version 1.12, 2017/06/25 16:01:07
|
version 1.13, 2017/06/25 16:11:04
|
Line 149 as opposed to the following binary, buil
|
Line 149 as opposed to the following binary, buil
|
|
|
The latter result is then what is expected. |
The latter result is then what is expected. |
|
|
## Checking for RELRO |
## Checking for partial RELRO |
|
|
The following command should list a section called `RELRO`: |
The following command should list a section called `RELRO`: |
|
|
Line 161 The following command should list a sect
|
Line 161 The following command should list a sect
|
[...] |
[...] |
RELRO off 0x0000000000000d78 vaddr 0x0000000000600d78 paddr 0x0000000000600d78 align 2**0 |
RELRO off 0x0000000000000d78 vaddr 0x0000000000600d78 paddr 0x0000000000600d78 align 2**0 |
|
|
|
## Checking for full RELRO |
|
|
|
The dynamic loader will apply RELRO immediately when detecting the presence of |
|
the `BIND_NOW` flag: |
|
|
|
$ objdump -x /path/to/bin/ary |
|
|
|
/path/to/bin/ary: file format elf64-x86-64 |
|
|
|
Dynamic Section: |
|
[...] |
|
BIND_NOW 0x0000000000000000 |
|
|
|
This has to be combined with partial RELRO (see above) to be fully efficient. |
|
|
## Checking for SSP |
## Checking for SSP |
|
|
Building objects, binaries and libraries with SSP will affect the presence of |
Building objects, binaries and libraries with SSP will affect the presence of |