#os-internals

Loading code without the disk: what each OS lets you get away with

memfd, PE loaders, unlink-after-dlopen. Three operating systems, three different definitions of 'in memory'.