Hello
I am writing an application for MacOs. I am trying to upload application to the app store.
Application include a GUI ( written in swiftUI ) , 2 binary executable files ( written in c++) and multiple dylibs and frameworks.
We enable sandbox for xcode project (GUI).
Our app perfectly run in local system with no signing. But when I sign app, application not running.
language
Date/Time: 2021-05-12 20:51:28.939 +0430
OS Version: Mac OS X 10.15.3 (19D76)
Report Version: 12
Anonymous UUID: 834384F2-5954-0185-35C5-B2AF77021892
Sleep/Wake UUID: 00BA8D61-4945-41C9-9DA4-96417724397B
Time Awake Since Boot: 110000 seconds
System Integrity Protection: enabled
Crashed Thread: 0
Exception Type: EXC_CRASH (Code Signature Invalid)
Exception Codes: 0x0000000000000000, 0x0000000000000000
Exception Note: EXC_CORPSE_NOTIFY
Termination Reason: Namespace CODESIGNING, Code 0x1
kernel messages:
VM Regions Near 0 (cr2):-
__TEXT 0000000103003000-00000001034a1000 [ 4728K] r-x/r-x SM=COW
Thread 0 Crashed:
0 0x000000010f314000 _dyld_start + 0
Thread 0 crashed with X86 Thread State (64-bit):
rax: 0x0000000000000000 rbx: 0x0000000000000000 rcx: 0x0000000000000000 rdx: 0x0000000000000000
rdi: 0x0000000000000000 rsi: 0x0000000000000000 rbp: 0x0000000000000000 rsp: 0x00007ffeecbfcba8
r8: 0x0000000000000000 r9: 0x0000000000000000 r10: 0x0000000000000000 r11: 0x0000000000000000
r12: 0x0000000000000000 r13: 0x0000000000000000 r14: 0x0000000000000000 r15: 0x0000000000000000
rip: 0x000000010f314000 rfl: 0x0000000000000200 cr2: 0x0000000000000000
Logical CPU: 0
Error Code: 0x00000000
Trap Number: 0
And when I archive the app for uploading to app store, it is failing Archive validation for the app store with the message "App sandbox not enabled. The following executables must include the "com.apple.security.app-sandbox" entitlement with a Boolean value of true in the entitlements property list".
One of binary executable compiled with "Unix makefile" compiler, and other one with xcode.
I tried to enable sandbox for binary executable in xcode. But didn't work after I enabled sandbox.
error when runs in terminal:
language
zsh: illegal hardware instruction
error when runs in xcode:
language
libsystem_secinit.dylib`_libsecinit_appsandbox.cold.5:
0x7fff70e300e8 +0: pushq %rbp
0x7fff70e300e9 +1: movq %rsp, %rbp
0x7fff70e300ec +4: pushq %r14
0x7fff70e300ee +6: pushq %rbx
0x7fff70e300ef +7: movq %rdx, %r14
0x7fff70e300f2 +10: movq %rsi, %r9
0x7fff70e300f5 +13: movq %rdi, %rbx
0x7fff70e300f8 +16: leaq 0xc41(%rip), %r8 ; "%s"
0x7fff70e300ff +23: movl $0x800, %esi ; imm = 0x800
0x7fff70e30104 +28: movl $0x800, %ecx ; imm = 0x800
0x7fff70e30109 +33: movl $0x0, %edx
0x7fff70e3010e +38: xorl %eax, %eax
0x7fff70e30110 +40: callq 0x7fff70e30396 ; symbol stub for: __snprintf_chk
0x7fff70e30115 +45: movq %r14, 0x29c169d4(%rip) ; gCRAnnotations + 16
0x7fff70e3011c +52: movq %rbx, 0x29c169c5(%rip) ; gCRAnnotations + 8 0x7fff70e30123 +59: ud2
Thread 1: EXC_BAD_INSTRUCTION (code=EXC_I386_INVOP, subcode=0x0)
As I understand, sandbox isn't compatible with binary executable files and it is for applications.
Question 1. What is the best signing options for MacOs paid application with in-app purchase?
Question 2. What are possible scenarios for getting these errors?
Question 3. Am I missed some other options?
Question 4. Do I need to enable sandbox for binary executable files?
Question 5. How could I manage to upload the app to the app store?
Thanks in advance