Definitions¶

“First” program header is the one with the smallest offset in the file:e_phoff.

“Last” program header is the one with the biggest offset in the file:e_phoff + (e_phnum - 1) * sizeof(Elf_Phdr).

PT_INTERP¶

First PT_INTERP program header is used to locate the filename of ELFinterpreter. Other PT_INTERP headers are ignored (since Linux 2.4.11).

PT_GNU_STACK¶

Last PT_GNU_STACK program header defines userspace stack executability(since Linux 2.6.6). Other PT_GNU_STACK headers are ignored.

PT_GNU_PROPERTY¶

ELF interpreter’s last PT_GNU_PROPERTY program header is used (sinceLinux 5.8). If interpreter doesn’t have one, then the last PT_GNU_PROPERTYprogram header of an executable is used. Other PT_GNU_PROPERTY headersare ignored.