check entitle and not register mach exception handler

Crashlytics/Crashlytics/Components/FIRCLSContext.h

@@ -45,7 +45,7 @@
 typedef struct {
   volatile bool initialized;
   volatile bool debuggerAttached;
   const char* previouslyCrashedFileFullPath;
   const char* logPath;
   // Initial report path represents the report path used to initialized the context;
   // where non-on-demand exceptions and other crashes will be written.
@@ -99,5 +99,8 @@
 bool FIRCLSContextHasCrashed(void);
 void FIRCLSContextMarkHasCrashed(void);
 bool FIRCLSContextMarkAndCheckIfCrashed(void);
-
+void*(SecTaskCopyValueForEntitlement)(void* task,
+                                      CFStringRef entitlement,
+                                      CFErrorRef _Nullable* error);
+void*(SecTaskCreateFromSelf)(CFAllocatorRef allocator);
 __END_DECLS

Crashlytics/Crashlytics/Components/FIRCLSContext.m

@@ -182,10 +182,19 @@
 
 #if CLS_MACH_EXCEPTION_SUPPORTED
     dispatch_group_async(group, queue, ^{
-      _firclsContext.readonly->machException.path =
-          FIRCLSContextAppendToRoot(rootPath, FIRCLSReportMachExceptionFile);
-
-      FIRCLSMachExceptionInit(&_firclsContext.readonly->machException);
+      CFErrorRef err = nil;
+      // return number or nil if no such entitlement
+      // https://developer.apple.com/documentation/bundleresources/entitlements/com.apple.security.hardened-process.platform-restrictions
+      NSNumber* hasRuntimeRestriction = (__bridge NSNumber*)SecTaskCopyValueForEntitlement(
+          SecTaskCreateFromSelf(NULL),
+          CFSTR("com.apple.security.hardened-process.platform-restrictions"), &err);
+      // if does not have runtime restriction and no error
+      if (!hasRuntimeRestriction && !err) {
+        _firclsContext.readonly->machException.path =
+            FIRCLSContextAppendToRoot(rootPath, FIRCLSReportMachExceptionFile);
+
+        FIRCLSMachExceptionInit(&_firclsContext.readonly->machException);
+      }
     });
 #endif