科技行者

行者学院 转型私董会 科技行者专题报道 网红大战科技行者

知识库

知识库 安全导航

至顶网›网络频道 ›UNIX系统 目标文件初探

UNIX系统 目标文件初探

  • 扫一扫
    分享文章到微信

  • 扫一扫
    关注官方公众号
    至顶头条

UNIX(R) 系统中运行的程序遵守一种称为目标文件格式的精心设计。了解更多关于目标文件格式的内容，以及可以用来研究系统中目标文件的工具。

来源：chinaitlab 2007年12月27日

关键字： unix 系统安全

  • 评论
  • 分享微博
  • 分享邮件

在本页阅读全文(共8页)

Dynamic section at offset 0x4a8 contains 20 entries:
  Tag        Type                         Name/Value
 0x00000001 (NEEDED)                     Shared library: [libc.so.6]
 0x0000000c (INIT)                       0x8048278
 0x0000000d (FINI)                       0x8048458
 0x00000004 (HASH)                       0x8048148
 0x00000005 (STRTAB)                     0x80481d4
 0x00000006 (SYMTAB)                     0x8048174
 0x0000000a (STRSZ)                      94 (bytes)
 0x0000000b (SYMENT)                     16 (bytes)
 0x00000015 (DEBUG)                      0x0
 0x00000003 (PLTGOT)                     0x8049574
 0x00000002 (PLTRELSZ)                   16 (bytes)
 0x00000014 (PLTREL)                     REL
 0x00000017 (JMPREL)                     0x8048268
 0x00000011 (REL)                        0x8048260
 0x00000012 (RELSZ)                      8 (bytes)
 0x00000013 (RELENT)                     8 (bytes)
 0x6ffffffe (VERNEED)                    0x8048240
 0x6fffffff (VERNEEDNUM)                 1
 0x6ffffff0 (VERSYM)                     0x8048232
 0x00000000 (NULL)                       0x0

Relocation section '.rel.dyn' at offset 0x260 contains 1 entries:
 Offset     Info    Type            Sym.Value  Sym. Name
08049570  00000506 R_386_GLOB_DAT    00000000   __gmon_start__

Relocation section '.rel.plt' at offset 0x268 contains 2 entries:
 Offset     Info    Type            Sym.Value  Sym. Name
08049580  00000107 R_386_JUMP_SLOT   00000000   puts
08049584  00000207 R_386_JUMP_SLOT   00000000   __libc_start_main

There are no unwind sections in this file.

Symbol table '.dynsym' contains 6 entries:
   Num:    Value  Size Type    Bind   Vis      Ndx Name
     0: 00000000     0 NOTYPE  LOCAL  DEFAULT  UND
     1: 00000000   378 FUNC    GLOBAL DEFAULT  UND puts@GLIBC_2.0 (2)
     2: 00000000   230 FUNC    GLOBAL DEFAULT  UND __libc_start_main@GLIBC_2.0 (2)
     3: 0804847c     4 OBJECT  GLOBAL DEFAULT   14 _IO_stdin_used
     4: 00000000     0 NOTYPE  WEAK   DEFAULT  UND _Jv_RegisterClasses
     5: 00000000     0 NOTYPE  WEAK   DEFAULT  UND __gmon_start__

Symbol table '.symtab' contains 82 entries:
   Num:    Value  Size Type    Bind   Vis      Ndx Name
     0: 00000000     0 NOTYPE  LOCAL  DEFAULT  UND
     1: 08048114     0 SECTION LOCAL  DEFAULT    1
     2: 08048128     0 SECTION LOCAL  DEFAULT    2
     3: 08048148     0 SECTION LOCAL  DEFAULT    3
     4: 08048174     0 SECTION LOCAL  DEFAULT    4
     5: 080481d4     0 SECTION LOCAL  DEFAULT    5
     6: 08048232     0 SECTION LOCAL  DEFAULT    6
     7: 08048240     0 SECTION LOCAL  DEFAULT    7
     8: 08048260     0 SECTION LOCAL  DEFAULT    8
     9: 08048268     0 SECTION LOCAL  DEFAULT    9
    10: 08048278     0 SECTION LOCAL  DEFAULT   10
    11: 08048290     0 SECTION LOCAL  DEFAULT   11
    12: 080482c0     0 SECTION LOCAL  DEFAULT   12
    13: 08048458     0 SECTION LOCAL  DEFAULT   13
    14: 08048478     0 SECTION LOCAL  DEFAULT   14
    15: 08048490     0 SECTION LOCAL  DEFAULT   15
    16: 08049494     0 SECTION LOCAL  DEFAULT   16
    17: 0804949c     0 SECTION LOCAL  DEFAULT   17
    18: 080494a4     0 SECTION LOCAL  DEFAULT   18
    19: 080494a8     0 SECTION LOCAL  DEFAULT   19
    20: 08049570     0 SECTION LOCAL  DEFAULT   20
    21: 08049574     0 SECTION LOCAL  DEFAULT   21
    22: 08049588     0 SECTION LOCAL  DEFAULT   22
    23: 08049594     0 SECTION LOCAL  DEFAULT   23
    24: 00000000     0 SECTION LOCAL  DEFAULT   24
    25: 00000000     0 SECTION LOCAL  DEFAULT   25
    26: 00000000     0 SECTION LOCAL  DEFAULT   26
    27: 00000000     0 SECTION LOCAL  DEFAULT   27
    28: 00000000     0 SECTION LOCAL  DEFAULT   28
    29: 00000000     0 SECTION LOCAL  DEFAULT   29
    30: 00000000     0 SECTION LOCAL  DEFAULT   30
    31: 00000000     0 SECTION LOCAL  DEFAULT   31
    32: 00000000     0 SECTION LOCAL  DEFAULT   32
    33: 00000000     0 SECTION LOCAL  DEFAULT   33
    34: 00000000     0 FILE    LOCAL  DEFAULT  ABS abi-note.S
    35: 00000000     0 FILE    LOCAL  DEFAULT  ABS ../sysdeps/i386/elf/start
    36: 00000000     0 FILE    LOCAL  DEFAULT  ABS init.c
    37: 00000000     0 FILE    LOCAL  DEFAULT  ABS initfini.c
    38: 00000000     0 FILE    LOCAL  DEFAULT  ABS /build/buildd/glibc-2.3.6
    39: 080482e4     0 FUNC    LOCAL  DEFAULT   12 call_gmon_start
    40: 00000000     0 FILE    LOCAL  DEFAULT  ABS crtstuff.c
    41: 08049494     0 OBJECT  LOCAL  DEFAULT   16 __CTOR_LIST__
    42: 0804949c     0 OBJECT  LOCAL  DEFAULT   17 __DTOR_LIST__
    43: 080494a4     0 OBJECT  LOCAL  DEFAULT   18 __JCR_LIST__
    44: 08049594     1 OBJECT  LOCAL  DEFAULT   23 completed.4463
    45: 08049590     0 OBJECT  LOCAL  DEFAULT   22 p.4462
    46: 0804830c     0 FUNC    LOCAL  DEFAULT   12 __do_global_dtors_aux
    47: 0804833b     0 FUNC    LOCAL  DEFAULT   12 frame_dummy
    48: 00000000     0 FILE    LOCAL  DEFAULT  ABS crtstuff.c
    49: 08049498     0 OBJECT  LOCAL  DEFAULT   16 __CTOR_END__
    50: 080494a0     0 OBJECT  LOCAL  DEFAULT   17 __DTOR_END__
    51: 08048490     0 OBJECT  LOCAL  DEFAULT   15 __FRAME_END__
    52: 080494a4     0 OBJECT  LOCAL  DEFAULT   18 __JCR_END__
    53: 0804842c     0 FUNC    LOCAL  DEFAULT   12 __do_global_ctors_aux
    54: 00000000     0 FILE    LOCAL  DEFAULT  ABS initfini.c
    55: 00000000     0 FILE    LOCAL  DEFAULT  ABS /build/buildd/glibc-2.3.6
    56: 00000000     0 FILE    LOCAL  DEFAULT  ABS hw.c
    57: 080494a8     0 OBJECT  LOCAL  HIDDEN   19 _DYNAMIC
    58: 08049494     0 NOTYPE  LOCAL  HIDDEN  ABS __fini_array_end
    59: 08049494     0 NOTYPE  LOCAL  HIDDEN  ABS __fini_array_start
    60: 08049494     0 NOTYPE  LOCAL  HIDDEN  ABS __init_array_end
    61: 08049574     0 OBJECT  LOCAL  HIDDEN   21 _GLOBAL_OFFSET_TABLE_
    62: 08049494     0 NOTYPE  LOCAL  HIDDEN  ABS __init_array_start
    63: 08048478     4 OBJECT  GLOBAL DEFAULT   14 _fp_hw
    64: 0804958c     0 OBJECT  GLOBAL HIDDEN   22 __dso_handle
    65: 080483e1    74 FUNC    GLOBAL DEFAULT   12 __libc_csu_fini
    66: 00000000   378 FUNC    GLOBAL DEFAULT  UND puts@@GLIBC_2.0
    67: 08048278     0 FUNC    GLOBAL DEFAULT   10 _init
    68: 080482c0     0 FUNC    GLOBAL DEFAULT   12 _start
    69: 08048390    81 FUNC    GLOBAL DEFAULT   12 __libc_csu_init
    70: 08049594     0 NOTYPE  GLOBAL DEFAULT  ABS __bss_start
    71: 08048360    47 FUNC    GLOBAL DEFAULT   12 main
    72: 00000000   230 FUNC    GLOBAL DEFAULT  UND __libc_start_main@@GLIBC_
    73: 08049588     0 NOTYPE  WEAK   DEFAULT   22 data_start
    74: 08048458     0 FUNC    GLOBAL DEFAULT   13 _fini
    75: 08049594     0 NOTYPE  GLOBAL DEFAULT  ABS _edata
    76: 08048308     0 FUNC    GLOBAL HIDDEN   12 __i686.get_pc_thunk.bx
    77: 08049598     0 NOTYPE  GLOBAL DEFAULT  ABS _end
    78: 0804847c     4 OBJECT  GLOBAL DEFAULT   14 _IO_stdin_used
    79: 08049588     0 NOTYPE  GLOBAL DEFAULT   22 __data_start
    80: 00000000     0 NOTYPE  WEAK   DEFAULT  UND _Jv_RegisterClasses
    81: 00000000     0 NOTYPE  WEAK   DEFAULT  UND __gmon_start__

Histogram for bucket list length (total of 3 buckets):
 Length  Number     % of total  Coverage
      0  0          (  0.0%)
      1  1          ( 33.3%)     20.0%
      2  2          ( 66.7%)    100.0%

Version symbols section '.gnu.version' contains 6 entries:
 Addr: 0000000008048232  Offset: 0x000232  Link: 4 (.dynsym)
  000:   0 (*local*)       2 (GLIBC_2.0)     2 (GLIBC_2.0)     1 (*global*)
  004:   0 (*local*)       0 (*local*)

Version needs section '.gnu.version_r' contains 1 entries:
 Addr: 0x0000000008048240  Offset: 0x000240  Link to section: 5 (.dynstr)
  000000: Version: 1  File: libc.so.6  Cnt: 1
  0x0010:   Name: GLIBC_2.0  Flags: none  Version: 2

Notes at offset 0x00000128 with length 0x00000020:
  Owner         Data size       Description
  GNU           0x00000010      NT_VERSION (version)

    • 评论
    • 分享微博
    • 分享邮件
    VIP专区
    邮件订阅

    如果您非常迫切的想了解IT领域最新产品与技术信息，那么订阅至顶网技术邮件将是您的最佳途径之一。

    重磅专题
    往期文章
    最新文章

    业界热点:

    北京第二十六维信息技术有限公司（至顶网）版权所有. 京ICP备15039648号-7 京ICP证161336号 京公网安备 11010802021500号