i know we have .dynsym
and .symtab
, how can i differentiate between imports and exports , like in pe in windows, imports and exports are in data directories, is it and equivalent in elf?
how can i differentiate between imports and exports
Easy: any symbol in the dynamic symbol table (in .dynsym
) for which .st_shndx == SHN_UNDEF
(references special UND
section) is an import, and every other symbol is defined and exported.
Note that .symtab
doesn't matter and can be completely stripped -- the dynamic loader never looks at it.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With