Geek Answers Handbook

Veracode, Debug Symbols and Xcode

I am trying to use an Veracode-tested iOS application: application security platform. In order for them to scan .IPA, .IPA must contain debugging characters.

To configure the archive assembly and the project / goal used, I specified:

  • Creating Debug Symbols: YES
  • Debugging debugging characters while copying: NO
  • Code Descriptor Removal: NO
  • Characters hidden by default: NO
  • Ribbon related product: NO

However, Veracode still gives me the following error when sending .IPA:

Primary files compiled without debugging symbols - 1 file

Is there another step that needs to be taken to create debugging symbols, possibly for archiving?

+7
ios xcode veracode
source share
1 answer

I had the same problem. I was able to resolve this by following the veracode instructions below. It basically tells you to manually create an archive package, move the .app and .app.sym folders to a new location, and then rename the zip file to ipa.

From the Veracode Help Center:

"Since Xcode does not create .IPA packages containing DSYM information, you must create the package yourself. Xcode dynamically creates a folder to store the .app and .app.dsym files. There is no specific path in this folder, but you can search the folder after creation applications by opening Xcode and clicking "Products" on the left side of the window. Right-click the .app file and select "Reveal in Finder", which will lead you to the folder where the .app and .app.dsym files are located. as you provided DSYM info, you can pack your compiled iOS application as follows om:

  • Select the .app and .app.dSYM folders for your application.
  • Copy both folders to a folder called Payload. Note: the folder name must be capitalized.
  • Create a zip archive containing the payload folder. You can do this on a Mac by selecting the “Payload” folder and selecting “Compress” from the context menu or using the zip-compatible archiving utility of your choice.
  • Change the extension of the resulting archive to .ipa.
  • Download this archive into the Veracode application profile. "
+11
source share

More articles:


All Articles