The ABI status of ELF hash tables

Posted Aug 21, 2022 10:38 UTC (Sun) by willy (subscriber, #9762)
Parent article: The ABI status of ELF hash tables

Nobody seems to have pointed out the obvious solution here -- make it in the EAC developers interests to fix the bug.

If the linker preferentially uses DT_GNU_HASH and ignores DT_HASH, and EAC only checks DT_HASH, then create cheats for popular games that include a faked DT_HASH section which pretends everything is OK.

The ABI status of ELF hash tables

Posted Aug 21, 2022 13:23 UTC (Sun) by k8to (guest, #15413) [Link]

I love it.

The ABI status of ELF hash tables

Posted Aug 21, 2022 16:41 UTC (Sun) by fw (subscriber, #26023) [Link] (1 responses)

glibc already prefers DT_GNU_HASH over DT_HASH when an object has both. I assume it's been this way since the introduction of DT_GNU_HASH.

I haven't look at the tool. It's not just consistency checks those DT_HASH lookups could be used for. Maybe they use DT_HASH lookups to find the original definition of dlsym after interposing it.

The ABI status of ELF hash tables

Posted Aug 21, 2022 23:52 UTC (Sun) by k8to (guest, #15413) [Link]

Either way, the easy anti-cheat developers just admitted that this component of their tool is easily misled, which kind of invalidates the utility of having that functionality especially now that it's public knowledge.