linux - ELF Header, are offset 06h and 14h duplicated? -
i know if these 2 headers have same meaning nor why?
from wikipedia :
offset 06h : set 1 original version of elf.
offset 14h : set 1 original version of elf.
reference : http://en.wikipedia.org/wiki/executable_and_linkable_format
you may want read more detailed document include information you're looking for:
http://www.skyfree.org/linux/references/elf_format.pdf
the header structure
#define einident 16 typedefstruct{ unsigned char e_ident[einident]; elf32_half e_type; elf32_half e_machine; elf32_word e_version; elf32_addr e_entry; elf32_off e_phoff; elf32_off e_shoff; elf32_word e_flags; elf32_half e_ehsize; elf32_half e_phentsize; elf32_half e_phnum; elf32_half e_shentsize; elf32_half e_shnum; elf32_half e_shstrndx; } elf32ehdr; the 2nd e_version defines version 1 (i.e. "current")
e_version member identifies object file version. name value meaning ev_none 0 invalid version ev_current 1 current version value 1 signifies original file format; extensions create new versions higher numbers. value of ev_current, though given 1 above, change necessary reflect current version number. the version in e_ident part ev_current, same version:
ei_version byte e_ident[ei_version] specifies elf header version number. currently, value must ev_current, explained above e_version. from understand, version has not changed yet still 1 in both places, change in future...
Comments
Post a Comment