eresi icon indicating copy to clipboard operation
eresi copied to clipboard

ELFsh cannot load packed binaries

Open thorkill opened this issue 9 years ago • 0 comments

If a binary is packed (for instance with UPX), elfsh will not be able to load it directly in unpacked format. The goal is this feature is to load packed binaries transparently.

The ideas for doing this is to create a new vector for the file loading. Vectors (which are now part of libaspect and not anymore of libelfsh) can make the file loading dependant on parameters, so that the file loading function is looked up depending on precise parameters (like fields in the headers, or any other information stored in the binary)

Example of use of those vectors are in libelfsh/hooks.c

Vectors implementation stands in : libaspect/vectors.c

Enjoy


Ticket: 8 Reported by: jfv on Fri Dec 22 03:00:14 2006

thorkill avatar Apr 23 '16 20:04 thorkill