You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[LLD][COFF] Always locate the IAT at the beginning of the .rdata section and align its size to 4KB on ARM64EC.
This mimics the behavior of MSVC's link.exe. My guess is that the reason for this approach
is to facilitate tracking runtime IAT modifications. An auxiliary IAT allows bypassing
the call checker for imported function calls. It's the OS's responsibility to ensure that,
if runtime patching occurs, the auxiliary IAT is reverted to enable call checking.
Modifying the IAT is a form of runtime patching, and ensuring that it doesn’t share
pages with other data likely helps with tracking accuracy.
Although alignment alone should ensure that the IAT occupies its own pages, placing it
at the beginning of the .rdata section might be an optimization. This way, padding is
only needed after the IAT, not before. The auxiliary IAT seems to follow a similar
idea but is positioned at the end of the .rdata section.
0 commit comments