Skip to content

Conversation

@kwalberg
Copy link
Contributor

@kwalberg kwalberg commented Oct 19, 2025

Fix for #154. parsed_obj.functions is empty for MachO .o files due (I think) to the absence of the LC_FUNCTION_STARTS load command. In these cases, the functions list can be populated based on the list of symbols with category LOCAL.

Attached the SBOM for libssl-lib-ssl_lib.o (part of libssl.a) as a sample:
libssl-sbom.json

@kwalberg kwalberg changed the title fix: pull MachO .o function info from symbol table fix: missing function info for MachO .o files Oct 19, 2025
Copy link
Member

@prabhu prabhu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you so much! I am learning more about MachO and ARM64 on a daily basis. Also give the new --disassemble option a try.

@prabhu prabhu merged commit bf1d63a into owasp-dep-scan:main Oct 20, 2025
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants