i know we have .dynsym and .symtab, how can i differentiate between imports and exports , like in pe in windows, imports and exports are in data directories, is it and equivalent in elf?
how can i differentiate between imports and exports
Easy: any symbol in the dynamic symbol table (in .dynsym) for which .st_shndx == SHN_UNDEF (references special UND section) is an import, and every other symbol is defined and exported.
Note that .symtab doesn't matter and can be completely stripped -- the dynamic loader never looks at it.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With