linux - ELF Header, are offset 06h and 14h duplicated? -


i know if these 2 headers have same meaning nor why?

from wikipedia :

offset 06h : set 1 original version of elf.

offset 14h : set 1 original version of elf.

reference : http://en.wikipedia.org/wiki/executable_and_linkable_format

you may want read more detailed document include information you're looking for:

http://www.skyfree.org/linux/references/elf_format.pdf

the header structure

#define einident   16  typedefstruct{     unsigned char e_ident[einident];     elf32_half    e_type;     elf32_half    e_machine;     elf32_word    e_version;     elf32_addr    e_entry;     elf32_off     e_phoff;     elf32_off     e_shoff;     elf32_word    e_flags;     elf32_half    e_ehsize;     elf32_half    e_phentsize;     elf32_half    e_phnum;     elf32_half    e_shentsize;     elf32_half    e_shnum;     elf32_half    e_shstrndx; } elf32ehdr; 

the 2nd e_version defines version 1 (i.e. "current")

e_version member identifies object file version.           name        value    meaning           ev_none       0      invalid version           ev_current    1      current version            value 1 signifies original file format; extensions           create new versions higher numbers. value of ev_current,           though given 1 above, change necessary reflect           current version number. 

the version in e_ident part ev_current, same version:

ei_version byte e_ident[ei_version] specifies elf header version            number. currently, value must ev_current,            explained above e_version. 

from understand, version has not changed yet still 1 in both places, change in future...


Comments

Popular posts from this blog

php - SPIP: From Tag directly to an article -

jquery - isAjaxRequest always return false -

ruby on rails - In a controller spec, how to find a specific tag in the generated view? -