Live data from Hacker News

PatchELF: Simple utility for modifying existing ELF executables and libraries

41–42 of 42 posts

Re: PatchELF: Simple utility for modifying existing ELF executables and libraries

#41

Post by bregma » Sat, May 08, 2021, 2:15 PM UTC

hvdijk wrote: post #23

saagarjha wrote: post #19

Earlier quoted context omitted.

It’s an easy way to modify the binary to load extra code, which can alter how it behaves.

Sure, but only if you have write access to the binary. If you have that you can already replace it with anything you like, so I am not seeing the privilege escalation there.

Consider the context in which PT_INTERP is loaded and executed.

Re: PatchELF: Simple utility for modifying existing ELF executables and libraries

#42

Post by hvdijk » Sat, May 08, 2021, 3:39 PM UTC

bregma wrote: post #41

hvdijk wrote: post #23

Earlier quoted context omitted.

Sure, but only if you have write access to the binary. If you have that you can already replace it with anything you like, so I am not seeing the privilege escalation there.

Consider the context in which PT_INTERP is loaded and executed.

There should be no situation where a malformed or unexpected PT_INTERP leads to privilege escalation. If you believe you have found such a situation, please report it.

Post reply on HN