tag:blogger.com,1999:blog-19544619.post114355962301559944..comments2024-03-23T00:56:48.137-04:00Comments on 0xFE - 11111110b - 0376: Q&A: How OS X Executes Applications0xfehttp://www.blogger.com/profile/11179501091623983192noreply@blogger.comBlogger9125tag:blogger.com,1999:blog-19544619.post-11722379622125210012010-01-18T08:42:47.485-05:002010-01-18T08:42:47.485-05:00I am trying to find the physical entry point to a ...I am trying to find the physical entry point to a MACH-O executable.<br /><br />When I look at the section marked as PURE_INSTRUCTIONS, I see the <i>addr</i>, <i>size</i> and <i>offset</i>.<br /><br />Using a hex editor I look at the physical offset pointed to by addr. My initial response was that it should point to the executable's entry point for execution, but it seems that that initial assessment is wrong.<br /><br />Sometimes it does, sometimes not at all.<br /><br />I need to calculate the entry point in the file on disk, not when executing, but in the physical file.<br /><br />I can't find documentation on how to calculate that entry point. Do you perhaps know how to do this?<br /><br />Thanks!William Dickshttps://www.blogger.com/profile/01211201729445913360noreply@blogger.comtag:blogger.com,1999:blog-19544619.post-1148198208902286302006-05-21T03:56:00.000-04:002006-05-21T03:56:00.000-04:00Now that Macs are Intel, has anyone written anythi...Now that Macs are Intel, has anyone written anything allowing you to load ELF binaries?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-19544619.post-1146623679930596012006-05-02T22:34:00.000-04:002006-05-02T22:34:00.000-04:00Congratulations on getting Blogger's front page sp...Congratulations on getting Blogger's front page spotlight.The Sanity Inspectorhttps://www.blogger.com/profile/04808433661634318393noreply@blogger.comtag:blogger.com,1999:blog-19544619.post-1146608849937950292006-05-02T18:27:00.000-04:002006-05-02T18:27:00.000-04:00I am guessing you don't get out a lot.God bless yo...I am guessing you don't get out a lot.<BR/><BR/>God bless you though. I don't have half the brain it takes to figure this stuff out.Peter Mattheshttps://www.blogger.com/profile/10056479171435721759noreply@blogger.comtag:blogger.com,1999:blog-19544619.post-1146603817874368902006-05-02T17:03:00.000-04:002006-05-02T17:03:00.000-04:00Awesome name for a blog. I'm surprised it wasn't t...Awesome name for a blog. I'm surprised it wasn't taken already.Moderatorhttps://www.blogger.com/profile/02318879290010704973noreply@blogger.comtag:blogger.com,1999:blog-19544619.post-1146597593517169142006-05-02T15:19:00.000-04:002006-05-02T15:19:00.000-04:00This comment has been removed by a blog administrator.Max and Chahttps://www.blogger.com/profile/03663499405558051064noreply@blogger.comtag:blogger.com,1999:blog-19544619.post-1146597117076033322006-05-02T15:11:00.000-04:002006-05-02T15:11:00.000-04:00Some really hacker stuff going on here :)Welcome t...Some really hacker stuff going on here :)<BR/><BR/>Welcome to the blogger front page!High Power Rocketryhttps://www.blogger.com/profile/11537203640644706903noreply@blogger.comtag:blogger.com,1999:blog-19544619.post-1143636138374336142006-03-29T07:42:00.000-05:002006-03-29T07:42:00.000-05:00No it does not. (Well... mostly)This is because co...No it does not. (Well... mostly)<BR/><BR/>This is because common libraries like libc, libm, or libpthread are symbolically linked to libSystem in /usr/lib.<BR/><BR/>See for your self:<BR/><BR/>$ ls -l /usr/lib/libc.dylib /usr/lib/libpthread.dylib0xfehttps://www.blogger.com/profile/11179501091623983192noreply@blogger.comtag:blogger.com,1999:blog-19544619.post-1143634507258048112006-03-29T07:15:00.000-05:002006-03-29T07:15:00.000-05:00Thanks for the answers. Its intresting that Darwin...Thanks for the answers. Its intresting that Darwin bundles a whole set of libraries into libSystem. <BR/><BR/>Doesnt that break build scripts that expect these libraries?Anonymousnoreply@blogger.com