A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
GNU General Public License v3.0
1.37k
stars
131
forks
source link
Fix in the relocation table detection #18
Closed
Apoch-zxv closed 4 years ago
In case we found the rela entry we should move word size backwards as we want offset to point to the beginning of the symbol entry