Can a section in a Win32 PE contain a combination of both executable code, initialized data and unitialized data?

自作多情 提交于 2020-01-17 03:50:27

问题


Can a section in a Win32 PE contain a combination of both executable code, initialized data and unitialized data?

Is it possible for a section to contain any combination of code and (un)initialized data as section data, or can the section only contain one type of data?

It is the Characteristics field of the section header that has flags that determine its properties, but I'm uncertain whether it is possible to mix things up?

Below I've included the flags from the official PE documentation:

IMAGE_SCN_CNT_CODE 0x00000020 The section contains executable code. IMAGE_SCN_CNT_INITIALIZED_DATA 0x00000040 The section contains initialized data. IMAGE_SCN_CNT_UNINITIALIZED_ DATA 0x00000080 The section contains uninitialized data.

来源:https://stackoverflow.com/questions/39052762/can-a-section-in-a-win32-pe-contain-a-combination-of-both-executable-code-initi

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!