问题
Can a section in a Win32 PE contain a combination of both executable code, initialized data and unitialized data?
Is it possible for a section to contain any combination of code and (un)initialized data as section data, or can the section only contain one type of data?
It is the Characteristics
field of the section header that has flags that determine its properties, but I'm uncertain whether it is possible to mix things up?
Below I've included the flags from the official PE documentation:
IMAGE_SCN_CNT_CODE 0x00000020
The section contains executable code.IMAGE_SCN_CNT_INITIALIZED_DATA 0x00000040
The section contains initialized data.IMAGE_SCN_CNT_UNINITIALIZED_ DATA 0x00000080
The section contains uninitialized data.
来源:https://stackoverflow.com/questions/39052762/can-a-section-in-a-win32-pe-contain-a-combination-of-both-executable-code-initi