是什么意思:"不支持搜索树文件的格式版本号(0)"？

Question

在XOS 9上的macOS 10.13 High Sierra中,我收到此日志消息:

2017-09-28 15:19:28.246511 + 0800 wr [5376:128702] MessageTracer:load_domain_whitelist_search_tree:73:不支持搜索树文件的格式版本号(0)2017-09-28 15:19:28.246541 + 0800 wr [ 5376:128702] MessageTracer:回退到默认白名单

这条消息是什么意思？

Answer 1

这些邮件来自一个功能msgtracer_domain_new在/usr/lib/libDiagnosticMessagesClient.dylib.

1. 在Xcode 9上运行您的应用程序.
2. 停下来.
3. 在Debug导航器中,单击NSApplicationMain上面的main
4. 在第一行设置断点 pushq %rbp
5. 再次运行您的应用.
6. 当断点命中时,通过键入设置另一个断点 breakpoint set -n msgtracer_domain_new
7. 继续执行程序.

当断点命中时,查看汇编代码.你会看见:

libDiagnosticMessagesClient.dylib`msgtracer_domain_new:
->  0x7fff667c7f08 <+0>:    pushq  %rbp
    0x7fff667c7f09 <+1>:    movq   %rsp, %rbp
    0x7fff667c7f0c <+4>:    pushq  %r15

(omit)

    0x7fff667c7ff1 <+233>:  leaq   0xc1d(%rip), %rdi         ; "/Library/Application Support/CrashReporter/SubmitDiagInfo.domains"
    0x7fff667c7ff8 <+240>:  xorl   %r13d, %r13d
    0x7fff667c7ffb <+243>:  movl   $0x20, %esi
    0x7fff667c8000 <+248>:  xorl   %eax, %eax
    0x7fff667c8002 <+250>:  callq  0x7fff667c8990            ; symbol stub for: open

(omit)

    0x7fff667c801d <+277>:  leaq   0xc33(%rip), %rsi         ; "format_version"
    0x7fff667c8024 <+284>:  movl   $0x4, %ecx
    0x7fff667c8029 <+289>:  xorl   %r8d, %r8d
    0x7fff667c802c <+292>:  xorl   %r9d, %r9d
    0x7fff667c802f <+295>:  movl   %r15d, %edi
    0x7fff667c8032 <+298>:  movq   %r12, %rdx
    0x7fff667c8035 <+301>:  callq  0x7fff667c895a            ; symbol stub for: fgetxattr
    0x7fff667c803a <+306>:  cmpl   %r13d, (%r12)
    0x7fff667c803e <+310>:  jne    0x7fff667c808b            ; <+387>
    0x7fff667c8040 <+312>:  movl   $0x0, (%rsp)
    0x7fff667c8047 <+319>:  leaq   0xc18(%rip), %rcx         ; "MessageTracer: %s:%d: Search tree file's format version number (%u) is not supported"
    0x7fff667c804e <+326>:  leaq   0xb9e(%rip), %r8          ; "load_domain_whitelist_search_tree"

(omit)

    0x7fff667c808f <+391>:  leaq   0xc25(%rip), %rcx         ; "MessageTracer: Falling back to default whitelist"
    0x7fff667c8096 <+398>:  xorl   %edi, %edi
    0x7fff667c8098 <+400>:  xorl   %esi, %esi
    0x7fff667c809a <+402>:  movl   $0x6, %edx
    0x7fff667c809f <+407>:  xorl   %eax, %eax
    0x7fff667c80a1 <+409>:  callq  0x7fff667c8924            ; symbol stub for: asl_log

就我而言,2011年底MacBook Pro运行High Sierra 10.13:

$ ls -l@ "/Library/Application Support/CrashReporter/SubmitDiagInfo.domains"
-rw-rw-r--@ 1 root  admin  12988 Sep 21  2014 /Library/Application Support/CrashReporter/SubmitDiagInfo.domains
    com.apple.TextEncoding     15 
    os_version     12 

该文件没有format_version函数预期的xattrmsgtracer_domain_new

有谁知道如何更新它？

附:

调查类似现象的提示.

查找应用的流程ID.

$ ps -ef | grep your_app_name | grep -v grep
  999 86803 86804   0  1:34AM ??         0:00.97 /Users/xxx/Library/Developer/Xcode/DerivedData/....

获取应用已加载的文件路径.

$ vmmap 86803 | perl -ne 'print "$1\n" if m{(/\S*)\Z}' | sort -u > z

根据需要编辑临时文件以删除不重要的文件路径.

找到包含该消息的文件.

$ cat z | xargs grep -l -b 'Search tree file' 2> /dev/null
/usr/lib/libDiagnosticMessagesClient.dylib

确认消息是否存在.

$ strings /usr/lib/libDiagnosticMessagesClient.dylib | grep 'Search tree file'
MessageTracer: %s:%d: Search tree file's format version number (%u) is not supported

生成调试器命令,然后应用它们.

$ nm /usr/lib/libDiagnosticMessagesClient.dylib | grep " T " | sort -u | perl -pe 's/.* _/breakpoint set -n /'
breakpoint set -n msgtracer_domain_new
breakpoint set -n msgtracer_domain_free
breakpoint set -n msgtracer_msg_new
breakpoint set -n msgtracer_set
breakpoint set -n msgtracer_msg_free
breakpoint set -n msgtracer_vlog
breakpoint set -n msgtracer_log
breakpoint set -n msgtracer_vlog_with_keys_skip_nulls
breakpoint set -n msgtracer_vlog_with_keys
breakpoint set -n msgtracer_log_with_keys
breakpoint set -n msgtracer_log_with_keys_skip_nulls
breakpoint set -n msgtracer_uuid_create

上面提到的方式并不完美.它不会处理文件路径中的空格.只要它有效,就可以了.我喜欢用来perl操纵文本.你会用你最喜欢的.

Answer 2

此命令删除日志消息:

xattr -w format_version 1 "/Library/Application Support/CrashReporter/SubmitDiagInfo.domains"