Sorry, your browser cannot access this site
This page requires browser support (enable) JavaScript
Learn more >


  1. 有没有注册异常处理程序。还有像__cxa_atexit 这样退出时执行的函数。

  2. __lib_start_main的参数中有用于初始化的函数。顺便贴一下它的定义:

    int __libc_start_main(
    	int (*main) (int, char * *, char * *), 
    	int argc, 
    	char * * ubp_av, 
    	void (*init) (void), 
    	void (*fini) (void), 
    	void (*rtld_fini) (void), 
    	void (* stack_end)

    • performing any necessary security checks if the effective user ID is
    not the same as the real user ID.
    • initialize the threading subsystem.
    • registering the rtld_fini to release resources when this dynamic shared object exits (or is unloaded).
    • registering the fini handler to run at program exit.
    • calling the initializer function (*init)().
    • calling main() with appropriate arguments.
    • calling exit() with the return value from main().

  3. 通过字符串或字节数组的交叉引用,可以找出隐藏的操作。