Computing method for ELF file mapping base address, and device

A calculation method and base address technology, applied in the direction of calculation, program control device, program control design, etc., can solve the problem of deviation between the position of the dynamic symbol table and the relocation link process table and the actual position, so as to speed up the interception process and The effect of processing efficiency, ensuring accuracy, and improving calculation accuracy

Active Publication Date: 2017-10-13
BEIJING KINGSOFT SECURITY MANAGEMENT SYST TECH CO LTD
View PDF8 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] In the API interception process, in order to obtain the content of the dynamic symbol table and the relocation link process table of the ELF file, it is necessary to calculate and determine the positions of the dynamic symbol table and the relocation link process table, but the existing API interception technology often does not ELF files containing two types of EXE and DYN are distinguished, resulting in a deviation between the location of the dynamic symbol table and the relocation link process table and the actual location

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Computing method for ELF file mapping base address, and device
  • Computing method for ELF file mapping base address, and device
  • Computing method for ELF file mapping base address, and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0021] In order to clearly illustrate the solutions in the present invention, preferred embodiments are given below and detailed descriptions are given in conjunction with the accompanying drawings. The following description is merely exemplary in nature and is not intended to limit the application or uses of the present disclosure. It should be understood that throughout the drawings, corresponding reference numerals indicate like or corresponding parts and features.

[0022] Such as figure 1 As shown, the present invention provides a kind of calculation method of ELF file image base address, including:

[0023] S101. Obtain the information of the ELF file, and determine the type of the ELF file according to the information, wherein the type of the ELF file includes an EXE file and a DYN file;

[0024] S102. When the type of the ELF file is an EXE file, sequentially obtain the program header of the ELF file;

[0025] S103 , judging whether the program header satisfies the ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a computing method for an ELF file mapping base address. The method comprises: obtaining information of an ELF file, according to the information, determining the type of the ELF file, wherein the type of the ELF file includes an EXE file and a DYN file; when the type of the ELF file is the EXE file, obtaining program headers of the EXE file in sequence; determining whether the program headers satisfy a preset position condition and a section header condition; if yes, setting a virtual address of the program header as a mapping base address of the EXE file. The method distinguishes according to the type of the ELF file in an ELF base address computational process, and base addresses of two types of files of EXE and DYN are respectively calculated. The method can improve calculation precision for positions of dynamic symbol tables and relocation link process tables, greatly accelerates interception process and processing efficiency of API, and ensures accuracy for API to intercept related data.

Description

technical field [0001] The invention relates to the technical field of computer API interception, in particular to a calculation method and device for an ELF file image base address. Background technique [0002] In order to realize the debugging of computer applications and expand the original functions, the existing computing technology generally adopts hook technology to intercept the calls of different APIs. There are many technologies for intercepting APIs, which are roughly divided into user layer and kernel layer interception. , among them, for the user-level interception technology, it is generally to directly modify the memory and program flow of the API to be intercepted, so that the program jumps to the specified address for execution, and then returns to the original address. [0003] In the API interception process, in order to obtain the content of the dynamic symbol table and the relocation link process table of the ELF file, it is necessary to calculate and d...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F9/44G06F9/445
CPCG06F9/44521
Inventor 秦青杨锐
Owner BEIJING KINGSOFT SECURITY MANAGEMENT SYST TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap