[MacPorts] #70882: Linking errors after installing ffmpeg, ffmpeg7

MacPorts noreply at macports.org
Sun Oct 6 08:10:15 UTC 2024


#70882: Linking errors after installing ffmpeg, ffmpeg7
------------------------------+----------------------
  Reporter:  RivetBenoit      |      Owner:  mascguy
      Type:  defect           |     Status:  assigned
  Priority:  Normal           |  Milestone:
 Component:  ports            |    Version:  2.10.1
Resolution:                   |   Keywords:  sequoia
      Port:  ffmpeg, ffmpeg7  |
------------------------------+----------------------

Comment (by ryandesign):

 One possible explanation for this incorrect CoreImage file on your disk
 could be malware. It could be a proxy dylib whose purpose is to be a man-
 in-the-middle, thereby gaining access to the memory space of any program
 that links with CoreImage. In this case it does not seem like a
 particularly successful attempt, given the incorrect version number and
 the resulting error message that leads us to it. If this is malware, it
 may be indiscriminately replacing a whole variety of system frameworks and
 libraries with proxy dylibs, with the malware authors not realizing that
 some libraries have compatibility versions higher than 1.0.0.

 Normally, System Integrity Protection prevents you or any software not
 from Apple from modifying system locations, but OCLP disables some of
 SIP's safeguards. On my 2011 MacBook Pro with macOS 15 installed using
 OCLP I tried creating
 /System/Library/Frameworks/CoreImage.framework/Versions/A/CoreImage and
 SIP correctly prevented it due to being a read-only filesystem. But I know
 that OCLP requires different fixes on different models and maybe on your
 models it has disabled so much of SIP that writing to system locations is
 allowed. Or you could have separately disabled the remaining SIP
 safeguards to make this possible.

 If you attach the incorrect CoreImage file to this ticket we could try to
 determine whether it is a legitimate Apple framework or something else.

-- 
Ticket URL: <https://trac.macports.org/ticket/70882#comment:10>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list