indirectly CALL with PLT and GOT

发布于 2021-10-28  23 次阅读


bkgnd

FOA,English is not my first language and this is just a note for myself,if you take this post by accident please forgive my mistakes

Main

​​

Full procedure picture is uploaded

when statically disassemble ,got[1] and [2] is 0x0000 0000.they will be filled by ldd correctly

BTW,we must notice that got and got.plt is aproximately equal to DATA section,while .plt is aproximately equal to TEXT section

resolve happen iff first call happens

resolve find global func addr by its name stored in .dynstr