Mac/m2: Code Signature Invalid after auto-update to 7.28.0

[c0dev0id]

Using a supported version?

• I have searched searched open and closed issues for duplicates.
• I am using Signal-Desktop as provided by the Signal team, not a 3rd-party package.

Overall summary

Hello,

whenever the Signal App on my Mac updates itself, it doesn't start afterwards with the error below. Then I go to the website, download the current version and this works.

The next time, the app shows an update and I allow it to update itself, it's broken again.

Is there a difference between the version I get from the website and the version used by the automatic update?

What stands out for me in the trace is the "Code Signature Invalid" part:

Exception Type:  EXC_CRASH (SIGKILL (Code Signature Invalid))
Exception Codes: 0x0000000000000000, 0x0000000000000000
Termination Reason: CODESIGNING 4 Launch Constraint Violation

Steps to reproduce

• Install Signal from the Website
• Wait until a newer version becomes available and the app tries to autoupdate
• After the auto update, the app asks to restart
• Signal app quits and tries to start the updated version, but it doesn't start

Expected result

Signal app can start

Actual result

Signal app doesn't start

Screenshots

Signal version

7.28.0

Operating system

OSX 15.0.1 (24A348)

Version of Signal on your phone

No response

Link to debug log

-------------------------------------
Translated Report (Full Report Below)
-------------------------------------

Incident Identifier: 12B1C908-A17A-4170-A2E6-2EE00D7FE996
CrashReporter Key:   A6F1F50D-41D8-8552-99B0-5833768EE8B8
Hardware Model:      Mac14,9
Process:             Signal [50338]
Path:                /Applications/Signal.app/Contents/MacOS/Signal
Identifier:          org.whispersystems.signal-desktop
Version:             7.28.0 (1)
Code Type:           ARM-64 (Native)
Role:                Default
Parent Process:      launchd [1]
Coalition:           org.whispersystems.signal-desktop [1282]

Date/Time:           2024-10-10 13:45:12.4945 +0200
Launch Time:         2024-10-10 13:45:12.4765 +0200
OS Version:          macOS 15.0.1 (24A348)
Release Type:        User
Report Version:      104

Exception Type:  EXC_CRASH (SIGKILL (Code Signature Invalid))
Exception Codes: 0x0000000000000000, 0x0000000000000000
Termination Reason: CODESIGNING 4 Launch Constraint Violation

Triggered by Thread:  0

Thread 0 Crashed:
0   dyld_path_missing             	       0x100084b30 _dyld_start + 0


Thread 0 crashed with ARM Thread State (64-bit):
    x0: 0x0000000000000000   x1: 0x0000000000000000   x2: 0x0000000000000000   x3: 0x0000000000000000
    x4: 0x0000000000000000   x5: 0x0000000000000000   x6: 0x0000000000000000   x7: 0x0000000000000000
    x8: 0x0000000000000000   x9: 0x0000000000000000  x10: 0x0000000000000000  x11: 0x0000000000000000
   x12: 0x0000000000000000  x13: 0x0000000000000000  x14: 0x0000000000000000  x15: 0x0000000000000000
   x16: 0x0000000000000000  x17: 0x0000000000000000  x18: 0x0000000000000000  x19: 0x0000000000000000
   x20: 0x0000000000000000  x21: 0x0000000000000000  x22: 0x0000000000000000  x23: 0x0000000000000000
   x24: 0x0000000000000000  x25: 0x0000000000000000  x26: 0x0000000000000000  x27: 0x0000000000000000
   x28: 0x0000000000000000   fp: 0x0000000000000000   lr: 0x0000000000000000
    sp: 0x000000016fd9f958   pc: 0x0000000100084b30 cpsr: 0x00001000
   far: 0x0000000000000000  esr: 0x00000000  Address size fault

Binary Images:
       0x100080000 -        0x100103fff dyld_path_missing (*) <40bedd20-da23-3b70-a9c2-a1c68a738762> /dyld_path_missing
       0x100060000 -        0x100063fff main_executable_path_missing (*) <4c4c4425-5555-3144-a1e5-d8390511c674> /main_executable_path_missing
               0x0 - 0xffffffffffffffff ??? (*) <00000000-0000-0000-0000-000000000000> ???

Error Formulating Crash Report:
dyld_process_snapshot_get_shared_cache failed

EOF

-----------
Full Report
-----------

{"app_name":"Signal","timestamp":"2024-10-10 13:45:12.00 +0200","app_version":"7.28.0","slice_uuid":"4c4c4425-5555-3144-a1e5-d8390511c674","build_version":"1","platform":0,"bundleID":"org.whispersystems.signal-desktop","share_with_app_devs":0,"is_first_party":0,"bug_type":"309","os_version":"macOS 15.0.1 (24A348)","roots_installed":0,"name":"Signal","incident_id":"12B1C908-A17A-4170-A2E6-2EE00D7FE996"}
{
  "uptime" : 16000,
  "procRole" : "Default",
  "version" : 2,
  "userID" : 501,
  "deployVersion" : 210,
  "modelCode" : "Mac14,9",
  "coalitionID" : 1282,
  "osVersion" : {
    "train" : "macOS 15.0.1",
    "build" : "24A348",
    "releaseType" : "User"
  },
  "captureTime" : "2024-10-10 13:45:12.4945 +0200",
  "codeSigningMonitor" : 1,
  "incident" : "12B1C908-A17A-4170-A2E6-2EE00D7FE996",
  "pid" : 50338,
  "translated" : false,
  "cpuType" : "ARM-64",
  "roots_installed" : 0,
  "bug_type" : "309",
  "procLaunch" : "2024-10-10 13:45:12.4765 +0200",
  "procStartAbsTime" : 400714771782,
  "procExitAbsTime" : 400715188468,
  "procName" : "Signal",
  "procPath" : "\/Applications\/Signal.app\/Contents\/MacOS\/Signal",
  "bundleInfo" : {"CFBundleShortVersionString":"7.28.0","CFBundleVersion":"1","CFBundleIdentifier":"org.whispersystems.signal-desktop"},
  "storeInfo" : {"deviceIdentifierForVendor":"8CF76FEA-D3D4-525A-96F8-9961ED60C9CC","thirdParty":true},
  "parentProc" : "launchd",
  "parentPid" : 1,
  "coalitionName" : "org.whispersystems.signal-desktop",
  "crashReporterKey" : "A6F1F50D-41D8-8552-99B0-5833768EE8B8",
  "codeSigningID" : "org.whispersystems.signal-desktop",
  "codeSigningTeamID" : "U68MSDN6DR",
  "codeSigningFlags" : 587281169,
  "codeSigningValidationCategory" : 6,
  "codeSigningTrustLevel" : 4294967295,
  "instructionByteStream" : {"beforePC":"4AMA+cEDALAh2DOR4AMUqgdyAZQoAIBSaAIAOfH\/\/xcAAAAAAAAAAA==","atPC":"4AMAkR\/sfJIdAIDSHgCA0gcDABQfAACRYAAf1n8jA9X0T76p\/XsBqQ=="},
  "bootSessionUUID" : "07E44570-5F8B-491D-9D13-5FC9B0FB172A",
  "sip" : "enabled",
  "exception" : {"codes":"0x0000000000000000, 0x0000000000000000","rawCodes":[0,0],"type":"EXC_CRASH","signal":"SIGKILL (Code Signature Invalid)"},
  "termination" : {"flags":66,"code":4,"namespace":"CODESIGNING","indicator":"Launch Constraint Violation"},
  "extMods" : {"caller":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"system":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"targeted":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"warnings":0},
  "faultingThread" : 0,
  "threads" : [{"triggered":true,"id":673470,"threadState":{"x":[{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0}],"flavor":"ARM_THREAD_STATE64","lr":{"value":0},"cpsr":{"value":4096},"fp":{"value":0},"sp":{"value":6171523416},"esr":{"value":0,"description":" Address size fault"},"pc":{"value":4295510832,"matchesCrashFrame":1},"far":{"value":0}},"frames":[{"imageOffset":19248,"symbol":"_dyld_start","symbolLocation":0,"imageIndex":0}]}],
  "usedImages" : [
  {
    "source" : "P",
    "arch" : "arm64e",
    "base" : 4295491584,
    "size" : 540672,
    "uuid" : "40bedd20-da23-3b70-a9c2-a1c68a738762",
    "path" : "\/dyld_path_missing",
    "name" : "dyld_path_missing"
  },
  {
    "source" : "P",
    "arch" : "arm64",
    "base" : 4295360512,
    "size" : 16384,
    "uuid" : "4c4c4425-5555-3144-a1e5-d8390511c674",
    "path" : "\/main_executable_path_missing",
    "name" : "main_executable_path_missing"
  },
  {
    "size" : 0,
    "source" : "A",
    "base" : 0,
    "uuid" : "00000000-0000-0000-0000-000000000000"
  }
],
  "vmSummary" : "ReadOnly portion of Libraries: Total=880K resident=0K(0%) swapped_out_or_unallocated=880K(100%)\nWritable regions: Total=8240K written=64K(1%) resident=64K(1%) swapped_out=0K(0%) unallocated=8176K(99%)\n\n                                VIRTUAL   REGION \nREGION TYPE                        SIZE    COUNT (non-coalesced) \n===========                     =======  ======= \nSTACK GUARD                       56.0M        1 \nStack                             8176K        1 \nVM_ALLOCATE                         16K        1 \n__DATA                              32K        2 \n__DATA_CONST                        48K        2 \n__DATA_DIRTY                        16K        1 \n__LINKEDIT                         336K        2 \n__TEXT                             544K        2 \n__TPRO_CONST                       288K        1 \nmapped file                        4.3G       13 \npage table in kernel                64K        1 \n===========                     =======  ======= \nTOTAL                              4.3G       27 \n",
  "legacyInfo" : {
  "threadTriggered" : {

  }
},
  "logWritingSignature" : "2771d283f0bf2a48a07f18cc41b2c9989d68bd77",
  "trialInfo" : {
  "rollouts" : [
    {
      "rolloutId" : "6425c75e4327780c10cc4252",
      "factorPackIds" : {
        "SIRI_HOME_AUTOMATION_INTENT_SELECTION_CACHE" : "642600a457e7664b1698eb32"
      },
      "deploymentId" : 240000004
    },
    {
      "rolloutId" : "65a8173205d942272410674b",
      "factorPackIds" : {
        "SIRI_HOME_AUTOMATION_SERVER_FLOW_DEPRECATION" : "65d39fa4cb0e2417d11ce5f6"
      },
      "deploymentId" : 240000001
    }
  ],
  "experiments" : [
    {
      "treatmentId" : "c47ab4cc-c9c3-4b5d-a87c-e2433ce02597",
      "experimentId" : "6639bc6ba73d460582162323",
      "deploymentId" : 400000006
    },
    {
      "treatmentId" : "45f4e2a5-551b-4bc2-a2dc-19c244dda8f8",
      "experimentId" : "6643969b3099cf28e049862f",
      "deploymentId" : 400000007
    }
  ]
},
  "reportNotes" : [
  "dyld_process_snapshot_get_shared_cache failed"
]
}

Model: Mac14,9, BootROM 11881.1.1, proc 10:6:4 processors, 32 GB, SMC 
Graphics: Apple M2 Pro, Apple M2 Pro, Built-In
Display: EV3895, 3840 x 1600 (Ultra-wide 4K), Main, MirrorOff, Online
Memory Module: LPDDR5, Micron
AirPort: spairport_wireless_card_type_wifi (0x14E4, 0x4388), wl0: Jul 26 2024 20:29:22 version 23.10.888.0.41.51.162 FWID 01-1d20bb57
IO80211_driverkit-1302.71 "IO80211_driverkit-1302.71" Aug  5 2024 22:09:56
AirPort: 
Bluetooth: Version (null), 0 services, 0 devices, 0 incoming serial ports
Network Service: Wi-Fi, AirPort, en0
USB Device: USB31Bus
USB Device: USB31Bus
USB Device: USB2.0 Hub
USB Device: USB2.0 Hub
USB Device: USB2.0 Hub
USB Device: miscellaneous_device
USB Device: Microsoft Nano Transceiver 1.1
USB Device: Jabra Evolve2 65 Deskstand
USB Device: EIZO USB HID Monitor
USB Device: USB2.0 Hub
USB Device: hub_device
USB Device: Jabra Link 380
USB Device: USB 10/100/1000 LAN
USB Device: USB31Bus
Thunderbolt Bus: MacBook Pro, Apple Inc.
Thunderbolt Bus: MacBook Pro, Apple Inc.
Thunderbolt Bus: MacBook Pro, Apple Inc.

[c0dev0id]

Not sure if this is relevant, but this is a diff of the signing information between the website version and the autoupdate version. Created with the command codesign -dv --verbose=4 /Applications/Signal.app:

--- signal_autoupdate_sign.txt	2024-10-10 15:04:21
+++ signal_website_sign.txt	2024-10-10 15:05:39
@@ -1,29 +1,29 @@
 Executable=/Applications/Signal.app/Contents/MacOS/Signal
 Identifier=org.whispersystems.signal-desktop
-Format=app bundle with Mach-O thin (arm64)
+Format=app bundle with Mach-O universal (x86_64 arm64)
 CodeDirectory v=20500 size=781 flags=0x10000(runtime) hashes=13+7 location=embedded
 VersionPlatform=1
 VersionMin=720896
 VersionSDK=917504
 Hash type=sha256 size=32
-CandidateCDHash sha256=1a53b3378beeed8ba1796e0f49161e59b30ad6d5
-CandidateCDHashFull sha256=1a53b3378beeed8ba1796e0f49161e59b30ad6d50b9df583f38ebbeb34e6bea0
+CandidateCDHash sha256=8026a2032aec4dc199c4a73f6ea737bfb65ca6ea
+CandidateCDHashFull sha256=8026a2032aec4dc199c4a73f6ea737bfb65ca6eab044c5989f077ba92b1b5bb8
 Hash choices=sha256
-CMSDigest=1a53b3378beeed8ba1796e0f49161e59b30ad6d50b9df583f38ebbeb34e6bea0
+CMSDigest=8026a2032aec4dc199c4a73f6ea737bfb65ca6eab044c5989f077ba92b1b5bb8
 CMSDigestType=2
 Executable Segment base=0
 Executable Segment limit=16384
 Executable Segment flags=0x1
 Page size=4096
-CDHash=1a53b3378beeed8ba1796e0f49161e59b30ad6d5
+CDHash=8026a2032aec4dc199c4a73f6ea737bfb65ca6ea
 Signature size=9060
 Authority=Developer ID Application: Signal Messenger, LLC (U68MSDN6DR)
 Authority=Developer ID Certification Authority
 Authority=Apple Root CA
-Timestamp=9. Oct 2024 at 19:03:47
+Timestamp=9. Oct 2024 at 19:07:35
 Notarization Ticket=stapled
 Info.plist entries=31
 TeamIdentifier=U68MSDN6DR
 Runtime Version=14.0.0
-Sealed Resources version=2 rules=13 files=17
+Sealed Resources version=2 rules=13 files=19
 Internal requirements count=1 size=196

[ayumi-signal]

Hi there, sorry this is happening and thank you for the debugging info. It looks like the update is going from arm64 to universal, which is unexpected but should work.

[naturalpb]

Same behavior is present for me after auto-update to 7.29.0.

Incident Identifier: 8F840B02-79A8-4F1B-A4B5-5D8E93019C15
CrashReporter Key:   C515B3A8-47DB-2B9E-D29D-4253625AF38F
Hardware Model:      MacBookPro18,1
Process:             Signal [2103]
Path:                /Applications/Signal.app/Contents/MacOS/Signal
Identifier:          org.whispersystems.signal-desktop
Version:             7.29.0 (1)
Code Type:           ARM-64 (Native)
Role:                Default
Parent Process:      launchd [1]
Coalition:           org.whispersystems.signal-desktop [1490]

Date/Time:           2024-10-18 08:28:53.8904 -0400
Launch Time:         2024-10-18 08:28:53.8554 -0400
OS Version:          macOS 15.0.1 (24A348)
Release Type:        User
Report Version:      104

Exception Type:  EXC_CRASH (SIGKILL (Code Signature Invalid))
Exception Codes: 0x0000000000000000, 0x0000000000000000
Termination Reason: CODESIGNING 4 Launch Constraint Violation

[tsujigiri]

Same here. Deleting Signal and installing fresh worked for me.