install_plt_redirect() should ultimately be replaced with GOT poisoning when redirecting PLT calls to patched version of a function

advanced-microcode-patching / shiva

A custom ELF linker/loader for installing ET_REL binary patches at runtime

Other

152 stars 13 forks source link

install_plt_redirect() should ultimately be replaced with GOT poisoning when redirecting PLT calls to patched version of a function #22

Open elfmaster opened 9 months ago

elfmaster commented 9 months ago

GOT poisoning on PIE binaries from Shiva is tricky, if Shiva updates the GOT then it will be overwritten by RTLD afterwards due to strict linking. The solution we used in the past (And should be employed now). Is for Shiva to update the appropriate GOT entry, followed by removing the JUMPSLOT relocation entry for that particular GOT entry.