CODEWITHSUNDEEP
carmgnuelflinker-scripts
user435739
user435739

Reputation:

Difference between Program header and Section Header in ELF

Q1 What is the difference between Program header and Section Header in ELF?

Q1.1 What is the difference between segment and a section?

I believe pheaders point to sections only.

Q2. What is the difference between File Header and Program Header?

As per GNU ld linker script, Using Id: The GNU Linker:

PHDRS
{
name type [ FILEHDR ] [ PHDRS ] [ AT ( address ) ]
[ FLAGS ( flags ) ] ;
}

You may use the FILEHDR and PHDRS keywords appear after the program header type to further describe the contents of the segment. The FILEHDR keyword means that the segment should include the ELF file header. The PHDRS keyword means that the segment should include the ELF program headers themselves.

This is a bit confusing.

Upvotes: 31

Views: 23082

Answers (2)

ton
ton

Reputation: 4577

Q1 What is the difference between the Program header and the Section Header in ELF?

  • A program header describes a segment or other information that the system needs to prepare the program for execution.
  • A section is an interface that can represent a lot of things. Look here for details (search for Elf64_Shdr)
  • A section header is inside a segment.

Q1.1 What is the difference between a segment and a section?

  • A segment consists of one or more sections, though this fact is transparent to the program header.

Q2. What is the difference between File Header and Program Header?

  • The ELF file header. This appears at the start of every ELF file (see /usr/include/elf.h). It also has the number of program headers existing in this file.
  • The ELF file always starts with the ELF file header. And it references the program headers. You need at least one program header.

Upvotes: 3

Basile Starynkevitch
Basile Starynkevitch

Reputation: 1

The Executable & Linkable Format wikipage has a nice picture explaining ELF, and the difference between its program header & sections header. See also elf(5)

The [initial] program header is defining segments (in the address space of a process running that ELF executable) projected in virtual memory (the executable point of view) at execve(2) time. The [final] sections header is defining sections (the linkable point of view, for ld(1) etc...). Each section belongs to a segment (and may, or not, be visible -i.e. mapped into memory- at execution time). The ELF file header tells where program header table & section header table are.

Use also objdump(1) and readelf(1) to explore several ELF files (executables, shared objects, linkable objects) existing on your Linux system.

Levine's Linkers & Loaders book has a chapter explaining that in details.

And Drepper's paper How to Write Shared Libraries also has some good explanation.

Upvotes: 31

Related Questions