开发者

executable sections flag

开发者 https://www.devze.com 2023-01-20 02:19 出处:网络
The sections of Portable Executable files are tagged with differents flags. Can someone explain the difference between IMAGE_SCN_MEM_EXECUTE (the section can be executed as code开发者_开发知识库) and

The sections of Portable Executable files are tagged with differents flags. Can someone explain the difference between IMAGE_SCN_MEM_EXECUTE (the section can be executed as code开发者_开发知识库) and IMAGE_SCN_CNT_CODE (the section contains executable code)? Thanks.


IMAGE_SCN_MEM_EXECUTE is the one that is actually used by the PE loader to set up page permissions. IMAGE_SCN_CNT_CODE is not used, I guess it's just a descriptive flag.

0

精彩评论

暂无评论...
验证码 换一张
取 消