The ABI status of ELF hash tables
The ABI status of ELF hash tables
Posted Aug 21, 2022 16:41 UTC (Sun) by fw (subscriber, #26023)In reply to: The ABI status of ELF hash tables by willy
Parent article: The ABI status of ELF hash tables
glibc already prefers DT_GNU_HASH over DT_HASH when an object has both. I assume it's been this way since the introduction of DT_GNU_HASH.
I haven't look at the tool. It's not just consistency checks those DT_HASH lookups could be used for. Maybe they use DT_HASH lookups to find the original definition of dlsym after interposing it.
Posted Aug 21, 2022 23:52 UTC (Sun)
by k8to (guest, #15413)
[Link]
The ABI status of ELF hash tables
Either way, the easy anti-cheat developers just admitted that this component of their tool is easily misled, which kind of invalidates the utility of having that functionality especially now that it's public knowledge.