RE: <https://github.com/osquery/osquery/pull/8643>...
# code-review
k
RE: https://github.com/osquery/osquery/pull/8643 I am able to reproduce the error locally 🧵
Screenshot 2025-07-17 at 10.32.02 AM.png
I am using SDK 15.4
with my boost hack
Copy code
- typedef AUX_WRAPPER_INST( BOOST_MPL_AUX_STATIC_CAST(AUX_WRAPPER_VALUE_TYPE, (value - 1)) ) prior;
+ typedef AUX_WRAPPER_INST(BOOST_MPL_AUX_STATIC_CAST(AUX_WRAPPER_VALUE_TYPE, (value > 0 ? value - 1 : 0))) prior;
Here is my build config
Copy code
$ cmake -DOSQUERY_VERSION=5.18.1 -DCMAKE_OSX_DEPLOYMENT_TARGET=10.15 -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++ ..
I posted a comment in the PR with the modifications to cmakelists.txt to get it to work
missing
_sstr_*
_string__*
_authenticode_*
_tlsh_*
and then
TLSH
needed
BUCKETS_256
to be set
sorry using 15.5
not 15.4
Copy code
10:59:38 [ksykulev:/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs] $ ls -ltra
total 0
drwxr-xr-x  6 ksykulev  staff  192 May 13 01:13 ..
lrwxr-xr-x  1 ksykulev  staff   10 Jun  4 12:44 MacOSX15.5.sdk -> MacOSX.sdk
lrwxr-xr-x  1 ksykulev  staff   10 Jun  4 12:44 MacOSX15.sdk -> MacOSX.sdk
drwxr-xr-x  7 ksykulev  staff  224 Jun  4 12:44 MacOSX.sdk
drwxr-xr-x  5 ksykulev  staff  160 Jun  4 12:45 .