ELF files are confusing.

[ben321]

While Windows PE EXE files just have named sections as defined by section headers, ELF files have named sections, but also something called "program segments", which are unnamed, and are defined by a separate table of headers called program headers. What's up with that?

[Frank Kotler]

Hi Ben,

I don't know. Where are you seeing this? Possibly 4k (usually) memory "pages"? If ypu can't dp anything  about it, I wouldn't worry about it.

Best,
Frank

 

[fredericopissarra]

Aren't you confusing with "Program Header Table"?

In general, ELF is simplier then PE (and PE+).

[Frank Kotler]

Yeah, I am probably confused. Should have stopped after "I don't know'"

Best,
Frank

[vitsoft]

While ELF Sections are used by the linker, ELF Program Segments are used by the (dynamic) loader at the Linux program execution.
Section header tells where is the section's contents located in the file. This is used mostly at link-time.

Program segments instruct the loader at load-time about virtual address where should each segment be memory-mapped at, and what privileges should it be assigned (read,write,execute). See also ELF specification.

If you want to inspect ELF files in Windows, install Linux emulator WSL and use
readelf -aW ElfFile

[Frank Kotler]

Thank you!

Frank

[fredericopissarra]

Yeah, I am probably confused. Should have stopped after "I don't know'"

Best,
Frank

Frank, I was talking about the "program headers" in the original post.

[]s
Fred

[Frank Kotler]

Okay, I'm confused on general principles.

Are you straightened out, Ben?

Frank