3 ms·
A good intro but doesn't go in depth enough, and it glosses over the interface between user and kernel mode. Particularly, in modern Linux binaries, syscalls a
by United857 13y ago
A good intro but doesn't go in depth enough, and it glosses over the interface between user and kernel mode.
Particularly, in modern Linux binaries, syscalls are not hardcoded as int instructions, but are dynamically mapped via a "virtual DSO" mechanism to the best instruction for the current architecture (int 80, or syscall/sysenter).
Also, in practice, the ELF would be dynamically linking to libc, and libc would be making the calls.
- ange4771_ 13y agoAn introduction on a single page can't go deep! "This is the whole file, however, most ELF files contain many more elements. Explanations are simplified, for conciseness."
- laveur 13y agoI think the point of it was to not explain how elf works but to explain the file format it self.
- Scene_Cast2 13y agoIt also glosses over relocation mechanisms. I was curious if relocation info is stored in a section (like .reloc in Windows).