WP6a: GOT/PLT hook detection

[Brad-Edwards]

Context

GOT/PLT hooking redirects libc calls to cheat code. No detection of modified GOT entries.

Work

• New daemon/got_verify.{h,c}: parse ELF .got from /proc/pid/mem. For each entry, verify it points into expected library range (from /proc/pid/maps). Out-of-range = OWL_EVENT_LIB_UNEXPECTED (0x0203).
• New cheats/got_hook.c: overwrites a GOT entry in the game
• New tests/test_got_verify.c

Tests

8 unit + 1 E2E.

Part of v2.0.0