eresi
eresi copied to clipboard
ELFsh cannot load packed binaries
If a binary is packed (for instance with UPX), elfsh will not be able to load it directly in unpacked format. The goal is this feature is to load packed binaries transparently.
The ideas for doing this is to create a new vector for the file loading. Vectors (which are now part of libaspect and not anymore of libelfsh) can make the file loading dependant on parameters, so that the file loading function is looked up depending on precise parameters (like fields in the headers, or any other information stored in the binary)
Example of use of those vectors are in libelfsh/hooks.c
Vectors implementation stands in : libaspect/vectors.c
Enjoy
Ticket: 8 Reported by: jfv on Fri Dec 22 03:00:14 2006