apple.CoreFoundation        0x00007fff9319737b __CFRunLoopRun + 1371
3   com.apple.CoreFoundation        0x00007fff93196bd8 CFRunLoopRunSpecific + 296
4   com.apple.AppKit                0x00007fff8bf6f66b _NSEventThread + 137
5   libsystem_pthread.dylib         0x00007fff8a659268 _pthread_body + 131
6   libsystem_pthread.dylib         0x00007fff8a6591e5 _pthread_start + 176
7   libsystem_pthread.dylib         0x00007fff8a65741d thread_start + 13

Thread 11:
0   libsystem_kernel.dylib          0x00007fff99d1d48a __semwait_signal + 10
1   ???                             0x000000010dddd048 0 + 4527607880

Thread 12:
0   libsystem_kernel.dylib          0x00007fff99d1d3fa __select + 10
1   ???                             0x000000010e31a26e 0 + 4533101166
2   ???                             0x000000010e31a4b3 0 + 4533101747
3   ???                             0x000000010ddedb15 0 + 4527676181
4   ???                             0x000000010dddd22d 0 + 4527608365

Thread 13:: gmain
0   libsystem_kernel.dylib          0x00007fff99d1d3fa __select + 10
1   ???                             0x000000010e31a26e 0 + 4533101166
2   ???                             0x000000010e31a314 0 + 4533101332
3   ???                             0x000000010e31aec3 0 + 4533104323
4   ???                             0x000000010e32bae1 0 + 4533172961
5   ???                             0x000000010ddf206f 0 + 4527693935
6   libsystem_pthread.dylib         0x00007fff8a659268 _pthread_body + 131
7   libsystem_pthread.dylib         0x00007fff8a6591e5 _pthread_start + 176
8   libsystem_pthread.dylib         0x00007fff8a65741d thread_start + 13

Thread 14:: pool
0   libsystem_kernel.dylib          0x00007fff99d184de mach_msg_trap + 10
1   libsystem_kernel.dylib          0x00007fff99d1764f mach_msg + 55
2   ???                             0x000000010ddf4b7e 0 + 4527704958
3   ???                             0x000000010e28b23c 0 + 4532515388
4   ???                             0x000000010e2a2a35 0 + 4532611637
5   ???                             0x000000010e32c728 0 + 4533176104
6   ???                             0x000000010e32bae1 0 + 4533172961
7   ???                             0x000000010ddf206f 0 + 4527693935
8   libsystem_pthread.dylib         0x00007fff8a659268 _pthread_body + 131
9   libsystem_pthread.dylib         0x00007fff8a6591e5 _pthread_start + 176
10  libsystem_pthread.dylib         0x00007fff8a65741d thread_start + 13

Thread 15:: gdbus
0   libsystem_kernel.dylib          0x00007fff99d1d3fa __select + 10
1   ???                             0x000000010e31a26e 0 + 4533101166
2   ???                             0x000000010e31a4b3 0 + 4533101747
3   ???                             0x000000010e2cf802 0 + 4532795394
4   ???                             0x000000010e32bae1 0 + 4533172961
5   ???                             0x000000010ddf206f 0 + 4527693935
6   libsystem_pthread.dylib         0x00007fff8a659268 _pthread_body + 131
7   libsystem_pthread.dylib         0x00007fff8a6591e5 _pthread_start + 176
8   libsystem_pthread.dylib         0x00007fff8a65741d thread_start + 13

Thread 16:: pool
0   libsystem_kernel.dylib          0x00007fff99d1d136 __psynch_cvwait + 10
1   ???                             0x000000010e33dba4 0 + 4533246884
2   ???                             0x000000010e30a231 0 + 4533035569
3   ???                             0x000000010e32c772 0 + 4533176178
4   ???                             0x000000010e32bae1 0 + 4533172961
5   ???                             0x000000010ddf206f 0 + 4527693935
6   libsystem_pthread.dylib         0x00007fff8a659268 _pthread_body + 131
7   libsystem_pthread.dylib         0x00007fff8a6591e5 _pthread_start + 176
8   libsystem_pthread.dylib         0x00007fff8a65741d thread_start + 13

Thread 17:: gum-v8-loop
0   libsystem_kernel.dylib          0x00007fff99d1d3fa __select + 10
1   ???                             0x000000010e31a26e 0 + 4533101166
2   ???                             0x000000010e31a4b3 0 + 4533101747
3   ???                             0x000000010de165e9 0 + 4527842793
4   ???                             0x000000010e32bae1 0 + 4533172961
5   ???                             0x000000010ddf206f 0 + 4527693935
6   libsystem_pthread.dylib         0x00007fff8a659268 _pthread_body + 131
7   libsystem_pthread.dylib         0x00007fff8a6591e5 _pthread_start + 176
8   libsystem_pthread.dylib         0x00007fff8a65741d thread_start + 13

Thread 0 crashed with X86 Thread State (64-bit):
  rax: 0x0000000000000000  rbx: 0x0000000000000006  rcx: 0x00007fff59a67798  rdx: 0x0000000000000000
  rdi: 0x000000000000130f  rsi: 0x0000000000000006  rbp: 0x00007fff59a677c0  rsp: 0x00007fff59a67798
   r8: 0x00007fff59a67cc8   r9: 0x00000000000000e0  r10: 0x0000000008000000  r11: 0x0000000000000206
  r12: 0x0000000000000000  r13: 0x00006080004517f0  r14: 0x00007fff7a611300  r15: 0x00007fff59a67cc8
  rip: 0x00007fff99d1d286  rfl: 0x0000000000000206  cr2: 0x00007fff7a9d8fd8

Logical CPU:     0
Error Code:      0x02000148
Trap Number:     133


Binary Images:
       0x106196000 -        0x1061f4ff7  com.apple.ActivityMonitor (10.10.0 - 968) <1D36ADC3-FFA1-3316-82DF-3A01285B7EA0> /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor
       0x10621b000 -        0x106261ff7  com.apple.GraphKit (1.0.5 - 30) <7E8C3679-2CCB-3A1E-8050-47D6292F3430> /System/Library/PrivateFrameworks/GraphKit.framework/Versions/A/GraphKit
       0x106289000 -        0x10628afff  libsysmon.dylib (78.10.1) <FAA22A2A-55A7-39A3-A293-3C566931CA6B> /usr/lib/libsysmon.dylib
       0x109939000 -        0x109939ff5 +cl_kernels (???) <D874A9FA-9441-45C6-9C73-9661B6898285> cl_kernels
       0x10993f000 -        0x10993ffef +cl_kernels (???) <BB7E9F2D-C639-40A6-8068-CA4CE7B0AF83> cl_kernels
       0x10ade6000 -        0x10aeccfef  unorm8_bgra.dylib (2.4.5) <7BFE1DA8-2BE4-3B4F-8A7F-F3D6D4D36ADA> /System/Library/Frameworks/OpenCL.framework/Versions/A/Libraries/ImageFormats/unorm8_bgra.dylib
       0x10c290000 -        0x10c290ffe +cl_kernels (???) <E1ADF683-49BF-44CF-BBCE-006CF6B19756> cl_kernels
    0x7fff6dd67000 -     0x7fff6dd9d837  dyld (353.2.1) <65DCCB06-339C-3E25-9702-600A28291D0E> /usr/lib/dyld
    0x7fff8a5fa000 -     0x7fff8a606ff7  com.apple.OpenDirectory (10.10 - 187) <1E07769D-68DE-3BF2-8E9E-A1E98BF70D1B> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory
    0x7fff8a61d000 -     0x7fff8a655fff  com.apple.RemoteViewServices (2.0 - 99) <C9A62691-B0D9-34B7-B71C-A48B5F4DC553> /System/Library/PrivateFrameworks/RemoteViewServices.framework/Versions/A/RemoteViewServices
    0x7fff8a656000 -     0x7fff8a65ffff  libsystem_pthread.dylib (105.10.1) <3103AA7F-3BAE-3673-9649-47FFD7E15C97> /usr/lib/system/libsystem_pthread.dylib
    0x7fff8a660000 -     0x7fff8a662ffb  libCGXType.A.dylib (779.11) <51607E77-F183-3CC2-A78C-238AFBDF6262> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXType.A.dylib
    0x7fff8a69d000 -     0x7fff8a6a8fff  libGL.dylib (11.1.2) <BF99CC65-215A-3C7D-87D7-3F7EE6E9B3DD> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
    0x7fff8a6a9000 -     0x7fff8a6eafff  libGLU.dylib (11.1.2) <4C54F0D1-2ADC-38A0-92D1-F479E9B99355> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
    0x7fff8a6eb000 -     0x7fff8a6f0fff  libsystem_stats.dylib (163.20.16) <FBC3F80F-A0FB-3BD6-9A7E-800DE45F092E> /usr/lib/system/libsystem_stats.dylib
    0x7fff8a74c000 -     0x7fff8a787fff  com.apple.QD (301 - 301) <C4D2AD03-B839-350A-AAF0-B4A08F8BED77> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
    0x7fff8aca8000 -     0x7fff8acacfff  libCoreVMClient.dylib (79.1) <201EF6DF-5074-3CB7-A361-398CF957A264> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib
    0x7fff8ae77000 -     0x7fff8af19fff  com.apple.Bluetooth (4.3.4 - 4.3.4f4) <A1120885-F31B-3C13-9B0D-2589F391CC7A> /System/Library/Frameworks/IOBluetooth.framework/Versions/A/IOBluetooth
    0x7fff8b27b000 -     0x7fff8b2adff3  com.apple.frameworks.CoreDaemon (1.3 - 1.3) <C6DB0A07-F8E4-3837-BCA9-225F460EDA81> /System/Library/PrivateFrameworks/CoreDaemon.framework/Versions/B/CoreDaemon
    0x7fff8b851000 -     0x7fff8b863ff7  com.apple.CoreDuetDaemonProtocol (1.0 - 1) <CE9FABB4-1C5D-3F9B-9BB8-5CC50C3E5E31> /System/Library/PrivateFrameworks/CoreDuetDaemonProtocol.framework/Versions/A/CoreDuetDaemonProtocol
    0x7fff8b86c000 -     0x7fff8b885ff7  com.apple.CFOpenDirectory (10.10 - 187) <790ED527-EFD2-3EA6-8C97-A8C04E96EBA7> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory
    0x7fff8b965000 -     0x7fff8b982ffb  libresolv.9.dylib (57) <26B38E61-298A-3C3A-82C1-3B5E98AD5E29> /usr/lib/libresolv.9.dylib
    0x7fff8bb3a000 -     0x7fff8bb74ffb  com.apple.DebugSymbols (115 - 115) <6F03761D-7C3A-3C80-8031-AA1C1AD7C706> /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbols
    0x7fff8bb75000 -     0x7fff8bb7dffb  libcopyfile.dylib (118.1.2) <0C68D3A6-ACDD-3EF3-991A-CC82C32AB836> /usr/lib/system/libcopyfile.dylib
    0x7fff8bb7e000 -     0x7fff8bbbeff7  libGLImage.dylib (11.1.2) <260A4BF3-DC45-369C-A0CD-B667F9D17179> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
    0x7fff8bbdf000 -     0x7fff8bc63fff  com.apple.PerformanceAnalysis (1.0 - 1) <599AED3E-B689-3C40-8B91-93AD36C97658> /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/PerformanceAnalysis
    0x7fff8bd89000 -     0x7fff8be15ff7  libsystem_c.dylib (1044.10.1) <86FBED7A-F2C8-3591-AD6F-486DD57E6B6A> /usr/lib/system/libsystem_c.dylib
    0x7fff8be16000 -     0x7fff8c997ff7  com.apple.AppKit (6.9 - 1347.57) <B214D528-7D1C-39B2-BE36-821D417A0297> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
    0x7fff8ccf2000 -     0x7fff8cd3eff7  libcups.2.dylib (408.2) <E8AD18F9-61E4-3791-B840-504468C25556> /usr/lib/libcups.2.dylib
    0x7fff8cd3f000 -     0x7fff8d57bfe3  com.apple.CoreGraphics (1.600.0 - 779.11) <DC15AADD-387C-348E-84F0-1C8BAAB1B567> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
    0x7fff8d57c000 -     0x7fff8d583fff  com.apple.NetFS (6.0 - 4.0) <1581D25F-CC07-39B0-90E8-5D4F3CF84EBA> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS
    0x7fff8d584000 -     0x7fff8d5b4fff  libsystem_m.dylib (3086.1) <1E12AB45-6D96-36D0-A226-F24D9FB0D9D6> /usr/lib/system/libsystem_m.dylib
    0x7fff8d5c2000 -     0x7fff8d5c2fff  com.apple.audio.units.AudioUnit (1.12 - 1.12) <E5335492-7EFE-31EA-BE72-4A9CEE68D58E> /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
    0x7fff8d66b000 -     0x7fff8d7a5fff  com.apple.ImageIO.framework (3.3.0 - 1237) <3C06213D-847A-3C7B-843E-6EC37113965D> /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO
    0x7fff8d7af000 -     0x7fff8d7d4fff  libPng.dylib (1237) <F5652650-87ED-3D53-9E59-A897DFA41DD0> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
    0x7fff8d7d5000 -     0x7fff8d8b9fff  libcrypto.0.9.8.dylib (52.20.2) <977DA067-2588-3BF8-A7B2-F08FC6E9088F> /usr/lib/libcrypto.0.9.8.dylib
    0x7fff8d8ba000 -     0x7fff8d900ff7  libauto.dylib (186) <A260789B-D4D8-316A-9490-254767B8A5F1> /usr/lib/libauto.dylib
    0x7fff8d901000 -     0x7fff8d903fff  libCVMSPluginSupport.dylib (11.1.2) <6EFEC4A6-2EAC-3C27-820E-C28BE71B9FCB> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib
    0x7fff8d963000 -     0x7fff8d97fff7  libsystem_malloc.dylib (53.1.1) <19BCC257-5717-3502-A71F-95D65AFA861B> /usr/lib/system/libsystem_malloc.dylib
    0x7fff8d980000 -     0x7fff8d9daff7  com.apple.LanguageModeling (1.0 - 1) <ACA93FE0-A0E3-333E-AE3C-8EB7DE5F362F> /System/Library/PrivateFrameworks/LanguageModeling.framework/Versions/A/LanguageModeling
    0x7fff8d9db000 -     0x7fff8d9f5ff3  com.apple.Ubiquity (1.3 - 313) <DF56A657-CC6E-3BE2-86A0-71F07127724C> /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity
    0x7fff8da5a000 -     0x7fff8dd29ff3  com.apple.CoreImage (10.3.4) <C1AE8252-A95D-3BF4-83B8-BE85E979F2CB> /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/CoreImage.framework/Versions/A/CoreImage
    0x7fff8dd2a000 -     0x7fff8dd2fff7  libmacho.dylib (862) <126CA2ED-DE91-308F-8881-B9DAEC3C63B6> /usr/lib/system/libmacho.dylib
    0x7fff8dd30000 -     0x7fff8dd3dff7  libbz2.1.0.dylib (36) <2DF83FBC-5C08-39E1-94F5-C28653791B5F> /usr/lib/libbz2.1.0.dylib
    0x7fff8dd3e000 -     0x7fff8dd69fff  libc++abi.dylib (125) <88A22A0F-87C6-3002-BFBA-AC0F2808B8B9> /usr/lib/libc++abi.dylib
    0x7fff8dd6a000 -     0x7fff8ddb7ff7  com.apple.print.framework.PrintCore (10.3 - 451.1) <DE992474-0841-38A1-B4F6-46D653E454D5> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
    0x7fff8ddb8000 -     0x7fff8defefef  libsqlite3.dylib (168) <8B78BED1-7B9B-3943-80DC-0871015AEAC4> /usr/lib/libsqlite3.dylib
    0x7fff8dfa0000 -     0x7fff8dfabff7  libkxld.dylib (2782.20.48) <28EF8328-E3E2-336A-974B-FB1BF119D55A> /usr/lib/system/libkxld.dylib
    0x7fff8dfd9000 -     0x7fff8dffdfef  libJPEG.dylib (1237) <6DB10054-5C64-32FB-83FD-E102A8F73258> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
    0x7fff8e03b000 -     0x7fff8e03cff7  libsystem_blocks.dylib (65) <9615D10A-FCA7-3BE4-AA1A-1B195DACE1A1> /usr/lib/system/libsystem_blocks.dylib
    0x7fff8e03d000 -     0x7fff8e0ecfe7  libvMisc.dylib (516) <6739E390-46E7-3BFA-9B69-B278562326E6> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
    0x7fff8e1cf000 -     0x7fff8e28fff7  com.apple.backup.framework (1.6.4 - 1.6.4) <A67CE7D7-AAE4-3AC0-86B7-EAF403853D09> /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
    0x7fff8e293000 -     0x7fff8e331fff  com.apple.Metadata (10.7.0 - 917.35) <8CBD1D32-4F4B-3F9A-AC65-76F2B5376FBF> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
    0x7fff8e332000 -     0x7fff8e343fff  libcmph.dylib (1) <46EC3997-DB5E-38AE-BBBB-A035A54AD3C0> /usr/lib/libcmph.dylib
    0x7fff8e35c000 -     0x7fff8e361ffb  libheimdal-asn1.dylib (398.10.1) <A7B6447A-6680-3625-83C3-993B58D5C43F> /usr/lib/libheimdal-asn1.dylib
    0x7fff8e362000 -     0x7fff8e3a8ff7  libFontRegistry.dylib (134.1) <CE41D8C2-BEED-345C-BC4F-3775CC06C672> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib
    0x7fff8e3a9000 -     0x7fff8e6dafff  com.apple.Foundation (6.9 - 1153.20) <F0FF3A5D-C5B7-34A1-9319-DE1EF928E58E> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
    0x7fff8e973000 -     0x7fff8e9bdff7  com.apple.HIServices (1.22 - 522.1) <E8BD41E4-7747-3CAF-807A-5CA9AD16B525> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
    0x7fff8e9db000 -     0x7fff8ea2cfff  com.apple.audio.CoreAudio (4.3.0 - 4.3.0) <450293F7-DAE7-3DD0-8F7C-71FC2FD72627> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
    0x7fff8ea86000 -     0x7fff8eafeff7  com.apple.SystemConfiguration (1.14 - 1.14) <06A8405D-53BA-30A9-BA8A-222099176091> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
    0x7fff8eaff000 -     0x7fff8ec27ff7  com.apple.coreui (2.1 - 308.6) <DEA5D3E1-D333-302B-A6CF-7643BFDFAED0> /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
    0x7fff8ec28000 -     0x7fff8ec50fff  libsystem_info.dylib (459.20.1) <AEB3FE62-4763-3050-8352-D6F9AF961AE6> /usr/lib/system/libsystem_info.dylib
    0x7fff8ec56000 -     0x7fff8ec57ff3  libSystem.B.dylib (1213) <CCEC13A5-D0D9-31C5-B0B0-1C564B4A20A6> /usr/lib/libSystem.B.dylib
    0x7fff8ec84000 -     0x7fff8ecf5ffb  com.apple.ApplicationServices.ATS (360 - 375.2) <2338AF23-528F-359A-847F-8B04E49E2B84> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
    0x7fff8ecf6000 -     0x7fff8ecffff3  com.apple.CommonAuth (4.0 - 2.0) <BA9F5A09-D200-3D18-9F4A-20C789291A30> /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth
    0x7fff8ed00000 -     0x7fff8ed4bfff  com.apple.CloudDocs (1.0 - 321.6) <4C54EDB7-4377-3722-8C47-F3C3D260FCBA> /System/Library/PrivateFrameworks/CloudDocs.framework/Versions/A/CloudDocs
    0x7fff8edb2000 -     0x7fff8edbdff7  com.apple.speech.synthesis.framework (5.3.3 - 5.3.3) <A5640275-E2A6-3856-95EF-5F0DC440B10C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
    0x7fff8edc5000 -     0x7fff8eeb9fff  libFontParser.dylib (134.2) <9F57B025-AB9C-31DD-9D54-2D7AB1298885> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib
    0x7fff8f800000 -     0x7fff8f8bbff7  com.apple.DiscRecording (9.0 - 9000.4.2) <4655B4B8-523D-3AE6-92A0-8486A2258B3B> /System/Library/Frameworks/DiscRecording.framework/Versions/A/DiscRecording
    0x7fff8f8cf000 -     0x7fff8f91eff7  com.apple.opencl (2.4.2 - 2.4.2) <4A9574ED-15CF-3EBB-B4C0-D30F644D6C74> /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL
    0x7fff8f955000 -     0x7fff8f958ff7  libdyld.dylib (353.2.1) <9EACCA38-291D-38CC-811F-7E9D1451E2D3> /usr/lib/system/libdyld.dylib
    0x7fff8f959000 -     0x7fff8f98aff7  com.apple.ProtectedCloudStorage (1.0 - 1) <D0903EA8-D861-3488-BCF5-9D8E7C6D01FA> /System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Versions/A/ProtectedCloudStorage
    0x7fff8fa83000 -     0x7fff8fbeaffb  com.apple.audio.toolbox.AudioToolbox (1.12 - 1.12) <5678FC94-456A-3F5F-BA9A-10EB6E462997> /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
    0x7fff8fbeb000 -     0x7fff8fc1aff7  com.apple.CoreServicesInternal (221.7.2 - 221.7.2) <B93D4775-149C-3698-B38C-9C50673D455C> /System/Library/PrivateFrameworks/CoreServicesInternal.framework/Versions/A/CoreServicesInternal
    0x7fff8fc1b000 -     0x7fff8fc1bff7  libkeymgr.dylib (28) <77845842-DE70-3CC5-BD01-C3D14227CED5> /usr/lib/system/libkeymgr.dylib
    0x7fff8fc1c000 -     0x7fff8fc6afff  libcurl.4.dylib (83.1.2) <462767FC-C7F2-39F1-8C10-DA4114945F55> /usr/lib/libcurl.4.dylib
    0x7fff8fc6b000 -     0x7fff8fc6bfff  com.apple.ApplicationServices (48 - 48) <5BF7910B-C328-3BF8-BA4F-CE52B574CE01> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
    0x7fff8fc6c000 -     0x7fff8fc6efff  libRadiance.dylib (1237) <9B048776-53BB-3947-8ECE-9DDA804C86B2> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
    0x7fff90c5a000 -     0x7fff90cc9fff  com.apple.SearchKit (1.4.0 - 1.4.0) <80883BD1-C9BA-3794-A20E-476F94DD89A9> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
    0x7fff90cca000 -     0x7fff90ccafff  com.apple.Cocoa (6.8 - 21) <EAC0EA1E-3C62-3B28-A941-5D8B1E085FF8> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
    0x7fff90cf8000 -     0x7fff91105ff7  libLAPACK.dylib (1128) <F9201AE7-B031-36DB-BCF8-971E994EF7C1> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
    0x7fff91115000 -     0x7fff91123ff7  com.apple.opengl (11.1.2 - 11.1.2) <864B35BF-1E76-382B-8D5F-38C7282621E6> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
    0x7fff9113e000 -     0x7fff9134bff3  com.apple.CFNetwork (720.3.13 - 720.3.13) <69E15385-5784-3912-88F6-03B16F1C1A5C> /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
    0x7fff91746000 -     0x7fff917d7ff7  libCoreStorage.dylib (471.20.7) <ECD8903C-F131-3A9A-BBF4-E124DA028909> /usr/lib/libCoreStorage.dylib
    0x7fff917db000 -     0x7fff918b1ff3  com.apple.DiskImagesFramework (10.10.1 - 396) <1149D3E1-CC6C-3177-916D-2BE066DC9344> /System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/DiskImages
    0x7fff918b2000 -     0x7fff918bafff  libsystem_dnssd.dylib (561.1.1) <62B70ECA-E40D-3C63-896E-7F00EC386DDB> /usr/lib/system/libsystem_dnssd.dylib
    0x7fff918f3000 -     0x7fff918fbff7  com.apple.icloud.FindMyDevice (1.0 - 1) <9CE67F85-2BA8-3093-97BA-07BF5C04A5D6> /System/Library/PrivateFrameworks/FindMyDevice.framework/Versions/A/FindMyDevice
    0x7fff91982000 -     0x7fff91a18ff7  com.apple.cloudkit.CloudKit (283.67.2 - 283.67.2) <79F5AD38-61D5-30E6-96DC-974351D4195B> /System/Library/Frameworks/CloudKit.framework/Versions/A/CloudKit
    0x7fff91a19000 -     0x7fff91a1dff7  libGIF.dylib (1237) <8A40FED5-FA90-3E76-A359-CD974C43A962> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
    0x7fff91b16000 -     0x7fff91dfdffb  com.apple.CoreServices.CarbonCore (1108.6 - 1108.6) <8953580E-7857-33B2-AA64-98296830D3A8> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
    0x7fff91fdf000 -     0x7fff92000fff  com.apple.framework.Apple80211 (10.3 - 1030.71.6) <D3862426-2586-3DF7-BA75-9A184FCD74C4> /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Apple80211
    0x7fff92001000 -     0x7fff92306ff3  com.apple.HIToolbox (2.1.1 - 758.7) <6711FAA9-904A-3B49-9665-FC8D13B93C42> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
    0x7fff92307000 -     0x7fff9230efff  com.apple.network.statistics.framework (1.2 - 1) <61B311D1-7F15-35B3-80D4-99B8BE90ACD9> /System/Library/PrivateFrameworks/NetworkStatistics.framework/Versions/A/NetworkStatistics
    0x7fff92338000 -     0x7fff925b7ff7  com.apple.CoreData (111 - 526.3) <5A27E0D8-5E5A-335B-B3F6-2601C7B976FA> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
    0x7fff925c2000 -     0x7fff92621fff  com.apple.AE (681.2 - 681.2) <181B3B06-2DC6-3E4D-B44A-2551C5E9CF6F> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
    0x7fff926d2000 -     0x7fff92766fff  com.apple.ink.framework (10.9 - 213) <8E029630-1530-3734-A446-13353F0E7AC5> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
    0x7fff92767000 -     0x7fff92767fff  libOpenScriptingUtil.dylib (162.1) <E0605012-0DDB-3150-8FD0-699376FA3CD0> /usr/lib/libOpenScriptingUtil.dylib
    0x7fff92768000 -     0x7fff92783ff7  libCRFSuite.dylib (34) <D64842BE-7BD4-3D0C-9842-1D202F7C2A51> /usr/lib/libCRFSuite.dylib
    0x7fff92784000 -     0x7fff927bcfff  libsystem_network.dylib (412.20.3) <589A5F67-BE2A-3245-A181-0ECC9B53EB00> /usr/lib/system/libsystem_network.dylib
    0x7fff927bd000 -     0x7fff927c8ff7  com.apple.CrashReporterSupport (10.10 - 631) <D87A64FA-64B1-3B23-BB43-ADE173C108C6> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
    0x7fff927fc000 -     0x7fff92804ff7  com.apple.AppleSRP (5.0 - 1) <01EC5144-D09A-3D6A-AE35-F6D48585F154> /System/Library/PrivateFrameworks/AppleSRP.framework/Versions/A/AppleSRP
    0x7fff92805000 -     0x7fff92807ff7  libutil.dylib (38) <471AD65E-B86E-3C4A-8ABD-B8665A2BCE3F> /usr/lib/libutil.dylib
    0x7fff92881000 -     0x7fff928a5ff7  com.apple.Sharing (328.16 - 328.16) <F96C7040-5FAF-3BC6-AE1E-5BF9CBE786C4> /System/Library/PrivateFrameworks/Sharing.framework/Versions/A/Sharing
    0x7fff928a6000 -     0x7fff92ba8ffb  com.apple.GeoServices (1.0 - 1077.0.18) <2BBF8B44-DD46-3432-8C84-6D6AA004C233> /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/GeoServices
    0x7fff92c29000 -     0x7fff92c32ff7  libsystem_notify.dylib (133.1.1) <61147800-F320-3DAA-850C-BADF33855F29> /usr/lib/system/libsystem_notify.dylib
    0x7fff92c73000 -     0x7fff930a3fff  com.apple.vision.FaceCore (3.1.6 - 3.1.6) <C3B823AA-C261-37D3-B4AC-C59CE91C8241> /System/Library/PrivateFrameworks/FaceCore.framework/Versions/A/FaceCore
    0x7fff9310a000 -     0x7fff9310bffb  libremovefile.dylib (35) <3485B5F4-6CE8-3C62-8DFD-8736ED6E8531> /usr/lib/system/libremovefile.dylib
    0x7fff93125000 -     0x7fff934bdff7  com.apple.CoreFoundation (6.9 - 1153.18) <5C0892B8-9691-341F-9279-CA3A74D59AA0> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
    0x7fff934be000 -     0x7fff9350afff  com.apple.corelocation (1486.17 - 1615.24) <8825B3E2-E053-3E01-AE31-793443962D06> /System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation
    0x7fff93b75000 -     0x7fff93ba0fff  com.apple.DictionaryServices (1.2 - 229) <F03DFAC6-6285-3176-9C6D-7CC50F8CD52A> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
    0x7fff93ba1000 -     0x7fff93bb4ff7  com.apple.CoreBluetooth (1.0 - 1) <8D7BA9BA-EB36-307A-9119-0B3D9732C953> /System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetooth
    0x7fff9487f000 -     0x7fff94890ff7  libz.1.dylib (55) <88C7C7DE-04B8-316F-8B74-ACD9F3DE1AA1> /usr/lib/libz.1.dylib
    0x7fff94891000 -     0x7fff9489eff3  com.apple.ProtocolBuffer (1 - 228.0.1) <3429EB06-9F0E-355F-B9AB-F72879177398> /System/Library/PrivateFrameworks/ProtocolBuffer.framework/Versions/A/ProtocolBuffer
    0x7fff9514c000 -     0x7fff9514efff  libsystem_sandbox.dylib (358.20.5) <4CF77128-6BE0-3958-B646-707FA9CE61B2> /usr/lib/system/libsystem_sandbox.dylib
    0x7fff9514f000 -     0x7fff951c1fff  com.apple.framework.IOKit (2.0.2 - 1050.20.2) <09C0518C-90DF-3FC3-96D6-34D35F72C8EF> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
    0x7fff951dd000 -     0x7fff951ddff7  liblaunch.dylib (559.20.9) <FA89A113-696E-3271-8FE1-A0D7324E8481> /usr/lib/system/liblaunch.dylib
    0x7fff951de000 -     0x7fff951e7fff  libGFXShared.dylib (11.1.2) <0BAF2EA8-3BC4-3BF4-ABB6-A6E0A1F3F6A5> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib
    0x7fff95605000 -     0x7fff9562fff7  libdispatch.dylib (442.1.4) <502CF32B-669B-3709-8862-08188225E4F0> /usr/lib/system/libdispatch.dylib
    0x7fff95630000 -     0x7fff9565bff3  libarchive.2.dylib (30) <8CBB4416-EBE9-3574-8ADC-44655D245F39> /usr/lib/libarchive.2.dylib
    0x7fff956eb000 -     0x7fff95718fff  com.apple.CoreVideo (1.8 - 145.1) <18DB07E0-B927-3260-A234-636F298D1917> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
    0x7fff95766000 -     0x7fff957bafff  libc++.1.dylib (120) <1B9530FD-989B-3174-BB1C-BDC159501710> /usr/lib/libc++.1.dylib
    0x7fff957be000 -     0x7fff95834fe7  libcorecrypto.dylib (233.1.2) <E1789801-3985-3949-B736-6B3378873301> /usr/lib/system/libcorecrypto.dylib
    0x7fff95f19000 -     0x7fff95f1bfff  com.apple.CoreDuetDebugLogging (1.0 - 1) <9A6E5710-EA99-366E-BF40-9A65EC1B46A1> /System/Library/PrivateFrameworks/CoreDuetDebugLogging.framework/Versions/A/CoreDuetDebugLogging
    0x7fff95f1c000 -     0x7fff95f1dfff  liblangid.dylib (117) <B54A4AA0-2E53-3671-90F5-AFF711C0EB9E> /usr/lib/liblangid.dylib
    0x7fff95f1e000 -     0x7fff95f3dfff  com.apple.CoreDuet (1.0 - 1) <36AA9FD5-2685-314D-B364-3FA4688D86BD> /System/Library/PrivateFrameworks/CoreDuet.framework/Versions/A/CoreDuet
    0x7fff95f3e000 -     0x7fff9602efef  libJP2.dylib (1237) <A24C99BF-2360-343F-BCA1-F044E78EA0DE> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
    0x7fff9603c000 -     0x7fff96357fcf  com.apple.vImage (8.0 - 8.0) <1183FE6A-FDB6-3B3B-928D-50C7909F2308> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
    0x7fff96358000 -     0x7fff96365ff7  com.apple.SpeechRecognitionCore (2.1.2 - 2.1.2) <551322E2-C1E4-3378-A218-F362985E3E3C> /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/SpeechRecognitionCore
    0x7fff96366000 -     0x7fff96380ff7  libextension.dylib (55.2) <3BB019CA-199A-36AC-AA22-14B562138545> /usr/lib/libextension.dylib
    0x7fff96381000 -     0x7fff96386fff  com.apple.DiskArbitration (2.6 - 2.6) <0DFF4D9B-2AC3-3B82-B5C5-30F4EFBD2DB9> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
    0x7fff96387000 -     0x7fff9638bfff  com.apple.TCC (1.0 - 1) <CCA42EE2-3400-3444-9486-BC454E60D944> /System/Library/PrivateFrameworks/TCC.framework/Versions/A/TCC
    0x7fff963c9000 -     0x7fff963cdfff  libpam.2.dylib (20) <E805398D-9A92-31F8-8005-8DC188BD8B6E> /usr/lib/libpam.2.dylib
    0x7fff963d8000 -     0x7fff96400fff  libxpc.dylib (559.20.9) <D35D0DB2-D7BD-3BE4-8378-062BFE545E1D> /usr/lib/system/libxpc.dylib
    0x7fff96427000 -     0x7fff9675aff7  libmecabra.dylib (666.7) <0ED8AE5E-7A5B-34A6-A2EE-2B852E60E1E2> /usr/lib/libmecabra.dylib
    0x7fff9675b000 -     0x7fff9686dff7  libvDSP.dylib (516) <151B3CCB-77D3-3715-A3D0-7C74CD5C7FFC> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
    0x7fff96889000 -     0x7fff96894ff7  libcsfde.dylib (471.20.7) <44E51549-CECC-3C7B-867B-01901CA9C756> /usr/lib/libcsfde.dylib
    0x7fff96895000 -     0x7fff968f0fe7  libTIFF.dylib (1237) <6C8BBCA3-C233-3941-ACF9-F06C5E6EE2E6> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
    0x7fff968f1000 -     0x7fff96aa1ff3  com.apple.QuartzCore (1.10 - 361.18) <ACA61D8F-9535-3141-8FDD-AC3EF6BF0806> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
    0x7fff96af6000 -     0x7fff96afdff7  libcompiler_rt.dylib (35) <BF8FC133-EE10-3DA6-9B90-92039E28678F> /usr/lib/system/libcompiler_rt.dylib
    0x7fff96b0b000 -     0x7fff96b42ffb  com.apple.LDAPFramework (2.4.28 - 194.5) <CAFB9695-000F-34EA-8DF5-09996929C26A> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
    0x7fff96b43000 -     0x7fff96dadff7  com.apple.security (7.0 - 57031.20.26) <6568520A-587D-3167-BB79-60CE6FEADC64> /System/Library/Frameworks/Security.framework/Versions/A/Security
    0x7fff96dae000 -     0x7fff96dcbfff  com.apple.MultitouchSupport.framework (263.9.1 - 263.9.1) <6ABD3AE2-DF6A-3AB2-994B-9C0FB42CE2B7> /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport
    0x7fff96dcc000 -     0x7fff96dd1ff7  libunwind.dylib (35.3) <BE7E51A0-B6EA-3A54-9CCA-9D88F683A6D6> /usr/lib/system/libunwind.dylib
    0x7fff96dd2000 -     0x7fff96ee1ff3  com.apple.desktopservices (1.9.3 - 1.9.3) <FEE11342-5BC4-37A7-8169-DA48BE17B9C9> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
    0x7fff9703d000 -     0x7fff9703efff  com.apple.TrustEvaluationAgent (2.0 - 25) <2D61A2C3-C83E-3A3F-8EC1-736DBEC250AB> /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent
    0x7fff97093000 -     0x7fff9709dff7  com.apple.NetAuth (5.2 - 5.2) <2BBD749A-8E18-35B8-8E48-A90347C1CCA7> /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth
    0x7fff970a4000 -     0x7fff970bbff7  libLinearAlgebra.dylib (1128) <E78CCBAA-A999-3B65-8EC9-06DB15E67C37> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLinearAlgebra.dylib
    0x7fff970bc000 -     0x7fff970f7fff  com.apple.Symbolication (1.4 - 56045) <D64571B1-4483-3FE2-BD67-A91360F79727> /System/Library/PrivateFrameworks/Symbolication.framework/Versions/A/Symbolication
    0x7fff97155000 -     0x7fff97157fff  libsystem_configuration.dylib (699.1.5) <20F3B077-179D-3CB0-A3C1-C8602D53B4DB> /usr/lib/system/libsystem_configuration.dylib
    0x7fff973da000 -     0x7fff97402fff  libRIP.A.dylib (779.11) <88434DA0-B6B8-304A-9DC0-41D3947E8734> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
    0x7fff977d2000 -     0x7fff97871e27  com.apple.AppleJPEG (1.0 - 1) <6627DDD9-A8FE-3968-B23A-B6A29AA3919A> /System/Library/PrivateFrameworks/AppleJPEG.framework/Versions/A/AppleJPEG
    0x7fff97876000 -     0x7fff9787efe7  libcldcpuengine.dylib (2.4.5) <0E9B5292-1EBC-379D-A706-83A27C05D742> /System/Library/Frameworks/OpenCL.framework/Versions/A/Libraries/libcldcpuengine.dylib
    0x7fff9787f000 -     0x7fff97a0dfff  libBLAS.dylib (1128) <497912C1-A98E-3281-BED7-E9C751552F61> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
    0x7fff97a90000 -     0x7fff97afeffb  com.apple.Heimdal (4.0 - 2.0) <7697A837-98B8-3BDB-A7D2-8ED4C9ABC510> /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal
    0x7fff97aff000 -     0x7fff97b1ffff  com.apple.IconServices (47.1 - 47.1) <E83DFE3B-6541-3736-96BB-26DC5D0100F1> /System/Library/PrivateFrameworks/IconServices.framework/Versions/A/IconServices
    0x7fff97b20000 -     0x7fff97b46fff  com.apple.ChunkingLibrary (2.1 - 163.6) <29D4CB95-42EF-34C6-8182-BDB6F7BB1E79> /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary
    0x7fff97b47000 -     0x7fff97b4dfff  com.apple.speech.recognition.framework (5.0.9 - 5.0.9) <BB2D573F-0A01-379F-A2BA-3C454EDCB111> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
    0x7fff97b4e000 -     0x7fff97c40ff7  libiconv.2.dylib (42) <2A06D02F-8B76-3864-8D96-64EF5B40BC6C> /usr/lib/libiconv.2.dylib
    0x7fff97c57000 -     0x7fff97c67ff7  libbsm.0.dylib (34) <A3A2E56C-2B65-37C7-B43A-A1F926E1A0BB> /usr/lib/libbsm.0.dylib
    0x7fff97c68000 -     0x7fff97e6246f  libobjc.A.dylib (647) <759E155D-BC42-3D4E-869B-6F57D477177C> /usr/lib/libobjc.A.dylib
    0x7fff97e93000 -     0x7fff97ea5ff7  libsasl2.2.dylib (194.1) <35371406-75EF-304A-A073-956C40373555> /usr/lib/libsasl2.2.dylib
    0x7fff97ea6000 -     0x7fff97eaefff  libsystem_platform.dylib (63) <64E34079-D712-3D66-9CE2-418624A5C040> /usr/lib/system/libsystem_platform.dylib
    0x7fff97ef2000 -     0x7fff97ef2ff7  libunc.dylib (29) <5676F7EA-C1DF-329F-B006-D2C3022B7D70> /usr/lib/system/libunc.dylib
    0x7fff97ef3000 -     0x7fff97ef5fff  com.apple.loginsupport (1.0 - 1) <DAAD7013-A19D-3858-BFF7-DE1DAF664401> /System/Library/PrivateFrameworks/login.framework/Versions/A/Frameworks/loginsupport.framework/Versions/A/loginsupport
    0x7fff97ef6000 -     0x7fff97f29fff  com.apple.MediaKit (16 - 757.2) <2912E5C2-085F-3FE2-8531-23B6E894B0F0> /System/Library/PrivateFrameworks/MediaKit.framework/Versions/A/MediaKit
    0x7fff97f2d000 -     0x7fff97f56ffb  libxslt.1.dylib (13) <AED1143F-B848-3E73-81ED-71356F25F084> /usr/lib/libxslt.1.dylib
    0x7fff97f57000 -     0x7fff97f59fff  com.apple.EFILogin (2.0 - 2) <3BA837D8-94F5-3240-9CF7-E40DC2808446> /System/Library/PrivateFrameworks/EFILogin.framework/Versions/A/EFILogin
    0x7fff97f5a000 -     0x7fff97f61ff7  libCGCMS.A.dylib (779.11) <5D33FF8C-AC74-3B7B-A602-4AA470FEAF79> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGCMS.A.dylib
    0x7fff97f62000 -     0x7fff97fc9ffb  com.apple.datadetectorscore (6.0 - 396.1.1) <9B0B3198-DDBE-36C0-8BA9-3EC89C725282> /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore
    0x7fff97fca000 -     0x7fff981afff7  libicucore.A.dylib (531.48) <3CD34752-B1F9-31D2-865D-B5B0F0BE3111> /usr/lib/libicucore.A.dylib
    0x7fff981b0000 -     0x7fff98217ff7  com.apple.framework.CoreWiFi (3.0 - 300.4) <19269C1D-EB29-384A-83F3-7DDDEB7D9DAD> /System/Library/PrivateFrameworks/CoreWiFi.framework/Versions/A/CoreWiFi
    0x7fff98250000 -     0x7fff982c4ffb  com.apple.securityfoundation (6.0 - 55126) <42589E18-D38C-3E25-B638-6E29740C224C> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
    0x7fff982f3000 -     0x7fff982fbff3  com.apple.CoreServices.FSEvents (1210.20.1 - 1210.20.1) <84F79D3E-7B5E-3C93-8479-35794A3F125E> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/FSEvents
    0x7fff982fc000 -     0x7fff982fffff  com.apple.xpc.ServiceManagement (1.0 - 1) <9E025823-660A-30C5-A568-223BD595B6F7> /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement
    0x7fff98318000 -     0x7fff9840afff  libxml2.2.dylib (26) <B834E7C8-EC3E-3382-BC5A-DA38DC4D720C> /usr/lib/libxml2.2.dylib
    0x7fff984b0000 -     0x7fff984b2ff7  libsystem_coreservices.dylib (9) <41B7C578-5A53-31C8-A96F-C73E030B0938> /usr/lib/system/libsystem_coreservices.dylib
    0x7fff984b3000 -     0x7fff984befff  libcommonCrypto.dylib (60061) <D381EBC6-69D8-31D3-8084-5A80A32CB748> /usr/lib/system/libcommonCrypto.dylib
    0x7fff984bf000 -     0x7fff984cefff  com.apple.LangAnalysis (1.7.0 - 1.7.0) <D1E527E4-C561-352F-9457-E8C50232793C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
    0x7fff987c1000 -     0x7fff988daffb  com.apple.CoreText (352.0 - 454.6) <D45790B0-E1A3-3C7D-8BA2-AB71D2CFA7FB> /System/Library/Frameworks/CoreText.framework/Versions/A/CoreText
    0x7fff98939000 -     0x7fff98953ff7  liblzma.5.dylib (7) <1D03E875-A7C0-3028-814C-3C27F7B7C079> /usr/lib/liblzma.5.dylib
    0x7fff98982000 -     0x7fff98a17ff7  com.apple.ColorSync (4.9.0 - 4.9.0) <9150C2B7-2E6E-3509-96EA-7B3F959F049E> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
    0x7fff98a32000 -     0x7fff98a38ff7  libsystem_networkextension.dylib (167.1.10) <29AB225B-D7FB-30ED-9600-65D44B9A9442> /usr/lib/system/libsystem_networkextension.dylib
    0x7fff98a39000 -     0x7fff98a69fff  com.apple.GSS (4.0 - 2.0) <A37BAF76-C262-3292-B82D-F004CAC5F333> /System/Library/Frameworks/GSS.framework/Versions/A/GSS
    0x7fff98c29000 -     0x7fff98c2dfff  libcache.dylib (69) <45E9A2E7-99C4-36B2-BEE3-0C4E11614AD1> /usr/lib/system/libcache.dylib
    0x7fff9907f000 -     0x7fff99090fff  libsystem_coretls.dylib (35.20.2) <6084A531-2523-39F8-B030-811FA1A32FB5> /usr/lib/system/libsystem_coretls.dylib
    0x7fff9925c000 -     0x7fff99272ff7  libsystem_asl.dylib (267) <F153AC5B-0542-356E-88C8-20A62CA704E2> /usr/lib/system/libsystem_asl.dylib
    0x7fff9928c000 -     0x7fff99299fff  libxar.1.dylib (255) <7CD69BB5-97BA-3858-8A8B-2F33F129E6E7> /usr/lib/libxar.1.dylib
    0x7fff9930d000 -     0x7fff99327ff7  com.apple.Kerberos (3.0 - 1) <7760E0C2-A222-3709-B2A6-B692D900CEB1> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
    0x7fff99334000 -     0x7fff99334fff  com.apple.CoreServices (62 - 62) <C69DA8A7-B536-34BF-A93F-1C170E2C6D58> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
    0x7fff993b0000 -     0x7fff99439ff7  com.apple.CoreSymbolication (3.1 - 57020.1) <85707039-0C8A-3409-B0B5-153431CC1841> /System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSymbolication
    0x7fff99442000 -     0x7fff99443fff  libsystem_secinit.dylib (18) <581DAD0F-6B63-3A48-B63B-917AF799ABAA> /usr/lib/system/libsystem_secinit.dylib
    0x7fff99490000 -     0x7fff995b4ff7  com.apple.LaunchServices (644.56 - 644.56) <20AABB1C-9319-3E4D-A024-51B0DD5FCD3B> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
    0x7fff99778000 -     0x7fff998a8fff  com.apple.UIFoundation (1.0 - 1) <466BDFA8-0B9F-3AB0-989D-F9779422926A> /System/Library/PrivateFrameworks/UIFoundation.framework/Versions/A/UIFoundation
    0x7fff998e3000 -     0x7fff998fdfff  com.apple.AppleVPAFramework (1.4.3 - 1.4.3) <AE62A92E-EDA7-37AD-8AF0-7912E9381A1F> /System/Library/PrivateFrameworks/AppleVPA.framework/Versions/A/AppleVPA
    0x7fff998fe000 -     0x7fff99b7cfff  com.apple.RawCamera.bundle (6.04 - 791) <B6139D16-972F-3BC4-A61B-2F226F7666DB> /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
    0x7fff99b92000 -     0x7fff99b92fff  com.apple.Accelerate.vecLib (3.10 - vecLib 3.10) <9D749502-A228-3BF1-B52F-A182DEEB2C4D> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
    0x7fff99c3e000 -     0x7fff99caaff3  com.apple.MMCS (1.3 - 327.5) <FC998246-ED60-334D-9E94-453F35EF9C78> /System/Library/PrivateFrameworks/MMCS.framework/Versions/A/MMCS
    0x7fff99cb6000 -     0x7fff99cb8fff  libquarantine.dylib (76.20.1) <7AF90041-2768-378A-925A-D83161863642> /usr/lib/system/libquarantine.dylib
    0x7fff99cea000 -     0x7fff99d06fff  com.apple.GenerationalStorage (2.0 - 209.11) <9FF8DD11-25FB-3047-A5BF-9415339B3EEC> /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/GenerationalStorage
    0x7fff99d07000 -     0x7fff99d24fff  libsystem_kernel.dylib (2782.20.48) <EAFD7BD0-0C30-3E7D-9528-F9916BA0167C> /usr/lib/system/libsystem_kernel.dylib
    0x7fff99dbd000 -     0x7fff99dbdfff  com.apple.Accelerate (1.10 - Accelerate 1.10) <2C8AF258-4F11-3BEC-A826-22D7199B3975> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
    0x7fff99de9000 -     0x7fff99e67fff  com.apple.CoreServices.OSServices (640.4 - 640.4) <20121A5E-7AB5-3624-8CF0-3562F97C8A95> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
    0x7fff99e87000 -     0x7fff99ef3fff  com.apple.framework.CoreWLAN (5.0 - 500.35.2) <5E228544-77A9-3AA5-8355-E8F6626F50E7> /System/Library/Frameworks/CoreWLAN.framework/Versions/A/CoreWLAN
    0x7fff99f35000 -     0x7fff99f3bfff  libsystem_trace.dylib (72.20.1) <840F5301-B55A-3078-90B9-FEFFD6CD741A> /usr/lib/system/libsystem_trace.dylib
    0x7fff9a073000 -     0x7fff9a076fff  com.apple.IOSurface (97.4 - 97.4) <AE11CFBC-4D46-30F3-BEEC-4C8131079391> /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface
    0x7fff9a077000 -     0x7fff9a078fff  libDiagnosticMessagesClient.dylib (100) <2EE8E436-5CDC-34C5-9959-5BA218D507FB> /usr/lib/libDiagnosticMessagesClient.dylib

External Modification Summary:
  Calls made by other processes targeting this process:
    task_for_pid: 3
    thread_create: 1
    thread_set_state: 0
  Calls made by this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by all processes on this machine:
    task_for_pid: 19939390
    thread_create: 69
    thread_set_state: 1036

VM Region Summary:
ReadOnly portion of Libraries: Total=185.6M resident=104.8M(56%) swapped_out_or_unallocated=80.8M(44%)
Writable regions: Total=187.8M written=16.3M(9%) resident=18.3M(10%) swapped_out=26.9M(14%) unallocated=169.5M(90%)

REGION TYPE                      VIRTUAL
===========                      =======
CG backing stores                  3396K
CG image                            160K
CG shared images                    336K
CoreAnimation                      13.1M
CoreImage                            16K
CoreUI image data                   152K
Foundation                            4K
Kernel Alloc Once                     8K
MALLOC                             65.8M
MALLOC (admin)                       32K
Memory Tag 242                       12K
Memory Tag 251                       20K
Memory Tag 255                    550.4M
Memory Tag 255 (reserved)            12K        reserved VM address space (unallocated)
OpenCL                               24K
STACK GUARD                        56.1M
Stack                              15.7M
VM_ALLOCATE                        83.1M
__DATA                             15.9M
__IMAGE                             528K
__LINKEDIT                         71.1M
__TEXT                            114.5M
__UNICODE                           552K
mapped file                        76.0M
shared memory                      9864K
===========                      =======
TOTAL                               1.1G
TOTAL, minus reserved VM space      1.1G


Model: MacBookPro11,1, BootROM MBP111.0138.B14, 2 processors, Intel Core i5, 2.6 GHz, 8 GB, SMC 2.16f68
Graphics: Intel Iris, Intel Iris, Built-In
Memory Module: BANK 0/DIMM0, 4 GB, DDR3, 1600 MHz, 0x80AD, 0x484D54343531533641465238412D50422020
Memory Module: BANK 1/DIMM0, 4 GB, DDR3, 1600 MHz, 0x80AD, 0x484D54343531533641465238412D50422020
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x112), Broadcom BCM43xx 1.0 (7.15.166.24.3)
Bluetooth: Version 4.3.4f4 15601, 3 services, 27 devices, 1 incoming serial ports
Network Service: Wi-Fi, AirPort, en0
Serial ATA Device: APPLE SSD SM0512F, 500,28 GB
USB Device: Internal Memory Card Reader
USB Device: BRCM20702 Hub
USB Device: Bluetooth USB Host Controller
USB Device: Apple Internal Keyboard / Trackpad
Thunderbolt Bus: MacBook Pro, Apple Inc., 17.2

Frida install doesn't work on Ubuntu 14.10

Installed with sudo easy_install frida. Running any frida command (like frida-trace) throws the following error:

Failed to load the Frida native extension: /home/joey/.python-eggs/frida-3.0.1-py2.7-linux-x86_64.egg-tmp/_frida.so: undefined symbol: PyUnicodeUCS2_AsUTF8String
Please ensure that the extension was compiled for Python 2.7.

Various stack overflow searches for related issues (like http://stackoverflow.com/questions/2584198/undefined-symbol-pyunicodeucs2-decode-whilst-trying-to-install-psycopg2) imply that frida was built with unicode-ucs2 while the default system python comes with ucs4.

Compiling from source yields binaries that do work (although I'm not sure if there is an easy way to install them systemwide)

pip install with python3.5 requires python3.5-dev under ubuntu/mint

A clean install using python3.5 under Mint 17.3 (Ubuntu 14.04) requires the python3.5-dev package. pip installs frida without complaint. Maybe either better error message or an update to the docs?

$ python3.5
Python 3.5.1 (default, Dec 18 2015, 00:00:00) 
[GCC 4.8.4] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import frida

***
Failed to load the Frida native extension: libpython3.5m.so.1.0: cannot open shared object file: No such file or directory
Please ensure that the extension was compiled for Python 3.x.
***

Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/local/lib/python3.5/dist-packages/frida/__init__.py", line 26, in <module>
    raise ex
  File "/usr/local/lib/python3.5/dist-packages/frida/__init__.py", line 6, in <module>
    import _frida
ImportError: libpython3.5m.so.1.0: cannot open shared object file: No such file or directory

Fixed by doing an apt-get install python3.5-dev.

Installing wrong version

uname -a
Darwin delicious 14.3.0 Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.20.48~5/RELEASE_X86_64 x86_64 i386 MacBookPro11,1 Darwin
$ sw_vers -productVersion
10.10.3

$ python <TAB>
python             python2-config     python2.7          python3-32         python3.4-32       python3.4m-config  pythonw2.6
python-config      python2.6          python2.7-config   python3-config     python3.4-config   pythonw            pythonw2.7
python2            python2.6-config   python3            python3.4          python3.4m         pythonw2


$ /usr/bin/easy_install --user frida
Searching for frida
Reading https://pypi.python.org/simple/frida/
Best match: frida 4.1.2
Downloading https://pypi.python.org/packages/2.7/f/frida/frida-4.1.2-py2.7-macosx-10.9-intel.egg#md5=1a60cbcf99da9f647efba778a060bd5e

Have to

sudo /usr/bin/easy_install https://pypi.python.org/packages/2.7/f/frida/frida-4.1.2-py2.7-macosx-10.10-intel.egg#md5=d0eb733b40e9ddf2ffd983b4aa005531

ImportError: libffi.so.5: cannot open shared object file: No such file or directory

Running the example.py gives me:
ImportError: libffi.so.5: cannot open shared object file: No such file or directory

I'm on Linux Ubuntu 12.04
I have libffi.so.6 installed, with no quick way to get .5 installed.

I installed frida via: sudo easy_install frida
$ pip freeze | grep frida
frida==1.0.5

Unable to attach on Mac OS

I am following instructions on http://www.frida.re/docs/installation/. When I try to attach Frida, I get this error:

return Session(self._impl.attach(self._pid_of(target)))
frida.PermissionDeniedError: unable to access process with pid 67947 from the current user account

What can be done about that?

Thanks,
Igor

s

frida-trace and frida-ps -U

Hi
I am new to Frida. I have followed the instructions to install frida-server on my rooted android phone.
I am running windows 10.
After I startup the frida-server, in the cmd, I was able to run adb devices - l. I saw my phone was connected to the laptop, However, when I tried to run frida-trace and frida-ps -U. I got the errors, frida-trace and frida-ps -U not found.
Did I miss something?
When frida-server was started, frida-trace and frida-ps were available? or do I need to do something to create those files?
thanks
Chun

frida 4.0 frida.attach time out

The following is the error information. And after frida.attach, the "test32" process will segment error.
Traceback (most recent call last):
File "example.py", line 2, in
session = frida.attach('test32')
File "/usr/local/lib/python2.7/dist-packages/frida-4.0.6-py2.7-linux-x86_64.egg/frida/init.py", line 54, in attach

File "/usr/local/lib/python2.7/dist-packages/frida-4.0.6-py2.7-linux-x86_64.egg/frida/core.py", line 70, in attach
frida.ProcessNotRespondingError: timed out while waiting for session to establish

SIGSEV on any frida- command

OSX 10.9.2
Python 2.7.6 (from brew)
frida 1.0.11

When attempting the sample 'cat' script, I get as segmentation fault:

➤ python
Python 2.7.6 (default, Apr  1 2014, 15:29:45)
[GCC 4.2.1 Compatible Apple LLVM 5.1 (clang-503.0.38)] on darwin
Type "help", "copyright", "credits" or "license" for more information.
>>> import frida
>>> p = frida.attach("cat")
[1]    93158 segmentation fault  python

When running in verbose mode, it seems like its right when the .so lib is loaded:

...
dlopen("/opt/homebrew/Cellar/python/2.7.6/Frameworks/Python.framework/Versions/2.7/lib/python2.7/lib-dynload/fcntl.so", 2);
import fcntl # dynamically loaded from /opt/homebrew/Cellar/python/2.7.6/Frameworks/Python.framework/Versions/2.7/lib/python2.7/lib-dynload/fcntl.so
# zipimport: zlib available
# zipimport: zlib available
dlopen("/Users/wuntee/.python-eggs/frida-1.0.11-py2.7-macosx-10.9-intel.egg-tmp/_frida.so", 2);
[1]    93205 segmentation fault  python -v

The only thing I can think is that the OSX kernel is forcing it to crash due to trying to ptrace a binary without the right privileges. In order to get GDB working, you have to sign the binary (https://sourceware.org/gdb/wiki/BuildingOnDarwin) but when not signed there is a 'kernel protection failure' message in GDB.

Anyone have an idea of how to further debug this?

Frida crashes app upon attachment on Android

Hello,

I've just tried Frida for the first time, but have some issues:

1. I'm on MacOS 10.12.6 using Python 2.7.10 and a x86 Android Emulator. I installed Frida using pip, as described in https://www.frida.re/docs/installation/
2. From there the Python binding seem to work, but I have no frida-ps, frida-trace, or any frida* anywhere. I therefore downloaded the releases of those from https://build.frida.re/frida/mac/bin/
   Those seem to be for Python 3 (which I then installed), but didn't work. This was due to the "sitepackage" being referenced. So I changed this. Now I could use "frida-ps -U", and correctly receive the process list.
3. So there were a bit of issues just getting started, which would be great to have fixed some how :)
4. From there I really wanted to get to work with Frida, and tried frida-trace (again after modifying the release script accordingly), but every Andoid App I try just crash right away: "Chrome keeps stopping":

$ frida-trace -U -i open com.android.chrome
Failed to attach: timed out while waiting for session to establish

adb logcat | grep chrome
=>

09-24 12:35:52.047 1597 5972 W ActivityManager: Ignoring remove of inactive process: ProcessRecord{8bacea7 0:com.android.chrome/u0a49}
09-24 12:35:53.112 1597 1608 I ActivityManager: START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.android.chrome/com.google.android.apps.chrome.Main bnds=[849,568][1056,846]} from uid 10022
09-24 12:35:53.135 1597 1735 I ActivityManager: Start proc 6043:com.android.chrome/u0a49 for activity com.android.chrome/com.google.android.apps.chrome.Main
09-24 12:35:53.732 1597 1852 W ActivityManager: Unable to start service Intent { act=com.google.firebase.INSTANCE_ID_EVENT pkg=com.android.chrome (has extras) } U=0: not found
09-24 12:35:53.760 6043 6043 I FA : adb shell setprop debug.firebase.analytics.app com.android.chrome
09-24 12:35:54.003 1597 2309 I ActivityManager: START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x14002000 cmp=com.android.chrome/org.chromium.chrome.browser.ChromeTabbedActivity bnds=[849,568][1056,846] (has extras)} from uid 10049
09-24 12:35:54.652 6043 6064 W cr_ChildProcLauncher: Create a new ChildConnectionAllocator with package name = com.android.chrome, inSandbox = true
09-24 12:35:54.698 1597 1608 I ActivityManager: Start proc 6071:com.android.chrome:sandboxed_process0/u0i6 for webview_service com.android.chrome/org.chromium.content.app.SandboxedProcessService0
09-24 12:35:54.997 1597 1621 I ActivityManager: Displayed com.android.chrome/org.chromium.chrome.browser.ChromeTabbedActivity: +915ms (total +1s864ms)
09-24 12:35:55.210 1597 1854 I ActivityManager: Start proc 6112:com.android.chrome:privileged_process0/u0a49 for service com.android.chrome/org.chromium.content.app.PrivilegedProcessService0
09-24 12:35:58.003 2359 4244 I Icing : IndexChimeraService.getServiceInterface callingPackage=com.android.chrome componentName=null serviceId=36
09-24 12:35:58.094 6043 6167 E cr_Icing: Failed to clear legacy corpus. Status Code: 8 Message: No CorpusConfig for history of com.android.chrome
09-24 12:36:05.081 6043 6176 F libc : Fatal signal 31 (SIGSYS), code 1 in tid 6176 (.android.chrome)
09-24 12:36:05.089 6178 6176 F libc : Fatal signal 31 (SIGSYS), code 1 in tid 6178 (.android.chrome)
09-24 12:36:05.111 6184 6184 F DEBUG : pid: 6178, tid: 6178, name: .android.chrome >>> com.android.chrome <<<
09-24 12:36:05.164 6185 6185 F DEBUG : pid: 6043, tid: 6176, name: .android.chrome >>> com.android.chrome <<<
09-24 12:36:05.673 1597 6195 W ActivityManager: Force finishing activity com.android.chrome/org.chromium.chrome.browser.ChromeTabbedActivity
09-24 12:36:05.685 1597 1613 I ActivityManager: Showing crash dialog for package com.android.chrome u0
09-24 12:36:06.177 1597 1612 W ActivityManager: Activity pause timeout for ActivityRecord{59c825 u0 com.android.chrome/org.chromium.chrome.browser.ChromeTabbedActivity t32 f}
09-24 12:36:17.003 1597 1612 W ActivityManager: Activity destroy timeout for ActivityRecord{59c825 u0 com.android.chrome/org.chromium.chrome.browser.ChromeTabbedActivity t32 f}

And looking at the SIGSYS31:

09-24 12:37:45.458 6354 6372 D EGL_emulation: eglMakeCurrent: 0x9fa7ccc0: ver 2 0 (tinfo 0x9f4a4860)
09-24 12:37:45.807 6287 6305 I FA : Tag Manager is not found and thus will not be used
09-24 12:37:47.164 1597 1611 E memtrack: Couldn't load memtrack module
09-24 12:37:47.164 1597 1611 W android.os.Debug: failed to get memory consumption info: -1
09-24 12:37:47.176 1597 1611 E memtrack: Couldn't load memtrack module
09-24 12:37:47.176 1597 1611 W android.os.Debug: failed to get memory consumption info: -1
09-24 12:37:47.185 1597 1611 E memtrack: Couldn't load memtrack module
09-24 12:37:47.185 1597 1611 W android.os.Debug: failed to get memory consumption info: -1
09-24 12:37:53.125 2217 3547 I ClearcutLoggerApiImpl: disconnect managed GoogleApiClient
09-24 12:37:53.614 1597 1611 E memtrack: Couldn't load memtrack module
09-24 12:37:53.614 1597 1611 W android.os.Debug: failed to get memory consumption info: -1
09-24 12:37:53.620 1597 1615 E BatteryStatsService: modem info is invalid: ModemActivityInfo{ mTimestamp=0 mSleepTimeMs=0 mIdleTimeMs=0 mTxTimeMs[]=[0, 0, 0, 0, 0] mRxTimeMs=0 mEnergyUsed=0}
09-24 12:37:54.607 2162 6413 I EventLogSendingHelper: Sending log events.
09-24 12:37:56.912 6287 6416 F libc : Fatal signal 31 (SIGSYS), code 1 in tid 6416 (.android.chrome)
09-24 12:37:56.919 6420 6416 F libc : Fatal signal 31 (SIGSYS), code 1 in tid 6420 (.android.chrome)
09-24 12:37:56.930 6425 6425 W crash_dump32: failed to attach to thread 6287: Operation not permitted
09-24 12:37:56.939 6425 6425 I crash_dump32: obtaining output fd from tombstoned
09-24 12:37:56.939 1494 1494 I /system/bin/tombstoned: received crash request for pid 6287
09-24 12:37:56.940 6425 6425 I crash_dump32: performing dump of process 6287 (target tid = 6416)
09-24 12:37:56.941 6425 6425 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
09-24 12:37:56.941 6425 6425 F DEBUG : Build fingerprint: 'google/sdk_gphone_x86/generic_x86:8.0.0/OSR1.170901.008/4328566:userdebug/dev-keys'
09-24 12:37:56.941 6425 6425 F DEBUG : Revision: '0'
09-24 12:37:56.941 6425 6425 F DEBUG : ABI: 'x86'
09-24 12:37:56.941 6425 6425 F DEBUG : pid: 6287, tid: 6416, name: .android.chrome >>> com.android.chrome <<<
09-24 12:37:56.941 6425 6425 F DEBUG : signal 31 (SIGSYS), code 1 (SYS_SECCOMP), fault addr --------
09-24 12:37:56.941 6425 6425 F DEBUG : Cause: seccomp prevented call to disallowed x86 system call 7
09-24 12:37:56.942 6425 6425 F DEBUG : eax 00000007 ebx 00001914 ecx a41879fc edx 40000000
09-24 12:37:56.942 6425 6425 F DEBUG : esi 00001914 edi a41879fc
09-24 12:37:56.942 6425 6425 F DEBUG : xcs 00000073 xds 0000007b xes 0000007b xfs 0000003b xss 0000007b
09-24 12:37:56.942 6425 6425 F DEBUG : eip 9824cb4e ebp a4278000 esp a41879dc flags 00200282
09-24 12:37:56.943 6425 6425 F DEBUG :
09-24 12:37:56.943 6425 6425 F DEBUG : backtrace:
09-24 12:37:56.943 6425 6425 F DEBUG : #00 pc 03848b4e /system/app/Chrome/Chrome.apk (offset 0x1053000)
09-24 12:37:56.943 6425 6425 F DEBUG : #1 pc 00000003
09-24 12:37:56.948 6426 6426 I crash_dump32: obtaining output fd from tombstoned
09-24 12:37:56.948 1494 1494 I /system/bin/tombstoned: received crash request for pid 6420
09-24 12:37:56.948 1494 1494 I /system/bin/tombstoned: enqueueing crash request for pid 6420
09-24 12:37:57.358 1494 1494 E /system/bin/tombstoned: Tombstone written to: /data/tombstones//tombstone_05
09-24 12:37:57.358 6426 6426 I crash_dump32: performing dump of process 6420 (target tid = 6420)
09-24 12:37:57.358 6426 6426 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
09-24 12:37:57.358 6426 6426 F DEBUG : Build fingerprint: 'google/sdk_gphone_x86/generic_x86:8.0.0/OSR1.170901.008/4328566:userdebug/dev-keys'
09-24 12:37:57.358 6426 6426 F DEBUG : Revision: '0'
09-24 12:37:57.358 6426 6426 F DEBUG : ABI: 'x86'
09-24 12:37:57.358 6426 6426 F DEBUG : pid: 6420, tid: 6420, name: .android.chrome >>> com.android.chrome <<<
09-24 12:37:57.359 6426 6426 F DEBUG : signal 31 (SIGSYS), code 1 (SYS_SECCOMP), fault addr --------
09-24 12:37:57.359 6426 6426 F DEBUG : Cause: seccomp prevented call to disallowed x86 system call 7
09-24 12:37:57.359 6426 6426 F DEBUG : eax 00000007 ebx 0000188f ecx 00000000 edx 40000000
09-24 12:37:57.359 6426 6426 F DEBUG : esi a427bd58 edi 00000000
09-24 12:37:57.359 6426 6426 F DEBUG : xcs 00000073 xds 0000007b xes 0000007b xfs 0000003b xss 0000007b
09-24 12:37:57.359 6426 6426 F DEBUG : eip 982506d2 ebp 0000188f esp a427bbfc flags 00200246
09-24 12:37:57.359 6426 6426 F DEBUG :
09-24 12:37:57.359 6426 6426 F DEBUG : backtrace:
09-24 12:37:57.359 6426 6426 F DEBUG : #00 pc 0384c6d2 /system/app/Chrome/Chrome.apk (offset 0x1053000)

Since I have trouble just getting the basic stuff to work, then I suspect something obvious. But perhaps someone could help point me in the right direction?

Thanks,
Asger

Failed to attach: the connection is closed (iOS)

I am trying to use Frida on iOS but I can't attach to process.
frida-trace -U -i "CCCryptorCreate*" Twitter
gives following error
Failed to attach: the connection is closed
I can list the processes,frida-ps -U is working.
Here is my setup I even tried to attach Twitter but failed. It is not related to process but Frida I guess

OS: macOS Sierra
iOS 9.3.3
Local Frida version: 7.3.6
iOS Frida version: 7.3.6

EDIT: It seems there was not enough space during installation of Frida. I removed couple of packages, then removed Frida and installed again. This time it worked. Is it possible for you to add some kind of script at the beginning of installation to check free space etc? Strange thing is I didn't see any error message during first installation. You may close the issue.

Cannot get it to work on Win XP SP3

Hi,

I have two machines I'm (trying) to use Frida with:

• Windows 7 x64 (fully patched), Python 2.7.6 32 bit
• Windows XP SP3 x32 (pristine install, no patches, not connected to the Internet), Python 2.7.6 32 bit

I have build a Frida package on my Win7 machine using the "Win32 Release" target successfully. Then I took the build output from the python27\site-packages and dropped it in each respective site-packages of the Python lib folder for each machine.

On the Win7 machine, the simple notepad.exe attach and enumerate modules test works fine
On the WinXP machine it fails with "SystemError: ShellExecuteExW failed: 193" on line 66 of frida\core.py. A quick Internet research showed that this error means that "it is not a valid Win32 application". This must be some sort of incompatibility as the main _frida.pyd file is correctly identified as a PE32 DLL by the Unix "file" utility.
I have also tried with the prebuilt packages that you offer on the site but the result is the same. Please see the attached screenshots for detail.

Is this a bug, or am I forgetting something / doing something stupid? Can you please let me know how I can further debug this?

Thanks!

Windows 7:

Windows XP:

frida run error:_frida.so: undefined symbol: PyUnicodeUCS2_AsUTF8String

I run the python example in ubuntu 14.04. the following is the error. I don't know how to solve it. Can you give me a hand?

---

Failed to load the Frida native extension: /home/ling/.python-eggs/frida-3.0.1-py2.7-linux-x86_64.egg-tmp/_frida.so: undefined symbol: PyUnicodeUCS2_AsUTF8String
Please ensure that the extension was compiled for Python 2.7.

---

Traceback (most recent call last):
File "../../PycharmProjects/untitled/frida_test/example.py", line 2, in
session = frida.attach('cat')
File "/usr/local/lib/python2.7/dist-packages/frida-3.0.1-py2.7-linux-x86_64.egg/frida/init.py", line 16, in attach
File "/usr/local/lib/python2.7/dist-packages/frida-3.0.1-py2.7-linux-x86_64.egg/frida/init.py", line 84, in get_device_manager
ImportError: /home/ling/.python-eggs/frida-3.0.1-py2.7-linux-x86_64.egg-tmp/_frida.so: undefined symbol: PyUnicodeUCS2_AsUTF8String

Quick-start guide code errors

• frida-trace code is not auto reloading with given commands on quickstart page
• Modified onEntercode in recvfrom.js file raise error:

{
    u'columnNumber': 41,
    u'lineNumber': 28,
    u'type': u'error',
    u'description': u'Error: access violation accessing 0x0',
    u'stack':
    u'Error: access violation accessing 0x0
        at [object Object].onEnter (eval at parseHandler (tracer.js:83:25), <anonymous>:28:41)
        at invokeCallback (tracer.js:31:26)
        at [object Object].Interceptor.attach.onEnter (tracer.js:37:25)'
}

Failed to load the Frida native extension: libpython3.6m.so.1.0

frida --version

***
Failed to load the Frida native extension: libpython3.6m.so.1.0: cannot open shared object file: No such file or directory
Please ensure that the extension was compiled for Python 3.x.
***

Traceback (most recent call last):
  File "/usr/local/bin/frida", line 7, in <module>
    from frida.repl import main
  File "/usr/local/lib/python3.5/dist-packages/frida/__init__.py", line 26, in <module>
    raise ex
  File "/usr/local/lib/python3.5/dist-packages/frida/__init__.py", line 6, in <module>
    import _frida
ImportError: libpython3.6m.so.1.0: cannot open shared object file: No such file or directory
root@hendrawan-vb:~# apt install python3.5-dev
Reading package lists... Done
Building dependency tree
Reading state information... Done
python3.5-dev is already the newest version (3.5.2-2ubuntu0~16.04.1).
python3.5-dev set to manually installed.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

installed frida using pip3 install frida

Error

Hi have installed Frida https://www.frida.re/docs/android/

At startup error

Screenset https://cloud.mail.ru/public/9MgX/QdCEuShco

DLL Error for windows

Hi,

I just installed the new version 7.1.8 and tried to run a frida-ps -U:

C:\WINDOWS\system32>frida-ps -U

***
Failed to load the Frida native extension: DLL load failed: The specified module could not be found.
Please ensure that the extension was compiled for Python 3.x.
***

Traceback (most recent call last):
  File "C:\Python34\Scripts\frida-ps-script.py", line 9, in <module> load_entry_point('frida==7.1.8', 'console_scripts', 'frida-ps')()
  File "c:\python34\lib\site-packages\pkg_resources\__init__.py", line 558, in load_entry_point return get_distribution(dist).load_entry_point(group, name)
  File "c:\python34\lib\site-packages\pkg_resources\__init__.py", line 2682, in load_entry_point return ep.load()
  File "c:\python34\lib\site-packages\pkg_resources\__init__.py", line 2355, in load return self.resolve()
  File "c:\python34\lib\site-packages\pkg_resources\__init__.py", line 2361, in resolve module = __import__(self.module_name, fromlist=['__name__'], level=0)
  File "c:\python34\lib\site-packages\frida\__init__.py", line 26, in <module> raise ex
  File "c:\python34\lib\site-packages\frida\__init__.py", line 6, in <module> import _frida
ImportError: DLL load failed: The specified module could not be found.

I have both python34 and python27 installed as required (C:\python34 and C:\python27).
Paths added to the environment variable (+ \Scripts).

Issue installing frida on windows

Hi,

I'm trying to install frida.
I followed instructions and run the "pip install frida" in sudo mode (run 'cmd' as admin) and got this error message:

"There is no item named '_frida.pyd' in the archive"

Here is the full log:

C:\WINDOWS\system32>pip install frida
Collecting frida
  Using cached frida-7.1.6.zip
Requirement already satisfied (use --upgrade to upgrade): colorama>=0.2.7 in c:\program files\python34\lib\site-packages (from frida)
Requirement already satisfied (use --upgrade to upgrade): prompt-toolkit>=0.57 in c:\program files\python34\lib\site-packages (from frida)
Requirement already satisfied (use --upgrade to upgrade): pygments>=2.0.2 in c:\program files\python34\lib\site-packages (from frida)
Requirement already satisfied (use --upgrade to upgrade): wcwidth in c:\program files\python34\lib\site-packages (from prompt-toolkit>=0.57->frida)
Requirement already satisfied (use --upgrade to upgrade): six>=1.9.0 in c:\program files\python34\lib\site-packages (from prompt-toolkit>=0.57->frida)
Installing collected packages: frida
  Running setup.py install for frida ... error
    Complete output from command "c:\program files\python34\python.exe" -u -c "import setuptools, tokenize;__file__='C:\\Users\\Kermit\\AppData\\Local\\Temp\\pip-build-kopnyw58\\frida\\setup.py';exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" install --record C:\Users\Kermit\AppData\Local\Temp\pip-7l3e3k_6-record\install-record.txt --single-version-externally-managed --compile:
    running install
    running build
    running build_py
    creating build
    creating build\lib.win-amd64-3.4
    creating build\lib.win-amd64-3.4\frida
    copying frida\application.py -> build\lib.win-amd64-3.4\frida
    copying frida\core.py -> build\lib.win-amd64-3.4\frida
    copying frida\discoverer.py -> build\lib.win-amd64-3.4\frida
    copying frida\lsd.py -> build\lib.win-amd64-3.4\frida
    copying frida\ps.py -> build\lib.win-amd64-3.4\frida
    copying frida\repl.py -> build\lib.win-amd64-3.4\frida
    copying frida\tracer.py -> build\lib.win-amd64-3.4\frida
    copying frida\__init__.py -> build\lib.win-amd64-3.4\frida
    running build_ext
    querying pypi for available prebuilds
    downloading prebuilt extension from https://pypi.python.org/packages/00/8c/3b3d3887b5b530b696c29d812b367743957034e0d36299b49dad3bf405ac/frida-7.1.6-py3.5-win-amd64.egg
    extracting prebuilt extension
    Traceback (most recent call last):
      File "<string>", line 1, in <module>
      File "C:\Users\Kermit\AppData\Local\Temp\pip-build-kopnyw58\frida\setup.py", line 157, in <module>
        'build_ext': FridaPrebuiltExt
      File "c:\program files\python34\lib\distutils\core.py", line 148, in setup
        dist.run_commands()
      File "c:\program files\python34\lib\distutils\dist.py", line 955, in run_commands
        self.run_command(cmd)
      File "c:\program files\python34\lib\distutils\dist.py", line 974, in run_command
        cmd_obj.run()
      File "c:\program files\python34\lib\site-packages\setuptools\command\install.py", line 61, in run
        return orig.install.run(self)
      File "c:\program files\python34\lib\distutils\command\install.py", line 539, in run
        self.run_command('build')
      File "c:\program files\python34\lib\distutils\cmd.py", line 313, in run_command
        self.distribution.run_command(command)
      File "c:\program files\python34\lib\distutils\dist.py", line 974, in run_command
        cmd_obj.run()
      File "c:\program files\python34\lib\distutils\command\build.py", line 126, in run
        self.run_command(cmd_name)
      File "c:\program files\python34\lib\distutils\cmd.py", line 313, in run_command
        self.distribution.run_command(command)
      File "c:\program files\python34\lib\distutils\dist.py", line 974, in run_command
        cmd_obj.run()
      File "c:\program files\python34\lib\site-packages\setuptools\command\build_ext.py", line 49, in run
        _build_ext.run(self)
      File "c:\program files\python34\lib\distutils\command\build_ext.py", line 339, in run
        self.build_extensions()
      File "c:\program files\python34\lib\distutils\command\build_ext.py", line 448, in build_extensions
        self.build_extension(ext)
      File "C:\Users\Kermit\AppData\Local\Temp\pip-build-kopnyw58\frida\setup.py", line 106, in build_extension
        egg_zip.extract(os.path.basename(target), target_dir)
      File "c:\program files\python34\lib\zipfile.py", line 1223, in extract
        member = self.getinfo(member)
      File "c:\program files\python34\lib\zipfile.py", line 1084, in getinfo
        'There is no item named %r in the archive' % name)
    KeyError: "There is no item named '_frida.pyd' in the archive"

    ----------------------------------------
Command ""c:\program files\python34\python.exe" -u -c "import setuptools, tokenize;__file__='C:\\Users\\Kermit\\AppData\\Local\\Temp\\pip-build-kopnyw58\\frida\\setup.py';exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" install --record C:\Users\Kermit\AppData\Local\Temp\pip-7l3e3k_6-record\install-record.txt --single-version-externally-managed --compile" failed with error code 1 in C:\Users\Kermit\AppData\Local\Temp\pip-build-kopnyw58\frida\

Does anyone has any idea ?

Error 404 when trying to install

jigsaw:[]$ which python
/Library/Frameworks/Python.framework/Versions/2.7/bin/python
jigsaw:[]$ which easy_install
/Library/Frameworks/Python.framework/Versions/2.7/bin/easy_install
jigsaw:[~]$ sudo easy_install frida
Password:
Searching for frida
Reading https://pypi.python.org/simple/frida/
Best match: frida 5.0.8
Downloading https://pypi.python.org/packages/source/f/frida/frida-5.0.8.zip#md5=1887f14410fa4b8f40e7d0ca81e41264
Processing frida-5.0.8.zip
Writing /tmp/easy_install-lsQTR3/frida-5.0.8/setup.cfg
Running frida-5.0.8/setup.py -q bdist_egg --dist-dir /tmp/easy_install-lsQTR3/frida-5.0.8/egg-dist-tmp-ft7fge
downloading prebuilt extension from https://pypi.python.org/packages/2.7/f/frida/frida-5.0.8-py2.7-macosx-10.10-intel.egg
error: Setup script exited with error: HTTP Error 404: Not Found

Code/explanation mismatch

Over on your site, at the quickstart section (http://www.frida.re/docs/quickstart/), you posted the first snippet:

~ $ sudo pip install frida
~ $ frida-trace -i "recv*" -i "read*" Twitter
recv: Auto-generated handler: …/recv.js
# (snip)
recvfrom: Auto-generated handler: …/recvfrom.js
Started tracing 21 functions. Press Ctrl+C to stop.
    39 ms   recv()
   112 ms   recvfrom()
   128 ms   recvfrom()
   129 ms   recvfrom()

and proceeded to explain how Frida is injecting into Skype but I don't see any commands related to working with the Skype process. Am I missing something or did you update the snippet and forget to update the explanation?

Failed to attach: failed to execute child process “/data/local/tmp/re.frida.server/frida-helper-32” when run "frida-trace -i "open" -U com.android.chrome"

Hi, I have an issue with Frida.

$ frida-trace -i "open" -U com.android.chrome
Attaching...
Failed to attach: failed to execute child process “/data/local/tmp/re.frida.server/frida-helper-32” (Permission denied)

frida-server path is /data/local/tmp
Using Windows7 python2.7.13 and Galaxy S3 with Android 4.2.2 KingRoot

I list the file

root@android:/data/local/tmp/re.frida.server # ll
-rwxr-xr-x root     root     11942668 2017-06-09 18:01 frida-agent-32.so
-rwx------ root     root      1836268 2017-06-09 18:01 frida-helper-32

and then i changed the permission

chmod 777 frida-helper-32

but it does not work.

Would appreciate your help! :)

How to install frida on wondows

The tutorial to setup is for linux distributions and not for windows please help

Failed to attach: unexpectedly timed out while waiting for FIFO to establish

I follow this page:http://www.frida.re/docs/android/
When i input 'frida-ps -R' I get the pid and NAME ,which is correct and what I wanted.

But next step, 'frida-trace -R -i open com.****'
I get the error result:Failed to attach: unexpectedly timed out while waiting for FIFO to establish

I don't know why :(