-
Book Overview & Buying
-
Table Of Contents
Reverse Engineering Armv8-A Systems
By :
The program header gives information about how to place the ELF binary into memory space efficiently. Before running the program, the operating system’s loader reads the program headers to load the program into memory. These headers consist of a series of segments, detailing where and how to load the ELF file’s data into memory.
In this section, the program header will be covered. First, we will look at where the program header is located in the ELF file.
Figure 2.9 illustrates the location of the program header in the ELF file.

Figure 2.9: Position of program headers in ELF
First, let’s take a look at 1 in the figure. The arrow in 1 indicates the location of the program header. The e_phoff field of the Elf64_Ehdr structure indicates the location of the program header in ELF. Here, the Elf64_Ehdr structure represents the ELF header.
The location of the program header is different in each...