Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

maybe wrong output from habo.qq.com #13

Closed
thinkycx opened this issue Aug 28, 2018 · 2 comments
Closed

maybe wrong output from habo.qq.com #13

thinkycx opened this issue Aug 28, 2018 · 2 comments

Comments

@thinkycx
Copy link

image

The result is from https://habo.qq.com/
and the ELF source code is in the picture.
Why the habo has "文件行为"?

@jingleyang
Copy link
Collaborator

hi,
文件行为的判定标准是syscall open(), 系统在load ELF文件的时候,会加载so文件,这些都是通过open系统调用打开句柄,然后加载到内存的,所以有文件行为。
Because showing File IO behaviors is linked with syscall open(). When a ELF file is loaded, many defaults so files will be mapped into memory by calling open().
Thanks

@thinkycx
Copy link
Author

Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants