MacOS and iOS Internals, Volume I: User Mode (v1.3)

MacOS and iOS Internals, Volume I: User Mode (v1.3)

In this first volume of the "Mac OS and *OS Internals" trilogy, Jonathan Levin takes on the user mode components of Apple's operating systems. Starting with an introduction as to their layered architecture, touring private frameworks and libraries, and then delving into the internals of applications, process, thread and memory management, Mach messaging, launchd and XPC internals, and wrapping up with advanced debugging and tracing techniques using the most powerful APIs that were hitherto unknown and unused outside Apple's own applications. As with the other books in this series, the approach taken is that of deep reverse engineering, with plenty of hands-on examples, illustrations, pointers to Apple's open sources (when available) and decompilation of code (when not). The book's companion website (NewOSXBook.com) is full of tools, samples and other bonus material for this book. This volume (v1.2) has been revised and expanded with over 50 more pages for Darwin 18 (MacOS 14/iOS12), with new sections about the UI and threading policies, and a brand new chapter on networking internals (including NECP, PF_SYSTEM/NDRV sockets, and Skywalk - never before documented before this work).