Hot answers tagged

1

You understanding is correct: PE's IAT is resolved by the system loader and can be made read-only afterwards. ELF's GOT entries initially point to PLT stubs and are overwritten with the final address on the first call.. meaning GOT needs to remain writable. Writable GOT is indeed a known source of vulnerabilities which is why mitigations like RELRO have ...


Only top voted, non community-wiki answers of a minimum length are eligible