Sign in Join
Wiki copytemporary

macOS Programming Tips: what changed

Revision 1 to 2. Removed lines have a minus sign; added lines have a plus sign.

OldNewLine
11*(macOS only)*
22
33## Choice of Lazarus LCL widgetsets
44
55With macOS there are various widgetsets which can be used with Lazarus. Each has its strengths and weaknesses.
66
77**Carbon widgetset** (see the [[Carbon Interface]] page)
88
99| Pros | Cons |
1010|----|----|
1111| All standard LCL controls working | The entire Carbon framework has been deprecated by Apple. It is not available in 64 bit macOS applications. It was completely removed from macOS 10.15 Catalina (October 2019). The Carbon widgetset is no longer being developed. |
1212| No additional libraries or frameworks to install; uses Carbon framework included with macOS | |
1313| Native macOS look and feel | Only relevant to macOS |
1414
1515**Cocoa widgetset** (see the [[Cocoa Interface]] page)
1616
1717<thead>
1818
1919</thead>
2020<tbody>
2121
2222uses the Cocoa framework included with macOS</td>
2323
2424</tbody>
2525
2626**GTK widgetset**
2727
2828| Pros | Cons |
2929|----|----|
3030| All standard LCL controls working | Ugly; clunky common dialogs; doesn't look like Mac software |
3131| This widgetset is well tested | Requires X11 and bulky GTK to be installed to run Lazarus or any GUI apps created with Lazarus |
3232| | Have to start Lazarus at command line -- can't double-click Lazarus or place on dock (same with GUI apps) -- although see Creating an app bundle for a GTK application for how you can add this capability yourself. |
3333
3434**Qt widgetset** (see the [[Qt Interface Mac]] page)
3535
3636| Pros | Cons |
3737|----|----|
3838| Native macOS look and feel | Requires the Qt interface framework to be installed to run app, which is rather large |
3939| All standard LCL controls working | |
4040| The Qt widgetset also available for other platforms, so any effort put into developing Qt widgetset benefits multiple platforms | |
4141| The Qt interface provides rich functionality | |
4242| The Qt widgetset is easier to develop than other widgetsets | |
4343
4444## Cross compiling macOS applications
4545
4646See the [[Cross compiling]] article.
4747
4848## Commonly used Unix commands
4949
5050If you’re coming to macOS from Windows, you may find some of its Unix terminal commands confusing. Here are some equivalents. For more information about a command, enter `man command` in an Applications \> Utilities \> Terminal.
5151
5252| Action | Windows command prompt window | macOS Terminal or X11 window |
5353|----|----|----|
5454| Change to a different directory | cd | cd |
5555| Make a new directory | mkdir | mkdir |
5656| Delete a directory | rmdir | rmdir |
5757| List file directory in chronological order with detail | dir /od | ls -ltr |
5858| Copy a file, preserving its date-time stamp | copy | cp -p |
5959| Display contents of a text file | type | cat |
6060| Delete a file | erase | rm |
6161| Move a file | move | mv |
6262| Rename a file | ren | mv |
6363| Find a file | dir /s | find |
6464| Grep a file | findstr | grep |
6565| Display differences between two text files | fc | diff |
6666| Change file attributes | attrib | chmod |
6767| “Super-user” root authorization | N/A | sudo |
6868| Create symbolic link to a file or directory | mklink | ln |
6969| Shrink executable file size | strip (included w/ Free Pascal) | strip |
7070
7171## Useful commands and tools included with macOS
7272
7373**open**
7474
7575See the [[macOS Open Sesame]] article for the many and varied uses of the macOS `open` command.
7676
7777**zip / unzip**
7878
7979These are standard command-line zip archive compression/uncompression utilities.
8080
8181**Console**
8282
8383Drag the *Console* application from `/Applications/Utilities` and drop it on the dock so you always have it handy. Launch it whenever you want to see messages or errors output to the console by GUI apps (for example, when they crash). Invaluable for debugging.
8484
8585**Activity Monitor**
8686
8787The *Activity Monitor* application is also in `/Applications/Utilities` and is useful for monitoring CPU, memory, energy, network and disk usage.
8888
8989**otool**
9090
9191Use the *otool* command line utility to display information about an executable file or library. For example, enter the following to see information about Lazarus:
9292
9393``` bash
9494cd /usr/local/share/lazarus
9595otool –L lazarus
9696```
9797
9898This shows that Lazarus is dependent on various libraries in `/usr/lib` and `/System/Library/Frameworks/`, as you would expect. Open a Terminal and type `man otool` to view its manual page.
9999
100100**install_name_tool**
101101
102102Use *install_name_tool* with the *–change* switch to change where an executable file or library looks for a library that it requires. Open a Terminal and type `man install_name_tool` to view its manual page.
103103
104104**iconutil**
105105
106106Use the *iconutil* command line utility in `/usr/bin/` to create icon files (.icns) for use with your .app bundles. Open a Terminal and type `man iconutil` for its manual page.
107107
108108**pkgbuild, productbuild / Disk Utility**
109109
110110Use these utilities to create disk image (.dmg) files for deploying your applications. See [[Deploying Your Application]] for more information.
111111
112112Command line tools `pkgbuild` and `productbuild` are in `/usr/bin/`. Disk Utility is in `/Applications/Utilities`. You can drag and drop Disk Utility on the dock.
113113
114114A popular third party option is the GUI application [Packages](http://s.sudre.free.fr/Software/Packages/about.html) which creates .pkg installer archives.
115115
116116**PlistBuddy**
117117
118118The command line utility `PlistBuddy`, which is found in `/usr/libexec/`, may be used to read and modify the values inside of [[macOS property list files|property list files]].
119119
120120**Script Editor / osascript**
121121
122122Use the *Script Editor* application to edit, compile and run AppleScript files. It’s located in `/Applications/Utilities/`.
123123
124124Use the command line utility *osascript* from `/usr/bin/` to execute an AppleScript command or file from the command line or from a script file. For more information, enter `man osascript` in a Terminal to view its manual page.
125125
126126**latency**
127127
128128The *latency* diagnostic command line utility found in `/usr/bin/` monitors scheduling and interrupt latency measuring the number of context switches and interrupts, and reporting on the resulting delays. Open a Terminal and type `man latency` to view its manual page.
129129
130130**fs_usage**
131131
132132The *fs_usage* diagnostic command line utility reports system calls and page faults related to filesystem activity in real-time. The output displays the timestamp, system call, filename, elapsed time and name of the process. Open a Terminal and type `man fs_usage` to view its manual page.
133133
134134**Safari**
135135
136136Yes, I know, it is a web browser - but it is more. You can read manual pages with it too. So, rather than opening a Terminal and then typing `man 3 pause`, you can simply type `x-man-page://3/pause` into Safari's URL field and access the man page that way. Unfortunately recent version of Safari now ask you if you want to allow Safari to open the Terminal and this new security behaviour cannot be turned off and your choice is not remembered.
137137
138138**sc_usage**
139139
140140The *sc_usage* command line utility samples system calls and page faults, displaying them onscreen. Open a Terminal and type `man sc_usage` to view its manual page.
141141
142142**vm_stat**
143143
144144The *vm_stat* command line utility displays virtual memory statistics. Open a Terminal and type `man vm_stat` to view its manual page.
145145
146146**DevToolsSecurity**
147147
148148The *DevToolsSecurity* command line utility changes the security authorisation policies for use of the Apple-code-signed debugger and performance analysis tools on development systems. See further [[lldb|DevToolsSecurity]].
149149
150150## Cross-platform considerations
151151
152152When you plan to compile the same application for different widget sets (eg Windows, GTK and Cocoa) or plan to use multiple languages, you should layout the controls on your form(s) using the [[Anchor Sides|anchor editor]] and set the [[Autosize / Layout|AutoSize]] property of your controls to *True*. Doing this from the beginning will save you a lot of frustrating layout problems later.
153153
154154## Apple-specific UI elements
155155
156156The Apple user interface in macOS has a number of unique features (eg the Dock, Apple main menu bar, sheets, drawers, user notifications, etc). For details on how to provide these non-cross-platform features in your applications, see the article [[Apple-specific UI elements]].
157157
158158## Setting environment variables for an application
159159
160160On macOS, the normal way to set any environment variables needed by an application is to set them in the LSEnvironment property of your application's [[macOS property list files|Info.plist]] file.
161161
162162## How to obtain the path to the Bundle
163163
164164``` pascal
165165
166166{$mode objfpc}{$H+}
167167{$modeswitch objectivec1}
168168
169169...
170170
171171uses
172172 CocoaAll; // for NSBundle
173173
174174...
175175
176176function GetBundlePath: string;
177177begin
178178 Result := NSBundle.mainBundle.bundlePath.UTF8String;
179179end;
180180```
181181
182182This returns the full path up to and including the application bundle name (eg `/Users/Me/MyApp.app`).
183183
184184Related: [[Locating the macOS application resources directory]].
185185
186186## Determining where to store files
187187
188188## Determining if a file is readable
189189
190190The Lazarus function [fileisreadable](https://lazarus-ccr.sourceforge.io/docs/lazutils/lazfileutils/fileisreadable.html) reports if the user has read permissions for the specified file. However, modern versions of macOS will restrict [access to the following locations](https://developer.apple.com/library/archive/documentation/Security/Conceptual/AppSandboxDesignGuide/AppSandboxInDepth/AppSandboxInDepth.html):
191191
192192- The app container directory. Upon first launch, the operating system creates a special directory for use by your app—and only by your app—called a container. Each user on a system gets an individual container for your app, within their home directory; your app has unfettered read/write access to the container for the user who ran it.
193193- App group container directories. A sandboxed app can specify an entitlement that gives it access to one or more app group container directories, each of which is shared among all apps with that entitlement.
194194- User-specified files. A sandboxed app (with an appropriate entitlement) automatically obtains access to files in arbitrary locations when those files are explicitly opened by the user or are dragged and dropped onto the application by the user.
195195- Related items. With the appropriate entitlement, your app can access a file with the same name as a user-specified file, but a different extension. This can be used for accessing files that are functionally related (such as a subtitle file associated with a movie) or for saving modified files in a different format (such as re-saving an RTF flat file as an RTFD container after the user added a picture).
196196- Temporary directories, command-line tool directories, and specific world-readable locations. A sandboxed app has varying degrees of access to files in certain other well-defined locations.
197197
198198At the moment, there appears to be no reliable API to determine if a file is readable in all situations. Apple's own *isReadableFileAtPath* method is essentially a wrapper around the BSD *access* system call and does not take into account the various security and privacy features that Apple has added since macOS 10.0. Below, is a brute force method that determines if a file is readable by physically reading the first byte of data from the file. This is necessarily slower than simply reading the file permissions, but does provide a robust solution:
199199
200200``` pascal
201201function FileIsReadableByThisExecutable(const AFilename: string): boolean;
202202// macOS will block applications from reading files outside their sandbox
203203// therefore, simply knowing the user has read acces is not sufficient
204204// requires "uses LazFileUtils"
205205var
206206 f: file;
207207 b: byte;
208208begin
209209 Result := lazfileutils.FileIsReadable(AFilename);
210210 {$IFDEF Darwin}
211211 if not Result then exit; //globally not readable
212212 if FileSizeUtf8(AFilename) < 1 then exit(false);
213213 AssignFile(f, AFilename);
214214 {$I+}
215215 try
216216 FileMode := fmOpenRead; //Set file access to read only
217217 Reset(f, 1);
218218 if ioresult <> 0 then
219219 exit;
220220 b := 0;
221221 BlockRead(f, b, sizeof(b));
222222 CloseFile(f);
223223 result := true;
224224 except
225225 result := false;
226226 end;
227227 {$ENDIF}
228228end;
229229```
230230
231231Many system frameworks that provide access to [protected resources](https://developer.apple.com/documentation/bundleresources/information_property_list/protected_resources) have dedicated APIs for checking and requesting authorization to use those resources. This allows you to adjust your application’s behaviour depending on the current access it has. For example, if the user denies your application permission to do something, you can remove related elements from your user interface. Because a user can change authorization at any time using Settings, always check the authorization status of a feature before accessing it. In cases without a dedicated API, be prepared to gracefully handle access failures as above.
232232
233233For an example of an authorization API, see [AVCaptureDevice API](https://developer.apple.com/documentation/avfoundation/avcapturedevice/1624613-authorizationstatus).
234234
235235## Accessing system information
236236
237237Sysctl provides an interface that allows you to retrieve many kernel parameters in macOS (and Linux and the BSDs). This provides a wealth of information detailing system hardware which can be useful when debugging user issues or simply optimising your application (eg to take advantage of threads on multi-core CPU systems). The NSProcessInfo class provides access to a collection of information about the current process. The IOKit framework implements non-kernel access to I/O Kit objects (eg to retrieve the Mac platform serial number and UUID). For full details and example code, see the article [[Accessing macOS System Information]].
238238
239239## Retrieve username/ full username
240240
241241The code to retrieve the current user's username (eg joe) or full username (eg Joe Bloggs) can be found in the article [[macOS Retrieve (full)username]].
242242
243243## Making a beep
244244
245245Procedure declaration:
246246
247247``` pascal
248248procedure NSBeep; cdecl;
249249 external '/System/Library/Frameworks/AppKit.framework/AppKit' name 'NSBeep';
250250```
251251
252252To use it:
253253
254254``` pascal
255255procedure MakeBeep;
256256 begin
257257 {$IFDEF DARWIN}
258258 NSbeep;
259259 {$ENDIF}
260260
261261 [...]
262262 end;
263263```
264264
265265You can also assign NSBeep to the [OnBeep](https://www.freepascal.org/docs-html/rtl/sysutils/onbeep.html) (TBeepHandler in the SysUtils unit), by setting it on Form creation.
266266
267267This way you can call the regular [Beep](https://www.freepascal.org/docs-html/rtl/sysutils/beep.html) function (by default, Beep contains no implementation to actually produce a beep).
268268
269269``` pascal
270270procedure TForm1.FormCreate(Sender: TObject);
271271 begin
272272 {$IFDEF DARWIN}
273273 OnBeep := @NSbeep;
274274 {$ENDIF}
275275
276276 [...]
277277 end;
278278```
279279
280280## Show application in all desktop spaces
281281
282282An application defaults to showing only in the desktop space in which it was opened. To show your application in all desktop spaces for macOS 10.5+ (Leopard):
283283
284284``` pascal
285285{$modeswitch objectivec1}
286286
287287Uses CocoaAll ...
288288
289289procedure TForm1.MenuItem35Click(Sender: TObject);
290290var
291291 theWindow: NSWindow;
292292begin
293293 theWindow := NSView(Form1.Handle).window; // Form1 is the name of the main form - adjust as necessary
294294 theWindow.setCollectionBehavior(theWindow.collectionBehavior or NSWindowCollectionBehaviorCanJoinAllSpaces);
295295end;
296296```
297297
298298## Launch/Toggle full screen
299299
300300To toggle an application window full screen for macOS 10.7+ (Lion):
301301
302302``` pascal
303303{$modeswitch objectivec1}
304304
305305Uses CocoaAll ...
306306
307307procedure TForm1.Button1Click(Sender: TObject);
308308var
309309 Window: NSWindow;
310310begin
311311 Window := NSView(Form1.Handle).window;
312312 Window.toggleFullScreen(Nil);
313313end;
314314```
315315
316316To launch your application full screen you can call the button event handler (as below) or move the button event handler code (above) to the form's on activate event handler:
317317
318318``` pascal
319319procedure TForm1.FormActivate(Sender: TObject);
320320begin
321321 Form1.Button1Click(Form1);
322322end;
323323```
324324
325325## Locale settings (date & time separator, currency symbol, ...)
326326
327327On macOS, like on other Unix platforms, the RTL does not load the locale settings by default. They can be initialised in three ways. See the article [[Locale settings for macOS]] for details.
328328
329329## Accessibility for users with special needs
330330
331331macOS includes a wide variety of features and assistive technologies, such as screen and cursor magnification, a full-featured screen reader, visual flash alerts, closed captioning support, and much more. Take advantage of these features to make your apps accessible to users with special needs. Please refer to the [[LCL Accessibility|Accessibility]] article for more details.
332332
333333## LCL FontDialog workaround
334334
335335The FontDialog.OnApplyClicked event handler is not supported in macOS. So this code will have no effect (the message will not be shown):
336336
337337``` pascal
338338procedure TForm1.Button1Click(Sender: TObject);
339339begin
340340 FontDialog1.Execute;
341341end;
342342
343343procedure TForm1.FontDialog1ApplyClicked(Sender: TObject);
344344begin
345345 ShowMessage('Apply Clicked');
346346end;
347347```
348348
349349The workaround is to restructure the code as follows:
350350
351351``` pascal
352352procedure TForm1.Button1Click(Sender: TObject);
353353begin
354354 if FontDialog1.Execute then
355355 begin
356356 ShowMessage('Apply Clicked');
357357 end;
358358end;
359359```
360360
361361## Coping with missing features across macOS versions
362362
363363For an example of how to cope elegantly with new features in macOS which are missing from older macOS versions, see [[Accessing macOS System Information|this example]].
364364
365365## Updating a GUI from a secondary thread
366366
367367Apple’s UI frameworks, and Cocoa in particular, can only be called from the main thread. This means that if you have a background threading process, it cannot interact with the user interface because all user interface objects are marked as not safe for threading. Touching the user interface from a background thread can cause all sorts of issues, including corruption of internal state, crashes, or inexplicable incorrect behaviour.
368368
369369For example code implementing a solution to this issue, refer to the [[macOS NSURLSession|Downloading files with graphical user interface feedback]] article.
370370
371371## Using PrintDialog in Cocoa
372372
373373PrintDialog is only partially implemented (July 2020) in Cocoa. As a result, this code does not display the dialog:
374374
375375``` pascal
376376procedure TForm1.btnPrintDialogClick(Sender: TObject);
377377begin
378378 if PrintDialog1.Execute then
379379 Panel1.Invalidate;
380380end;
381381```
382382
383383This code will display the dialog:
384384
385385``` pascal
386386procedure TForm1.btnPrintDialogClick(Sender: TObject);
387387begin
388388 PrintDialog1.Options:= PrintDialog1.Options + [poBeforeBeginDoc];
389389 if PrintDialog1.Execute then
390390 Panel1.Invalidate;
391391end;
392392```
393393
394394## Detecting the Apple Command key
395395
396396The Apple Command key is *ssMeta*. Heres' how to test for it being depressed:
397397
398398``` pascal
399399procedure TForm1.FormKeyDown(Sender: TObject; var Key: Word; Shift: TShiftState);
400400var
401401 ssCmd: TShiftStateEnum;
402402begin
403403 // Define standard menu command key as ssCmd
404404 {$IFDEF DARWIN}
405405 ssCmd := ssMeta; // Apple
406406 {$ELSE}
407407 ssCmd := ssCtrl // FreeBSD, Linux, Windows
408408 {$ENDIF}
409409
410410 if (ssCmd in Shift) then
411411 Caption:='Command key pressed'
412412 else
413413 Caption := IntToStr(Key) + ' not the command key';
414414end;
415415```
416416
417417## Updating the GUI from a non-main thread
418418
419419Any attempt to provide user feedback to the graphical user interface from within a delegate method running on a secondary background thread will cause the application to die with a log entry similar to this:
420420
421421` *** Terminating app due to uncaught exception 'NSInternalInconsistencyException',`\
422422` reason: 'NSWindow drag regions should only be invalidated on the Main Thread!'`
423423
424424The cause? Apple’s UI frameworks, and Cocoa in particular, can only be called from the main thread. Touching the user interface from a background thread can cause all sorts of issues, including corruption of internal state, crashes, or inexplicable incorrect behaviour.
425425
426426One solution may be found in the [[macOS NSURLSession]] article which also has a code example.
427427
428428## Libraries
429429
430430### Using a library in a Mac application
431431
432432Many software projects use external libraries to complement their functionality. For example, OpenAL might be utilized to provide sound support, or FreeType might be utilized to provide font rendering support for FCL-Image. macOS already comes with a number of open source libraries installed, being that OpenAL is one of them. If one of these libraries is utilized, one should simply add the corresponding import unit to the uses clause and start using the library. To use other open source libraries which aren't included with macOS, the easiest way is by grabbing a pre-compiled library from the application bundle of popular open source applications. FreeType for example is included inside the application bundle from Gimp in the path `Gimp.app/Resources/lib/libfreetype.6.dylib`. Another option is downloading the source code from the library and building it manually, but compiling a C library is usually an unpleasant task for pure Pascal developers.
433433
434434So, again in the previous example, let's say that an application requires the FreeType library. One can grab the libfreetype.6.dylib file from Gimp and then place it in a location of our source code tree, for example `../Mac/libfreetype.dylib` relative to the path of the main project file, which is where the executable is placed. To properly link the application the Free Pascal command line option `-Fl../Mac` should be added, so that this path is added to the library search path. The linker will then find the library in this location and read the install path which is written inside it. At runtime the linker will search for the library in this install path. To change the install path to our desired one, the command line application install_name_tool, which comes with the Apple Developer Tools, can be used. It can be utilized with the following command line command:
435435
436436``` bash
437437install_name_tool libfreetype.dylib -id @executable_path/../Frameworks/libfreetype.dylib
438438```
439439
440440One can then verify if this command worked by using the command:
441441
442442``` bash
443443otool -D libfreetype.dylib
444444```
445445
446446It should return the written path. When building the application bundle, we should copy the libfreetype.dylib file to the Frameworks sub-directory. The *install_name_tool* command uses the *@executable_path* macro to set an install path *relative to the executable*, which is inside the MacOS folder in the application bundle. Now the application can be built, the bundle and then the application can be run and it will load the library correctly from the application bundle.
447447
448448### Using a library installed using fink
449449
450450For using libraries, which were installed using fink, you need to add the path to the libraries. The default is `/sw/lib`. Adding the option `-Fl/sw/lib` to the command line tells the linker where to find the libraries. The resulting application is fine for distribution with fink, but in order to run without fink, you have to make a "standalone" version. There are several possibilities to achieve this, one of them will be outlined here:
451451
452452- Copy the .dylib file into the application bundle, for example to the `Contents/MacOS/` next to the executable binary. Then, adjust the paths install_name_tool:
453453
454454- Change the path of the library in the executable:
455455
456456``` bash
457457install_name_tool -change /sw/lib/libfreetype.dylib @executable_path/libfreetype.dylib @executable_path/your_executable_binary
458458```
459459
460460- Adjust the path in the library:
461461
462462``` bash
463463install_name_tool -id @executable_path/libfreetype.dylib @executable_path/libfreetype.dylib
464464install_name_tool -change /sw/lib/libfreetype.dylib @executable_path/libfreetype.dylib @executable_path/libfreetype.dylib
465465```
466466
467467The complete list of libraries in your executable can be obtained with:
468468
469469``` bash
470470otool -L @executable_path/your_executable_binary | grep version | cut -f 1 -d ' '
471471```
472472
473473For the list of libraries from fink only, without libraries from `/usr/lib` and `/System/Library`, use this command:
474474
475475``` bash
476476otool -L @executable_path/your_executable_binary | grep version | cut -f 1 -d ' ' | grep -v \/System\/Library | grep -v \/usr\/lib
477477```
478478
479479With this a script can be created which loops over all libraries from fink in the executable. Be aware of the fact that the libraries can call libraries from fink. You have to adjust them as well.
480480
481481Another important point of libraries from fink is, that they have only one architecture, ie i386, ppc, aarch64, x86_64 or ppc64. For a universal application, you have to combine single architecture libraries with `lipo`.
482482
483483### Dynamic Libraries
484484
485485For the details of creating and using dynamic libraries, see [[macOS Dynamic Libraries]] and [[macOS Frameworks]].
486486
487487### Static Libraries
488488
489489For the details of creating and using static libraries, see [[macOS Static Libraries]].
490490
491491### Which dynamic libraries are used?
492492
493493A little known method for checking which dynamic libraries an executable uses is as simple as setting an environment variable. The macOS dynamic linker checks the following environment variables during the launch of each process.
494494
495495| Environment Variable | Description |
496496|----|----|
497497| DYLD_PRINT_TO_FILE | This is a path to a (writable) file. Normally, the dynamic linker writes all logging output (triggered by DYLD_PRINT_* settings) to file descriptor 2 (usually stderr). This setting causes the dynamic linker to write logging output to the specified file. |
498498| DYLD_PRINT_LIBRARIES | When this is set, the dynamic linker writes to file descriptor 2 (normally stderr) the filenames of the libraries the program is using. This is useful to make sure that your program is loading the dynamic libraries you want. |
499499| DYLD_PRINT_RPATHS | Causes dyld to print a line each time it expands an @rpath variable and whether that expansion was successful or not. |
500500
501501For full details of many other environment variables and their effect, see the manual page for dyld (type `man dyld` in a Terminal).
502502
503503### OpenSSL, LibreSSL, Secure Transport, Network Framework
504504
505505Apple deprecated the use of the included OpenSSL libraries in Mac OS X 10.7 (Lion) in July 2011 and suggested that developers should either include the needed libraries in their application bundle or use the [Secure Transport API](https://developer.apple.com/documentation/security/secure_transport) which itself has now been deprecated in favour of the [Network Framework](https://developer.apple.com/documentation/network) introduced in macOS 10.14 (Mojave). Use of the Apple-provided OpenSSL and LibreSSL libraries by applications is strongly discouraged by Apple (see [this statement](https://developer.apple.com/library/archive/documentation/Security/Conceptual/cryptoservices/SecureNetworkCommunicationAPIs/SecureNetworkCommunicationAPIs.html#//apple_ref/doc/uid/TP40011172-CH13-SW3)).
506506
507507In the FPC 3.0.4 release, when trying to load the unversioned `libcrypto.dylib` or `libssl.dylib`, macOS terminates the application with the error: "Invalid dylib load. Clients should not load the unversioned libssl dylib as it does not have a stable ABI.". The fix for that bug (see [Bug \#36484](https://bugs.freepascal.org/view.php?id=36484)) was included in FPC 3.2.0 which caused FPC to fall back to using LibreSSL v2.2 (`libssl.35.dylib`) from June 2015.
508508
509509As of the FPC 3.2.0 release, FPC breaks the ability of macOS to connect to web sites using HTTPS with TLSv1.2 or TLSv1.3 protocols only, because it fails to load the most recent Apple included LibreSSL libraries. It uses the very old LibreSSL v2.2 because the two libraries (`libssl.35.dylib` and `libcrypto.35.dylib`) for that version have matching version numbers (like OpenSSL) whereas the more recent LibreSSL library versions have mismatching version numbers.
510510
511511The issue has been fixed in FPC trunk (see [Bug \#37977](https://bugs.freepascal.org/view.php?id=37977)) and is included in FPC 3.2.2. However, it still uses the outdated Apple-included system libraries listed in the table below.
512512
513513<thead>
514514
515515</thead>
516516<tbody>
517517
518518libssl.0.9.8.dylib + libcrypto.0.9.8.dylib</td>
519519
520520libssl.0.9.8.dylib + libcrypto.0.9.8.dylib</td>
521521
522522libssl.0.9.8.dylib + libcrypto.0.9.8.dylib</td>
523523
524524libssl.39.dylib + libcrypto.38.dylib</td>
525525
526526libssl.0.9.8.dylib + libcrypto.0.9.8.dylib</td>
527527
528528libssl.39.dylib + libcrypto.38.dylib<br />
529529libssl.43.dylib + libcrypto.41.dylib</td>
530530
531531libssl.0.9.8.dylib + libcrypto.0.9.8.dylib</td>
532532
533533libssl.43.dylib + libcrypto.41.dylib<br />
534534libssl.44.dylib + libcrypto.42.dylib</td>
535535
536536libssl.0.9.8.dylib + libcrypto.0.9.8.dylib</td>
537537
538538libssl.43.dylib + libcrypto.41.dylib<br />
539539libssl.44.dylib + libcrypto.42.dylib<br />
540540libssl.46.dylib + libcrypto.44.dylib</td>
541541
542542libssl.0.9.8.dylib + libcrypto.0.9.8.dylib</td>
543543
544544libssl.43.dylib + libcrypto.41.dylib<br />
545545libssl.44.dylib + libcrypto.42.dylib<br />
546546libssl.46.dylib + libcrypto.44.dylib</td>
547547
548548libssl.0.9.8.dylib + libcrypto.0.9.8.dylib</td>
549549
550550libssl.43.dylib + libcrypto.41.dylib<br />
551551libssl.44.dylib + libcrypto.42.dylib<br />
552552libssl.46.dylib + libcrypto.44.dylib<br />
553553libssl.48.dylib + libcrypto.46.dylib</td>
554554
555555</tbody>
556556
557557All the more reason to **not** use the macOS supplied library versions and either include your own up-to-date library versions or use the Apple Network Framework when you need direct access to protocols like TLS, TCP, and UDP for your custom application protocols. For details of including your own dynamic libraries in FPC or Lazarus applications, refer to [[macOS Dynamic Libraries]].
558558
559559You can continue to use the [[macOS NSURLSession|NSURLSession API]], which is built on the Apple Network Framework, for loading HTTPS-based and URL-based resources. This does not use the OpenSSL or LibreSSL system-included libraries.
560560
561561#### OpenSSL versions
562562
563563As at September 2023, the latest OpenSSL stable version is the 3.0 series which is supported until 7th September 2026. This is also a Long Term Support (LTS) version. Note that OpenSSL 3.0+ has significant ABI changes.
564564
565565The previous LTS version OpenSSL 1.1.1 was on life support until 11th September 2023 at which time all support ceased (see [OpenSSL 1.1.1 End of Life](https://www.openssl.org/blog/blog/2023/09/11/eol-111/)), so no more bug fixes for security problems.
566566
567567All older OpenSSL versions (including 1.1.0, 1.0.2, 1.0.0, 0.9.8 and 0.9.7) have been out of support for much longer, contain multiple security vulnerabilities and should not be used if you value security and your reputation.
568568
569569## Application deployment/distribution
570570
571571### Creating Universal binaries
572572
573573#### aarch64 or Intel x86_64
574574
575575Lazarus will create an application tuned for a single CPU. With the [[Cocoa Interface]] version of the [[LCL]], this is either Apple Silicon aarch64 or Intel x86_64. You may want to distribute your application as a 'Universal Binary', allowing users that may have either an Apple Silicon ARM64 processor or Intel processor to use the application.
576576
577577For the fun details details of creating universal binaries for these two processor architectures, see [[macOS Big Sur changes for developers|Creating a universal binary for aarch64 and x86_64]].
578578
579579#### PowerPC or Intel i386
580580
581581Lazarus will create an application tuned for a single CPU. With the [[Carbon Interface]] version of the [[LCL]], this is either [[PowerPC]] or Intel i386 (32 bit). You may want to distribute your application as a 'Universal Binary', allowing users that may have either a PowerPC or Intel computer to use the application. To do this, you need to compile two versions of your application: one with PowerPC as the target CPU and one as Intel. Next, you need to stitch these two executables together using the macOS program "lipo" (installed with the other Xcode developer tools required by Lazarus). For example, consider two versions of the application 'myprogram'. One in the 'ppc' folder compiled for PowerPC and one in the 'intel' folder compiled for Intel CPUs. You can then combine these two into a universal application by running this command:
582582
583583` lipo -create ./ppc/myproj ./intel/myproj -output ./myproj`
584584
585585Now, copy the newly created application myproj to the MacOS folder inside your [[Application Bundle]].
586586
587587A note on 64 bit binaries: Depending on the version of macOS and after corresponding (cross-)compilers are installed, programs which do not use the LCL can also be built as ppc64 or x86_64 binaries, in particular command line utilities. `lipo` is used in the same way to put them into universal binaries.
588588
589589### Executable size optimisation
590590
591591The normal way to optimise the size of your executable with Lazarus would be:
592592
5935931\. Project \> Project Options \> Compilation and Linking
594594
595595- Check Optimisation level 3 (-O3)
596596- Check Smaller rather than faster (-Os)
597597- Check Smart Linkable (-CX)
598598- Check Link smart (-XX)
599599
6006002\. Project \> Project Options \> Debugging
601601
602602- Uncheck all except Strip Symbols From Executable (-Xs)
603603
604604An example (Xcode 11.3; macOS Mojave 10.14.6):
605605
606606- MyApp compiled with Lazarus defaults (-O1) - executable size 12,011,600 bytes.
607607- MyApp compiled with (-O3) - executable size - executable size 12,011,600 bytes.
608608- MyApp compiled with (-O3) and (-Os) - executable size 12,011,592 bytes.
609609- MyApp compiled with (-O3), (-Os) and (-CX) - executable size 12,011,592 bytes.
610610- MyApp compiled with (-O3), (-Os), (-CX) and (-XX) - executable size 4,624,076 bytes!
611611- MyApp compiled with (-O3), (-Os), (-CX), (-XX) and (-Xs) - executable size 4,624,076 bytes.
612612
613613**Problem:** Whoa! Stripping symbols from the executable ***should have made a difference***. The reason it did not make any difference is that Apple removed the ability to strip the symbol table from an executable in Xcode 3.1 (2007 Leopard 10.5). Previously, in Xcode 2.5 (2005 Tiger 10.4), the linker could strip the symbol table from 32 bit executables. So, providing the (-Xs) option to the linker has no effect at all.
614614
615615**Solution:** The strip command line utility will strip the symbol table. Manually running `strip MyApp` in a Terminal resulted in the executable size further reducing from 4,624,076 bytes to 2,922,396 bytes.
616616
617617### Deploying an application for an older version of the operating system
618618
619619When compiling an application on a specific macOS release without any special options, the application is only guaranteed to work on that particular major operating system release and later (eg when compiling under Snow Leopard 10.6.8, the application is only guaranteed to work on Snow Leopard 10.6.8 and later).
620620
621621Here is an example of an error that you may encounter when running an application compiled for Leopard 10.5 under Tiger 10.4 in case you use the widestring manager:
622622
623623 dyld: Library not loaded: /usr/lib/libiconv.2.dylib
624624 Referenced from: /Volumes/..../yourprogram
625625 Reason: Incompatible library version: yourprogram requires version 7.0.0 or later, but libiconv.2.dylib provides version 5.0.0
626626 Trace/BPT trap
627627
628628Here is an example of an error that you may encounter when running an application compiled for Snow Leopard 10.6.8 under Snow Leopard 10.6.7:
629629
630630`Runtime error 203`
631631
632632#### FPC 2.6.2 and above
633633
634634See the article [[FPC New Features 2.6.2|Support for specifying and querying the deployment version]] which is current up to and including FPC 3.04.
635635
636636For FPC 3.2 (aka fixes branch) see the article [[User Changes 3.2|Default target macOS version]].
637637
638638**Adding custom options only when compiling for macOS**
639639
640640To add the above custom options only when compiling for macOS add to Project / Compiler options / IDE macros / Conditionals:
641641
642642``` pascal
643643if TargetOS = 'darwin' then begin
644644 UsageCustomOptions += ' -WM10.6';
645645end;
646646```
647647
648648#### FPC 2.6.1 and below
649649
650650See the [[FPC 2.6.1 macOS Targets]] article.
651651
652652### Creating an app bundle for a GTK application
653653
654654macOS needs an app bundle for an executable file in order to drop it on the dock or launch it by double-clicking. An app bundle is really just a special folder that can have the same name as the executable, but with an .app extension. Finder doesn't display the .app extension, although you'll see it if you use the UNIX `ls` command in a Terminal window to list the directory contents. For details of how to create an app bundle for a GTK application, see [[Creating an app bundle for GTK applications]].
655655
656656### Code Signing
657657
658658Before macOS Sierra users had the option to allow the installation of applications from "anywhere", "the App Store" and "identified developers". From macOS Sierra on, the "anywhere" option was removed. Thereafter, clicking on an application to run it results in a scary dialog being presented to your users stating: "YourApp can't be opened because it is from an unidentified developer. Your security preferences allow installations of only apps from the App Store and identified developers". The only dialog option is to close it.
659659
660660Users can still run your application, but they have to know they can right-click or control-click on your application and then they get another scary dialog stating "YourApp is from an unidentified developer. Are you sure you want to open it?" but this time the dialog has an "open" button and a pre-focussed "cancel" button.
661661
662662[[Code signing]] an application that has been written in Lazarus and Free Pascal requires only a few steps that are described in the article [[Code Signing for macOS]]. Note: You will need to pay Apple \$US 99 per year to be an "identified developer" and code sign your applications.
663663
664664### Notarization
665665
666666Beginning with macOS Mojave 10.14.5 all new or updated kernel extensions and all software from developers new to distributing with a Developer ID must also be notarized in order to run or users are prevented from running the application with a very scary dialog stating: "YourApp can't be opened because Apple cannot check it for malicious software. This software needs to be updated. Contact the developer for more information."
667667
668668Beginning with macOS 10.15 Catalina (released in October 2019), notarization is required by default for all software. If your application is not notarised, your users get the very scary dialog stating: "YourApp can't be opened because Apple cannot check it for malicious software. This software needs to be updated. Contact the developer for more information." This is in addition to requiring the application to be code signed.
669669
670670The steps to notarize an application are described in the article [[Notarization for macOS 10.14.5+|Notarization for macOS 10.14.5%2B]].
671671
672672### Deploying your application
673673
674674See [[Deploying Your Application|macOS Deployment]].
675675
676676## Using stdout and stderr for logging and debugging
677677
678678### Using a Terminal
679679
680680Unix systems usually allow output to `stdout` and `stderr` for GUI applications (while for Windows it requires creating a console object, using the file handle as `stdout/stderr` or linking the application as a non-GUI). The output is really useful for debugging and logging purposes.
681681
682682macOS GUI applications (the ones created by Lazarus) are deployed as [bundles](http://en.wikipedia.org/wiki/Application_bundle). The bundled application conceals the output. However, it is possible to see the output generated by a simple `WriteLn('Debug: Test')` or `WriteLn(stderr, 'Debug: error alert!');`, by launching the application bundle's executable from a Terminal. Here are the steps:
683683
684684- Launch Terminal (found in Applications \> Utilities)
685685- Change to the project directory
686686- Launch the executable:
687687
688688` $ ./MyApp.app/Contents/MacOS/MyApp`
689689
690690- once MyApp is running, the output will be seen in the Terminal window.
691691
692-<img src="OSXStdOutExample.png" title="OSXStdOutExample.png" width="550" />
692+![](/wiki-images/0/0b/OSXStdOutExample.png)
693693
694694This is especially useful when using Project Options \> Compiler Options \> Debugging when you have ticked the Other debugging info - Use Heaprtc unit (check for mem-leaks). The Terminal will show the report:
695695
696696`  Heap dump by heaptrc unit of ./MyApp`\
697697`  1441 memory blocks allocated : 99080/102040`\
698698`  1441 memory blocks freed     : 99080/102040   `\
699699`  0 unfreed memory blocks : 0`\
700700`  True heap size : 458752 (32 used in System startup)`\
701701`  True free heap : 458720`
702702
703703### Using the Console
704704
705705It is also possible to see the output by using the native macOS `NSLog()` procedure which logs your error message to the Apple System Log facility. You can read the System Log in realtime using the Console utility (located in Applications \> Utilities). As there will be many message entries scrolling by, add MyApp as a process to the search window to filter the entries being shown. For example:
706706
707707``` pascal
708708 MyAudioPlayer := AVAudioPlayer.alloc.initWithContentsOfURL_error(url, @err);
709709
710710 if Assigned(MyAudioPlayer) then
711711 MyAudioPlayer.play
712712 else
713713 NSLog(NSStr('Error in procedure PlayAudio(): %@'), err);
714714```
715715
716716When the audio file is missing from the application's Resources directory, the following appears in the Console system log:
717717
718718![](/wiki-images/1/15/NSLog_Console.png)
719719
720720Note that the NSlog information also appears in the Terminal if you have opened the application as explained above.
721721
722722## Troubleshooting
723723
724724The following articles are relevant for troubleshooting application issues:
725725
726726- [[Cocoa Debugging|Cocoa debugging]]
727727- [[lldb|Debugging with the macOS lldb debugger]]
728728- [[macOS Gatekeeper Debugging Tips]]
729729- [[LazLogger|LazLogger (part of Lazarus) will log to a file]]
730730- [[Logging exceptions]]
731731- [[heaptrc|Memory leak checking]]
732732
733733Seek help in the forums:
734734
735735- [[Forum|How to use the Forums effectively]]
736736- [FPC and Lazarus Forums](https://forum.lazarus.freepascal.org)
737737
738738Obscure native macOS error codes?
739739
740740- [Look up Apple API errors quickly!](https://OSStatus.com)
741741
742742Finally, if the issue is in Free Pascal or Lazarus and not your own code:
743743
744744- [[How do I create a bug report]]
745745- [[Tips on writing bug reports]]
746746
747747## Converting legacy Pascal code
748748
749749Bxxx code macro replacements:
750750
751751- BAnd(i,j) = ((i) and (j))
752752- BOr(i,j) = ((i) or (j))
753753- BXOr(i,j) = ((i) xor (j))
754754- Bsr(i,n) = ((i) shr (n))
755755- Bsl(i,n) = ((i) shl (n))
756756- BTST(i,n) = ((((i) shr (n)) and 1)=1)
757757- BSet(i,n) = i:=(i) or (1 shl (n))
758758- BClr(i,n) = i:=(i) and not (1 shl (n))
759759
760760See also: [[Porting from Mac Pascal]].
761761
762762## See also
763763
764764- [[Portal:Mac|Lazarus/FPC macOS Portal]] - more macOS tips and code snippets
765765
766766- [[Installing Lazarus on macOS]]
767767
768768## External Links
769769
770770- [Apple developer documents](https://developer.apple.com/documentation/) - current and up to date
771771
772772- [Apple archived developer documents](https://developer.apple.com/library/archive/navigation/) - dated, but often more helpful
773773
774774- [Making Your Lazarus App Mac-Friendly](https://macpgmr.github.io/MacXPlatform/MacXPlatform_Part8.html) (Apple help info outdated)
775775
776776- Using Xcode for Pascal projects, refer to [this page](https://macpgmr.github.io/ObjP/ProjectXC.html).
777777
778778---
779779*From the Free Pascal wiki, page "macOS Programming Tips", as it stood on 2023-09-13 after a change by Trev, out of the wiki's dump of 2024-05-26. Copyright stays with the author who wrote it, according to the old wiki's [[Licensing]] page. If you have concerns about this material, [message the admin](/wiki-contact).*

Back to history