Difference between Program header and Section Header in ELF

user435739 picture user435739 · Apr 30, 2014 · Viewed 14.7k times · Source

Q1 What is the difference between Program header and Section Header in ELF?

Q1.1 What is the difference between segment and a section?

I believe pheaders point to sections only.

Q2. What is the difference between File Header and Program Header?

As per GNU ld linker script, Using Id: The GNU Linker:

PHDRS
{
name type [ FILEHDR ] [ PHDRS ] [ AT ( address ) ]
[ FLAGS ( flags ) ] ;
}

You may use the FILEHDR and PHDRS keywords appear after the program header type to further describe the contents of the segment. The FILEHDR keyword means that the segment should include the ELF file header. The PHDRS keyword means that the segment should include the ELF program headers themselves.

This is a bit confusing.

Answer

Basile Starynkevitch picture Basile Starynkevitch · Apr 30, 2014

The Executable & Linkable Format wikipage has a nice picture explaining ELF, and the difference between its program header & sections header. See also elf(5)

The [initial] program header is defining segments (in the address space of a process running that ELF executable) projected in virtual memory (the executable point of view) at execve(2) time. The [final] sections header is defining sections (the linkable point of view, for ld(1) etc...). Each section belongs to a segment (and may, or not, be visible -i.e. mapped into memory- at execution time). The ELF file header tells where program header table & section header table are.

Use also objdump(1) and readelf(1) to explore several ELF files (executables, shared objects, linkable objects) existing on your Linux system.

Levine's Linkers & Loaders book has a chapter explaining that in details.

And Drepper's paper How to Write Shared Libraries also has some good explanation.