Skip to content

关于 “巧用符号表 - 探求 fishhook 原理(一)”中所讲的 “Linkedit Base Addr”问题 #12

@Tbwas

Description

@Tbwas

image
如图所示,作者所讲 LC_DYSYMTAB 的offset是基于_LINKEDIT 段的,我认为这并不准确。__PAGEZERO的VMAdrees起止为0x00 ~ 0x100000000,段的offset是相对于0x100000000,即__PAGEZERO段的虚拟空间大小,如下图:
image
image
image

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions