Uhm here I can see:
klecker:~$ readelf --syms /lib/libc.so.5|grep getnetent 309: 00019208 322 FUNC GLOBAL DEFAULT 8 getnetent klecker:~$ readelf --relocs /lib/libc.so.5|grep getnetent 0008864c 00013507 R_386_JUMP_SLOT 00019208 getnetent And I can see at that address: 19208: 55 push %ebp 19209: 57 push %edi 1920a: 56 push %esi 1920b: 53 push %ebx 1920c: e8 00 00 00 00 call 0x19211 19211: 5b pop %ebx 19212: 81 c3 df f2 06 00 add $0x6f2df,%ebx 19218: 83 bb 40 cc ff ff 00 cmpl $0x0,0xffffcc40(%ebx) 1921f: 75 27 jne 0x19248 19221: 8d 83 dd 4f ff ff lea 0xffff4fdd(%ebx),%eax 19227: 50 push %eax 19228: 8d 83 30 cc ff ff lea 0xffffcc30(%ebx),%eax 1922e: 50 push %eax 1922f: e8 54 85 ff ff call 0x11788 19234: 89 83 40 cc ff ff mov %eax,0xffffcc40(%ebx) 1923a: 83 c4 08 add $0x8,%esp 1923d: 85 c0 test %eax,%eax 1923f: 75 07 jne 0x19248 19241: 31 c0 xor %eax,%eax 19243: 5b pop %ebx 19244: 5e pop %esi 19245: 5f pop %edi 19246: 5d pop %ebp 19247: c3 ret which is a function as requested. -- Francesco P. Lovergine
