Mdthbs

Which comes first? Multiple Imputation, Splitting into train/test, or Standardization/Normalization

Is an early checkout possible at a hotel before its reception opens?

Can a black dragonborn's acid breath weapon destroy objects?

Taxi Services at Didcot

Movie about a boy who was born old and grew young

How Can I Tell The Difference Between Unmarked Sugar and Stevia?

Arriving at the same result with the opposite hypotheses

What is the actual quality of machine translations?

Find the Factorial From the Given Prime Relationship

Inconsistent behavior of compiler optimization of unused string

How would a aircraft visually signal "in distress"?

Should I compare a std::string to "string" or "string"s?

PhD - Well known professor or well known school?

Should I give professor gift at the beginning of my PhD?

Soft question: Examples where lack of mathematical rigour cause security breaches?

Using "subway" as name for London Underground?

Was there a priest on the Titanic who stayed on the ship giving confession to as many as he could?

Frame failure sudden death?

What does the term "railed" mean in signal processing?

Can anyone identify this tank?

Why doesn't Adrian Toomes give up Spider-Man's identity?

Are there downsides to using std::string as a buffer?

Facebook Marketing API asset access suddenly denied

Compiling c files on ubuntu and using the executable on Windows

How does linux decide the load address and entry point when execve an ELF?

How does the ELF loader determine the initial stack size?

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}

1

When linux execve() an ELF, it will mmap that ELF into the process's memory space and start to run code from the entry point. But how does the kernel decide the load address and entry point of the ELF?

If ASLR is disabled, it looks up the .p_vaddr of each PT_LOAD segment and use .e_entry of ELF header as entry point.

But what if ASLR is enabled? Will the kernel simply add an random shift to all the aboves but keeps their relative position?

Will the content of ELF affect kernel's behavior? Like if the least .p_vaddr of PT_LOAD segment is zero or non-zero? Like the .e_type of ELF header is ET_DYN or ET_EXEC?

I'm talking about x86_64, especially.

linux-kernel exec elf aslr

share|improve this question

edited 1 hour ago

Sergiy Kolodyazhnyy

10.8k42765

asked 2 hours ago

炸鱼薯条德里克炸鱼薯条德里克

6281417

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Very interesting question, I'd like to learn about this as well
  
  – Sergiy Kolodyazhnyy
  1 hour ago
  

  
  
  
  

add a comment | 

1

When linux execve() an ELF, it will mmap that ELF into the process's memory space and start to run code from the entry point. But how does the kernel decide the load address and entry point of the ELF?

If ASLR is disabled, it looks up the .p_vaddr of each PT_LOAD segment and use .e_entry of ELF header as entry point.

But what if ASLR is enabled? Will the kernel simply add an random shift to all the aboves but keeps their relative position?

Will the content of ELF affect kernel's behavior? Like if the least .p_vaddr of PT_LOAD segment is zero or non-zero? Like the .e_type of ELF header is ET_DYN or ET_EXEC?

I'm talking about x86_64, especially.

linux-kernel exec elf aslr

share|improve this question

edited 1 hour ago

Sergiy Kolodyazhnyy

10.8k42765

asked 2 hours ago

炸鱼薯条德里克炸鱼薯条德里克

6281417

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Very interesting question, I'd like to learn about this as well
  
  – Sergiy Kolodyazhnyy
  1 hour ago
  

  
  
  
  

add a comment | 

When linux execve() an ELF, it will mmap that ELF into the process's memory space and start to run code from the entry point. But how does the kernel decide the load address and entry point of the ELF?

If ASLR is disabled, it looks up the .p_vaddr of each PT_LOAD segment and use .e_entry of ELF header as entry point.

But what if ASLR is enabled? Will the kernel simply add an random shift to all the aboves but keeps their relative position?

Will the content of ELF affect kernel's behavior? Like if the least .p_vaddr of PT_LOAD segment is zero or non-zero? Like the .e_type of ELF header is ET_DYN or ET_EXEC?

I'm talking about x86_64, especially.

linux-kernel exec elf aslr

share|improve this question

edited 1 hour ago

Sergiy Kolodyazhnyy

10.8k42765

asked 2 hours ago

炸鱼薯条德里克炸鱼薯条德里克

6281417

share|improve this question

edited 1 hour ago

Sergiy Kolodyazhnyy

10.8k42765

asked 2 hours ago

炸鱼薯条德里克炸鱼薯条德里克

6281417

share|improve this question

edited 1 hour ago

Sergiy Kolodyazhnyy

10.8k42765

asked 2 hours ago

炸鱼薯条德里克炸鱼薯条德里克

6281417

edited 1 hour ago

Sergiy Kolodyazhnyy

10.8k42765

edited 1 hour ago

Sergiy Kolodyazhnyy

10.8k42765

asked 2 hours ago

炸鱼薯条德里克炸鱼薯条德里克

6281417

asked 2 hours ago

炸鱼薯条德里克炸鱼薯条德里克

6281417