https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12582

--- Comment #5 from Gerald Combs <ger...@wireshark.org> ---
If I copy the "open" command to /tmp (so as to avoid System Integrity
Protection) and run

    sudo dtruss -s /tmp/open run/Wireshark.app

It looks like "open" uses Launch Services to open the application bundle
instead of simply forking+execing Wireshark.app/Contents/MacOS/Wireshark:

workq_kernreturn(0x20, 0x0, 0x1)         = 0 0

              libsystem_kernel.dylib`__workq_kernreturn+0xa
              libdispatch.dylib`_dispatch_queue_wakeup_global_slow+0x3c
              libdispatch.dylib`_dispatch_queue_wakeup_with_qos_slow+0x7e
              libxpc.dylib`xpc_connection_resume+0x98
              SharedFileList`-[SFLListManager _connection]+0x1d8
              SharedFileList`__37-[SFLListManager
listWithIdentifier:]_block_invoke+0x175
              libdispatch.dylib`_dispatch_client_callout+0x8
              libdispatch.dylib`_dispatch_barrier_sync_f_invoke+0x4a
              SharedFileList`-[SFLListManager listWithIdentifier:]+0x108
              SharedFileList`LSSharedFileListCreate+0xf7
              LaunchServices`_LSGetRecentItemsSharedList(short, unsigned
int**)+0x57
              LaunchServices`_LSGetRecentItemCount+0x19
              LaunchServices`_LSOpenItemsWithHandler_CFDictionaryApplier(void
const*, void const*, void*)+0x1748
              CoreFoundation`__CFDictionaryApplyFunction_block_invoke+0x16
              CoreFoundation`CFBasicHashApply+0x80
              CoreFoundation`CFDictionaryApplyFunction+0xba
              LaunchServices`_LSOpenStuffCallLocal+0x163c
              LaunchServices`_LSOpenStuff+0x7e
              LaunchServices`_LSOpenURLsWithRole_Common(__CFArray const*,
unsigned int, AEKeyDesc const*, LSApplicationParameters_V1 const*,
ProcessSerialNumber*, long, __CFURL const**)+0x183
              LaunchServices`LSOpenURLsWithRole+0x20

It would be nice to know what LSOpenURLsWithRole does that fork+exec doesn't.

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to