Results 12 issues of 江湖风轻

``` ➜ app ./NetEase_Cloud_Music-1.2.0.2.glibc2.17-x86_64.AppImage netease-cloud-music: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.25' not found (required by /tmp/.mount_NetEas8EOifW/usr/lib/x86_64-linux-gnu/libQt5Core.so.5) netease-cloud-music: /lib/x86_64-linux-gnu/libm.so.6: version `GLIBC_2.27' not found (required by /tmp/.mount_NetEas8EOifW/usr/lib/x86_64-linux-gnu/libvlccore.so.9) netease-cloud-music: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.25' not found (required by...

enhancement
help wanted

For my last issue: https://github.com/ixty/mandibule/issues/2 I commit the patch: https://github.com/Hackerl/mandibule/commit/92de629dee87e149481c10924d3db2a23280605f ```c unsigned long mandibule_beg(int aligned) { if(!aligned) return (unsigned long)mandibule_beg; unsigned long align_size = (unsigned long)mandibule_beg % 0x1000; return (unsigned...

I want to know the purpose of this environment variable. > FSTACK_PUSH_STR(sp, "MANMAP=1");

```c= for(int i=0; ie_phnum; i++) { phdr = (elf_phdr *)(elf_buf + ehdr->e_phoff + i * ehdr->e_phentsize); // printf("> seg[%d] load: %d addr 0x%llx size 0x%llx\n", i, phdr->p_type == PT_LOAD, phdr->p_vaddr,...

``` FSTACK_PUSH_LONG(sp, 0); for(int i=0; i

build by gcc (Debian 8.3.0-6) 8.3.0 on debian 10, the function address is exactly 0x1000, so there is no space to store parameters. Is there any other way to specify...

解包后发现 usr/lib 下很多动态库的软链接都是指向编译时的文件。 ![screenshot from 2018-04-07 23-00-33](https://user-images.githubusercontent.com/15811751/38456481-125e91ae-3a53-11e8-9034-b4c5bc6575c0.png) 因为有些人已经安装了wine32,所以使用的系统环境中的动态库,没有使用Appimage中的,所以可以启动。 但是没有安装wine32的会报没有 usr/bin/wine 文件,因为动态库加载失败。 将软链接改正: ```python # -*- coding: utf-8 -*- import os def fix(file_dir): files = os.listdir(file_dir) for f in files: p...

![image](https://user-images.githubusercontent.com/15811751/125764937-b747d065-ba60-4bac-8eb2-f2c694256ab0.png) it work if don't call ["x_fini"](https://github.com/MikhailProg/elf/blob/master/src/loader.c#L22).

Sometimes the injected program needs to read the original state of each thread.