3 ms·

This tutorial should be read alongside his Address Relocation answer from Stack Overflow: http://stackoverflow.com/questions/12122446/how-does-c-linking-work-i

This tutorial should be read alongside his Address Relocation answer from Stack Overflow: http://stackoverflow.com/questions/12122446/how-does-c-linking-work-in-practice/30507725#30507725 http://stackoverflow.com/questions/12122446/how-does-c-linki... And then you might want to skim through An Evil Copy: How the Loader Betrays You: https://www.microsoft.com/en-us/research/publication/evil-copy-loader-betrays https://www.microsoft.com/en-us/research/publication/evil-co...

theoh 9y ago
That new CoRev paper is interesting. I haven't had time to read it in detail but it sounds like an intriguing case for compiler/linker buffs. Slightly OT, there was a very fun ActionScript exploit published by Mark Dowd of IBM in 2008. I'm reminded of it because it's about memory protection vulnerabilities. "Application-Specific Attacks: Leveraging the ActionScript Virtual Machine" https://www.cs.utexas.edu/~shmat/courses/cs6431/dowd.pdf https://www.cs.utexas.edu/~shmat/courses/cs6431/dowd.pdf