ELF.search gives false positives

[TethysSvensson]

ELF.search can sometimes give out false positives.

For instance:

$ ipython
In [1]: hex(max(elf.ELF('./foo').search('e')))


Out[1]: '0x60102f'

$ gdb ./foo
(gdb) x/1xb 0x60102f
0x60102f:	0x00
(gdb) start
Temporary breakpoint 1 at 0x4003b0
Starting program: /home/idolf/git/pcs-f2018/weeklies/week6-rop/rop-forensics/foo 

Temporary breakpoint 1, 0x00000000004003b0 in main ()
(gdb) x/1xb 0x60102f
0x60102f:	0x00

foo.zip

[TethysSvensson]

The binary was generated with echo 'int main() {}' | gcc -x c - -no-pie -fno-PIE -o foo