Geek asks and answers

Import ELF binary names

Where are the names of imported functions stored in ELF format? Is it always possible to list all import names, for example, for PE executables?

For example, if binary uses printf, can this be said simply by static analysis of the binary itself?

+5
source share
1 answer

In ELF, they are called undefined characters. You can view a list of undefined characters:

  • nm -D <file>|grep -w U

  • objdump -T <file>|grep "\*UND\*"

ELF files do not determine which characters come from libraries; it simply adds a list of shared libraries for linking to the ELF binary and allows the linker to find characters in libraries.

+7
source

More articles:


All Articles