System.map file is generated in Linux after the creation of OS. I am wondering if using the "run-time" address random techniques should be addressed within the system. Map is invalid
There is not (yet), at least not entirely kernel code segments For only the base address is random.
See for details / more references.
The method described here basically combines a static (randomly selected at boot time) kernel address code load address; This means that relative offsets are valid in System.map , if you have found the actual address for the same symbol then you can get all the other.
Comments
Post a Comment