elfdump.c revision 110256
1/*- 2 * Copyright (c) 2003 David O'Brien. All rights reserved. 3 * Copyright (c) 2001 Jake Burkholder 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 1. Redistributions of source code must retain the above copyright 10 * notice, this list of conditions and the following disclaimer. 11 * 2. Redistributions in binary form must reproduce the above copyright 12 * notice, this list of conditions and the following disclaimer in the 13 * documentation and/or other materials provided with the distribution. 14 * 15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 17 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25 * SUCH DAMAGE. 26 */ 27 28#include <sys/cdefs.h> 29__FBSDID("$FreeBSD: head/usr.bin/elfdump/elfdump.c 110256 2003-02-03 01:22:58Z obrien $"); 30 31#include <sys/types.h> 32#include <sys/elf32.h> 33#include <sys/elf64.h> 34#include <sys/mman.h> 35#include <sys/stat.h> 36#include <err.h> 37#include <fcntl.h> 38#include <stddef.h> 39#include <stdio.h> 40#include <stdlib.h> 41#include <string.h> 42#include <unistd.h> 43 44#define ED_DYN (1<<0) 45#define ED_EHDR (1<<1) 46#define ED_GOT (1<<2) 47#define ED_HASH (1<<3) 48#define ED_INTERP (1<<4) 49#define ED_NOTE (1<<5) 50#define ED_PHDR (1<<6) 51#define ED_REL (1<<7) 52#define ED_SHDR (1<<8) 53#define ED_SYMTAB (1<<9) 54#define ED_ALL ((1<<10)-1) 55 56#define elf_get_addr elf_get_quad 57#define elf_get_off elf_get_quad 58#define elf_get_size elf_get_quad 59 60enum elf_member { 61 D_TAG = 1, D_PTR, D_VAL, 62 63 E_CLASS, E_DATA, E_OSABI, E_TYPE, E_MACHINE, E_VERSION, E_ENTRY, 64 E_PHOFF, E_SHOFF, E_FLAGS, E_EHSIZE, E_PHENTSIZE, E_PHNUM, E_SHENTSIZE, 65 E_SHNUM, E_SHSTRNDX, 66 67 N_NAMESZ, N_DESCSZ, N_TYPE, 68 69 P_TYPE, P_OFFSET, P_VADDR, P_PADDR, P_FILESZ, P_MEMSZ, P_FLAGS, 70 P_ALIGN, 71 72 SH_NAME, SH_TYPE, SH_FLAGS, SH_ADDR, SH_OFFSET, SH_SIZE, SH_LINK, 73 SH_INFO, SH_ADDRALIGN, SH_ENTSIZE, 74 75 ST_NAME, ST_VALUE, ST_SIZE, ST_INFO, ST_SHNDX, 76 77 R_OFFSET, R_INFO, 78 79 RA_OFFSET, RA_INFO, RA_ADDEND 80}; 81 82typedef enum elf_member elf_member_t; 83 84int elf32_offsets[] = { 85 0, 86 87 offsetof(Elf32_Dyn, d_tag), offsetof(Elf32_Dyn, d_un.d_ptr), 88 offsetof(Elf32_Dyn, d_un.d_val), 89 90 offsetof(Elf32_Ehdr, e_ident[EI_CLASS]), 91 offsetof(Elf32_Ehdr, e_ident[EI_DATA]), 92 offsetof(Elf32_Ehdr, e_ident[EI_OSABI]), 93 offsetof(Elf32_Ehdr, e_type), offsetof(Elf32_Ehdr, e_machine), 94 offsetof(Elf32_Ehdr, e_version), offsetof(Elf32_Ehdr, e_entry), 95 offsetof(Elf32_Ehdr, e_phoff), offsetof(Elf32_Ehdr, e_shoff), 96 offsetof(Elf32_Ehdr, e_flags), offsetof(Elf32_Ehdr, e_ehsize), 97 offsetof(Elf32_Ehdr, e_phentsize), offsetof(Elf32_Ehdr, e_phnum), 98 offsetof(Elf32_Ehdr, e_shentsize), offsetof(Elf32_Ehdr, e_shnum), 99 offsetof(Elf32_Ehdr, e_shstrndx), 100 101 offsetof(Elf_Note, n_namesz), offsetof(Elf_Note, n_descsz), 102 offsetof(Elf_Note, n_type), 103 104 offsetof(Elf32_Phdr, p_type), offsetof(Elf32_Phdr, p_offset), 105 offsetof(Elf32_Phdr, p_vaddr), offsetof(Elf32_Phdr, p_paddr), 106 offsetof(Elf32_Phdr, p_filesz), offsetof(Elf32_Phdr, p_memsz), 107 offsetof(Elf32_Phdr, p_flags), offsetof(Elf32_Phdr, p_align), 108 109 offsetof(Elf32_Shdr, sh_name), offsetof(Elf32_Shdr, sh_type), 110 offsetof(Elf32_Shdr, sh_flags), offsetof(Elf32_Shdr, sh_addr), 111 offsetof(Elf32_Shdr, sh_offset), offsetof(Elf32_Shdr, sh_size), 112 offsetof(Elf32_Shdr, sh_link), offsetof(Elf32_Shdr, sh_info), 113 offsetof(Elf32_Shdr, sh_addralign), offsetof(Elf32_Shdr, sh_entsize), 114 115 offsetof(Elf32_Sym, st_name), offsetof(Elf32_Sym, st_value), 116 offsetof(Elf32_Sym, st_size), offsetof(Elf32_Sym, st_info), 117 offsetof(Elf32_Sym, st_shndx), 118 119 offsetof(Elf32_Rel, r_offset), offsetof(Elf32_Rel, r_info), 120 121 offsetof(Elf32_Rela, r_offset), offsetof(Elf32_Rela, r_info), 122 offsetof(Elf32_Rela, r_addend) 123}; 124 125int elf64_offsets[] = { 126 0, 127 128 offsetof(Elf64_Dyn, d_tag), offsetof(Elf64_Dyn, d_un.d_ptr), 129 offsetof(Elf64_Dyn, d_un.d_val), 130 131 offsetof(Elf32_Ehdr, e_ident[EI_CLASS]), 132 offsetof(Elf32_Ehdr, e_ident[EI_DATA]), 133 offsetof(Elf32_Ehdr, e_ident[EI_OSABI]), 134 offsetof(Elf64_Ehdr, e_type), offsetof(Elf64_Ehdr, e_machine), 135 offsetof(Elf64_Ehdr, e_version), offsetof(Elf64_Ehdr, e_entry), 136 offsetof(Elf64_Ehdr, e_phoff), offsetof(Elf64_Ehdr, e_shoff), 137 offsetof(Elf64_Ehdr, e_flags), offsetof(Elf64_Ehdr, e_ehsize), 138 offsetof(Elf64_Ehdr, e_phentsize), offsetof(Elf64_Ehdr, e_phnum), 139 offsetof(Elf64_Ehdr, e_shentsize), offsetof(Elf64_Ehdr, e_shnum), 140 offsetof(Elf64_Ehdr, e_shstrndx), 141 142 offsetof(Elf_Note, n_namesz), offsetof(Elf_Note, n_descsz), 143 offsetof(Elf_Note, n_type), 144 145 offsetof(Elf64_Phdr, p_type), offsetof(Elf64_Phdr, p_offset), 146 offsetof(Elf64_Phdr, p_vaddr), offsetof(Elf64_Phdr, p_paddr), 147 offsetof(Elf64_Phdr, p_filesz), offsetof(Elf64_Phdr, p_memsz), 148 offsetof(Elf64_Phdr, p_flags), offsetof(Elf64_Phdr, p_align), 149 150 offsetof(Elf64_Shdr, sh_name), offsetof(Elf64_Shdr, sh_type), 151 offsetof(Elf64_Shdr, sh_flags), offsetof(Elf64_Shdr, sh_addr), 152 offsetof(Elf64_Shdr, sh_offset), offsetof(Elf64_Shdr, sh_size), 153 offsetof(Elf64_Shdr, sh_link), offsetof(Elf64_Shdr, sh_info), 154 offsetof(Elf64_Shdr, sh_addralign), offsetof(Elf64_Shdr, sh_entsize), 155 156 offsetof(Elf64_Sym, st_name), offsetof(Elf64_Sym, st_value), 157 offsetof(Elf64_Sym, st_size), offsetof(Elf64_Sym, st_info), 158 offsetof(Elf64_Sym, st_shndx), 159 160 offsetof(Elf64_Rel, r_offset), offsetof(Elf64_Rel, r_info), 161 162 offsetof(Elf64_Rela, r_offset), offsetof(Elf64_Rela, r_info), 163 offsetof(Elf64_Rela, r_addend) 164}; 165 166/* http://www.sco.com/developers/gabi/latest/ch5.dynamic.html#tag_encodings */ 167static const char * 168d_tags(u_int64_t tag) { 169 switch (tag) { 170 case 0: return "DT_NULL"; 171 case 1: return "DT_NEEDED"; 172 case 2: return "DT_PLTRELSZ"; 173 case 3: return "DT_PLTGOT"; 174 case 4: return "DT_HASH"; 175 case 5: return "DT_STRTAB"; 176 case 6: return "DT_SYMTAB"; 177 case 7: return "DT_RELA"; 178 case 8: return "DT_RELASZ"; 179 case 9: return "DT_RELAENT"; 180 case 10: return "DT_STRSZ"; 181 case 11: return "DT_SYMENT"; 182 case 12: return "DT_INIT"; 183 case 13: return "DT_FINI"; 184 case 14: return "DT_SONAME"; 185 case 15: return "DT_RPATH"; 186 case 16: return "DT_SYMBOLIC"; 187 case 17: return "DT_REL"; 188 case 18: return "DT_RELSZ"; 189 case 19: return "DT_RELENT"; 190 case 20: return "DT_PLTREL"; 191 case 21: return "DT_DEBUG"; 192 case 22: return "DT_TEXTREL"; 193 case 23: return "DT_JMPREL"; 194 case 24: return "DT_BIND_NOW"; 195 case 25: return "DT_INIT_ARRAY"; 196 case 26: return "DT_FINI_ARRAY"; 197 case 27: return "DT_INIT_ARRAYSZ"; 198 case 28: return "DT_FINI_ARRAYSZ"; 199 case 29: return "DT_RUNPATH"; 200 case 30: return "DT_FLAGS"; 201 case 32: return "DT_PREINIT_ARRAY"; /* XXX: DT_ENCODING */ 202 case 33: return "DT_PREINIT_ARRAYSZ"; 203 /* 0x6000000D - 0x6ffff000 operating system-specific semantics */ 204 case 0x6ffffdf5: return "DT_GNU_PRELINKED"; 205 case 0x6ffffdf6: return "DT_GNU_CONFLICTSZ"; 206 case 0x6ffffdf7: return "DT_GNU_LIBLISTSZ"; 207 case 0x6ffffdf8: return "DT_SUNW_CHECKSUM"; 208 case 0x6ffffdf9: return "DT_PLTPADSZ"; 209 case 0x6ffffdfa: return "DT_MOVEENT"; 210 case 0x6ffffdfb: return "DT_MOVESZ"; 211 case 0x6ffffdfc: return "DT_FEATURE"; 212 case 0x6ffffdfd: return "DT_POSFLAG_1"; 213 case 0x6ffffdfe: return "DT_SYMINSZ"; 214 case 0x6ffffdff: return "DT_SYMINENT (DT_VALRNGHI)"; 215 case 0x6ffffe00: return "DT_ADDRRNGLO"; 216 case 0x6ffffef8: return "DT_GNU_CONFLICT"; 217 case 0x6ffffef9: return "DT_GNU_LIBLIST"; 218 case 0x6ffffefa: return "DT_SUNW_CONFIG"; 219 case 0x6ffffefb: return "DT_SUNW_DEPAUDIT"; 220 case 0x6ffffefc: return "DT_SUNW_AUDIT"; 221 case 0x6ffffefd: return "DT_SUNW_PLTPAD"; 222 case 0x6ffffefe: return "DT_SUNW_MOVETAB"; 223 case 0x6ffffeff: return "DT_SYMINFO (DT_ADDRRNGHI)"; 224 case 0x6ffffff9: return "DT_RELACOUNT"; 225 case 0x6ffffffa: return "DT_RELCOUNT"; 226 case 0x6ffffffb: return "DT_FLAGS_1"; 227 case 0x6ffffffc: return "DT_VERDEF"; 228 case 0x6ffffffd: return "DT_VERDEFNUM"; 229 case 0x6ffffffe: return "DT_VERNEED"; 230 case 0x6fffffff: return "DT_VERNEEDNUM"; 231 case 0x6ffffff0: return "DT_GNU_VERSYM"; 232 /* 0x70000000 - 0x7fffffff processor-specific semantics */ 233 case 0x70000000: return "DT_IA64_PLT_RESERVE"; 234 case 0x7ffffffd: return "DT_SUNW_AUXILIARY"; 235 case 0x7ffffffe: return "DT_SUNW_USED"; 236 case 0x7fffffff: return "DT_SUNW_FILTER"; 237 default: return "ERROR: TAG NOT DEFINED"; 238 } 239}; 240 241static const char * 242e_machines(u_int mach) 243{ 244 switch (mach) { 245 case EM_NONE: return "EM_NONE"; 246 case EM_M32: return "EM_M32"; 247 case EM_SPARC: return "EM_SPARC"; 248 case EM_386: return "EM_386"; 249 case EM_68K: return "EM_68K"; 250 case EM_88K: return "EM_88K"; 251 case EM_486: return "EM_486"; 252 case EM_860: return "EM_860"; 253 case EM_MIPS: return "EM_MIPS"; 254 case EM_IA_64: return "EM_IA_64"; 255 } 256 return "(unknown machine)"; 257}; 258 259const char *e_types[] = { 260 "ET_NONE", "ET_REL", "ET_EXEC", "ET_DYN", "ET_CORE" 261}; 262 263const char *ei_versions[] = { 264 "EV_NONE", "EV_CURRENT" 265}; 266 267const char *ei_classes[] = { 268 "ELFCLASSNONE", "ELFCLASS32", "ELFCLASS64" 269}; 270 271const char *ei_data[] = { 272 "ELFDATANONE", "ELFDATA2LSB", "ELFDATA2MSB" 273}; 274 275const char *ei_abis[] = { 276 "ELFOSABI_SYSV", "ELFOSABI_HPUX", "ELFOSABI_NETBSD", "ELFOSABI_LINUX", 277 "ELFOSABI_HURD", "ELFOSABI_86OPEN", "ELFOSABI_SOLARIS", 278 "ELFOSABI_MONTEREY", "ELFOSABI_IRIX", "ELFOSABI_FREEBSD", 279 "ELFOSABI_TRU64", "ELFOSABI_MODESTO", "ELFOSABI_OPENBSD" 280}; 281 282const char *p_types[] = { 283 "PT_NULL", "PT_LOAD", "PT_DYNAMIC", "PT_INTERP", "PT_NOTE", 284 "PT_SHLIB", "PT_PHDR" 285}; 286 287const char *p_flags[] = { 288 "", "PF_X", "PF_W", "PF_X|PF_W", "PF_R", "PF_X|PF_R", "PF_W|PF_R", 289 "PF_X|PF_W|PF_R" 290}; 291 292/* http://www.sco.com/developers/gabi/latest/ch4.sheader.html#sh_type */ 293static const char * 294sh_types(u_int64_t sht) { 295 switch (sht) { 296 case 0: return "SHT_NULL"; 297 case 1: return "SHT_PROGBITS"; 298 case 2: return "SHT_SYMTAB"; 299 case 3: return "SHT_STRTAB"; 300 case 4: return "SHT_RELA"; 301 case 5: return "SHT_HASH"; 302 case 6: return "SHT_DYNAMIC"; 303 case 7: return "SHT_NOTE"; 304 case 8: return "SHT_NOBITS"; 305 case 9: return "SHT_REL"; 306 case 10: return "SHT_SHLIB"; 307 case 11: return "SHT_DYNSYM"; 308 case 14: return "SHT_INIT_ARRAY"; 309 case 15: return "SHT_FINI_ARRAY"; 310 case 16: return "SHT_PREINIT_ARRAY"; 311 case 17: return "SHT_GROUP"; 312 case 18: return "SHT_SYMTAB_SHNDX"; 313 /* 0x60000000 - 0x6fffffff operating system-specific semantics */ 314 case 0x6ffffff0: return "XXX:VERSYM"; 315 case 0x6ffffff7: return "SHT_GNU_LIBLIST"; 316 case 0x6ffffffc: return "XXX:VERDEF"; 317 case 0x6ffffffd: return "SHT_SUNW(GNU)_verdef"; 318 case 0x6ffffffe: return "SHT_SUNW(GNU)_verneed"; 319 case 0x6fffffff: return "SHT_SUNW(GNU)_versym"; 320 /* 0x70000000 - 0x7fffffff processor-specific semantics */ 321 case 0x70000000: return "SHT_IA_64_EXT"; 322 case 0x70000001: return "SHT_IA_64_UNWIND"; 323 case 0x7ffffffd: return "XXX:AUXILIARY"; 324 case 0x7fffffff: return "XXX:FILTER"; 325 /* 0x80000000 - 0xffffffff application programs */ 326 default: return "ERROR: SHT NOT DEFINED"; 327 } 328}; 329 330const char *sh_flags[] = { 331 "", "SHF_WRITE", "SHF_ALLOC", "SHF_WRITE|SHF_ALLOC", "SHF_EXECINSTR", 332 "SHF_WRITE|SHF_EXECINSTR", "SHF_ALLOC|SHF_EXECINSTR", 333 "SHF_WRITE|SHF_ALLOC|SHF_EXECINSTR" 334}; 335 336const char *st_types[] = { 337 "STT_NOTYPE", "STT_OBJECT", "STT_FUNC", "STT_SECTION", "STT_FILE" 338}; 339 340const char *st_bindings[] = { 341 "STB_LOCAL", "STB_GLOBAL", "STB_WEAK" 342}; 343 344char *dynstr; 345char *shstrtab; 346char *strtab; 347FILE *out; 348 349u_int64_t elf_get_byte(Elf32_Ehdr *e, void *base, elf_member_t member); 350u_int64_t elf_get_quarter(Elf32_Ehdr *e, void *base, elf_member_t member); 351u_int64_t elf_get_half(Elf32_Ehdr *e, void *base, elf_member_t member); 352u_int64_t elf_get_word(Elf32_Ehdr *e, void *base, elf_member_t member); 353u_int64_t elf_get_quad(Elf32_Ehdr *e, void *base, elf_member_t member); 354 355void elf_print_ehdr(Elf32_Ehdr *e); 356void elf_print_phdr(Elf32_Ehdr *e, void *p); 357void elf_print_shdr(Elf32_Ehdr *e, void *sh); 358void elf_print_symtab(Elf32_Ehdr *e, void *sh, char *str); 359void elf_print_dynamic(Elf32_Ehdr *e, void *sh); 360void elf_print_rel(Elf32_Ehdr *e, void *r); 361void elf_print_rela(Elf32_Ehdr *e, void *ra); 362void elf_print_interp(Elf32_Ehdr *e, void *p); 363void elf_print_got(Elf32_Ehdr *e, void *sh); 364void elf_print_hash(Elf32_Ehdr *e, void *sh); 365void elf_print_note(Elf32_Ehdr *e, void *sh); 366 367void usage(void); 368 369int 370main(int ac, char **av) 371{ 372 u_int64_t phoff; 373 u_int64_t shoff; 374 u_int64_t phentsize; 375 u_int64_t phnum; 376 u_int64_t shentsize; 377 u_int64_t shnum; 378 u_int64_t shstrndx; 379 u_int64_t offset; 380 u_int64_t name; 381 u_int64_t type; 382 struct stat sb; 383 u_int flags; 384 Elf32_Ehdr *e; 385 void *p; 386 void *sh; 387 void *v; 388 int fd; 389 int ch; 390 int i; 391 392 out = stdout; 393 flags = 0; 394 while ((ch = getopt(ac, av, "acdeiGhnprsw:")) != -1) 395 switch (ch) { 396 case 'a': 397 flags = ED_ALL; 398 break; 399 case 'c': 400 flags |= ED_SHDR; 401 break; 402 case 'd': 403 flags |= ED_DYN; 404 break; 405 case 'e': 406 flags |= ED_EHDR; 407 break; 408 case 'i': 409 flags |= ED_INTERP; 410 break; 411 case 'G': 412 flags |= ED_GOT; 413 break; 414 case 'h': 415 flags |= ED_HASH; 416 break; 417 case 'n': 418 flags |= ED_NOTE; 419 break; 420 case 'p': 421 flags |= ED_PHDR; 422 break; 423 case 'r': 424 flags |= ED_REL; 425 break; 426 case 's': 427 flags |= ED_SYMTAB; 428 break; 429 case 'w': 430 if ((out = fopen(optarg, "w")) == NULL) 431 err(1, "%s", optarg); 432 break; 433 case '?': 434 default: 435 usage(); 436 } 437 ac -= optind; 438 av += optind; 439 if (ac == 0 || flags == 0) 440 usage(); 441 if ((fd = open(*av, O_RDONLY)) < 0 || 442 fstat(fd, &sb) < 0) 443 err(1, NULL); 444 e = mmap(NULL, sb.st_size, PROT_READ, MAP_SHARED, fd, 0); 445 if (e == MAP_FAILED) 446 err(1, NULL); 447 if (!IS_ELF(*(Elf32_Ehdr *)e)) 448 errx(1, "not an elf file"); 449 phoff = elf_get_off(e, e, E_PHOFF); 450 shoff = elf_get_off(e, e, E_SHOFF); 451 phentsize = elf_get_quarter(e, e, E_PHENTSIZE); 452 phnum = elf_get_quarter(e, e, E_PHNUM); 453 shentsize = elf_get_quarter(e, e, E_SHENTSIZE); 454 shnum = elf_get_quarter(e, e, E_SHNUM); 455 shstrndx = elf_get_quarter(e, e, E_SHSTRNDX); 456 p = (char *)e + phoff; 457 sh = (char *)e + shoff; 458 offset = elf_get_off(e, (char *)sh + shstrndx * shentsize, SH_OFFSET); 459 shstrtab = (char *)e + offset; 460 for (i = 0; (u_int64_t)i < shnum; i++) { 461 name = elf_get_word(e, (char *)sh + i * shentsize, SH_NAME); 462 offset = elf_get_off(e, (char *)sh + i * shentsize, SH_OFFSET); 463 if (strcmp(shstrtab + name, ".strtab") == 0) 464 strtab = (char *)e + offset; 465 if (strcmp(shstrtab + name, ".dynstr") == 0) 466 dynstr = (char *)e + offset; 467 } 468 if (flags & ED_EHDR) 469 elf_print_ehdr(e); 470 if (flags & ED_PHDR) 471 elf_print_phdr(e, p); 472 if (flags & ED_SHDR) 473 elf_print_shdr(e, sh); 474 for (i = 0; (u_int64_t)i < phnum; i++) { 475 v = (char *)p + i * phentsize; 476 type = elf_get_word(e, v, P_TYPE); 477 switch (type) { 478 case PT_INTERP: 479 if (flags & ED_INTERP) 480 elf_print_interp(e, v); 481 break; 482 case PT_NULL: 483 case PT_LOAD: 484 case PT_DYNAMIC: 485 case PT_NOTE: 486 case PT_SHLIB: 487 case PT_PHDR: 488 break; 489 } 490 } 491 for (i = 0; (u_int64_t)i < shnum; i++) { 492 v = (char *)sh + i * shentsize; 493 type = elf_get_word(e, v, SH_TYPE); 494 switch (type) { 495 case SHT_SYMTAB: 496 if (flags & ED_SYMTAB) 497 elf_print_symtab(e, v, strtab); 498 break; 499 case SHT_DYNAMIC: 500 if (flags & ED_DYN) 501 elf_print_dynamic(e, v); 502 break; 503 case SHT_RELA: 504 if (flags & ED_REL) 505 elf_print_rela(e, v); 506 break; 507 case SHT_REL: 508 if (flags & ED_REL) 509 elf_print_rel(e, v); 510 break; 511 case SHT_NOTE: 512 name = elf_get_word(e, v, SH_NAME); 513 if (flags & ED_NOTE && 514 strcmp(shstrtab + name, ".note.ABI-tag") == 0) 515 elf_print_note(e, v); 516 break; 517 case SHT_DYNSYM: 518 if (flags & ED_SYMTAB) 519 elf_print_symtab(e, v, dynstr); 520 break; 521 case SHT_PROGBITS: 522 name = elf_get_word(e, v, SH_NAME); 523 if (flags & ED_GOT && 524 strcmp(shstrtab + name, ".got") == 0) 525 elf_print_got(e, v); 526 break; 527 case SHT_HASH: 528 if (flags & ED_HASH) 529 elf_print_hash(e, v); 530 break; 531 case SHT_NULL: 532 case SHT_STRTAB: 533 case SHT_NOBITS: 534 case SHT_SHLIB: 535 break; 536 } 537 } 538 539 return 0; 540} 541 542void 543elf_print_ehdr(Elf32_Ehdr *e) 544{ 545 u_int64_t class; 546 u_int64_t data; 547 u_int64_t osabi; 548 u_int64_t type; 549 u_int64_t machine; 550 u_int64_t version; 551 u_int64_t entry; 552 u_int64_t phoff; 553 u_int64_t shoff; 554 u_int64_t flags; 555 u_int64_t ehsize; 556 u_int64_t phentsize; 557 u_int64_t phnum; 558 u_int64_t shentsize; 559 u_int64_t shnum; 560 u_int64_t shstrndx; 561 562 class = elf_get_byte(e, e, E_CLASS); 563 data = elf_get_byte(e, e, E_DATA); 564 osabi = elf_get_byte(e, e, E_OSABI); 565 type = elf_get_quarter(e, e, E_TYPE); 566 machine = elf_get_quarter(e, e, E_MACHINE); 567 version = elf_get_word(e, e, E_VERSION); 568 entry = elf_get_addr(e, e, E_ENTRY); 569 phoff = elf_get_off(e, e, E_PHOFF); 570 shoff = elf_get_off(e, e, E_SHOFF); 571 flags = elf_get_word(e, e, E_FLAGS); 572 ehsize = elf_get_quarter(e, e, E_EHSIZE); 573 phentsize = elf_get_quarter(e, e, E_PHENTSIZE); 574 phnum = elf_get_quarter(e, e, E_PHNUM); 575 shentsize = elf_get_quarter(e, e, E_SHENTSIZE); 576 shnum = elf_get_quarter(e, e, E_SHNUM); 577 shstrndx = elf_get_quarter(e, e, E_SHSTRNDX); 578 fprintf(out, "\nelf header:\n"); 579 fprintf(out, "\n"); 580 fprintf(out, "\te_ident: %s %s %s\n", ei_classes[class], ei_data[data], 581 ei_abis[osabi]); 582 fprintf(out, "\te_type: %s\n", e_types[type]); 583 fprintf(out, "\te_machine: %s\n", e_machines(machine)); 584 fprintf(out, "\te_version: %s\n", ei_versions[version]); 585 fprintf(out, "\te_entry: %#llx\n", entry); 586 fprintf(out, "\te_phoff: %lld\n", phoff); 587 fprintf(out, "\te_shoff: %lld\n", shoff); 588 fprintf(out, "\te_flags: %lld\n", flags); 589 fprintf(out, "\te_ehsize: %lld\n", ehsize); 590 fprintf(out, "\te_phentsize: %lld\n", phentsize); 591 fprintf(out, "\te_phnum: %lld\n", phnum); 592 fprintf(out, "\te_shentsize: %lld\n", shentsize); 593 fprintf(out, "\te_shnum: %lld\n", shnum); 594 fprintf(out, "\te_shstrndx: %lld\n", shstrndx); 595} 596 597void 598elf_print_phdr(Elf32_Ehdr *e, void *p) 599{ 600 u_int64_t phentsize; 601 u_int64_t phnum; 602 u_int64_t type; 603 u_int64_t offset; 604 u_int64_t vaddr; 605 u_int64_t paddr; 606 u_int64_t filesz; 607 u_int64_t memsz; 608 u_int64_t flags; 609 u_int64_t align; 610 void *v; 611 int i; 612 613 phentsize = elf_get_quarter(e, e, E_PHENTSIZE); 614 phnum = elf_get_quarter(e, e, E_PHNUM); 615 fprintf(out, "\nprogram header:\n"); 616 for (i = 0; (u_int64_t)i < phnum; i++) { 617 v = (char *)p + i * phentsize; 618 type = elf_get_word(e, v, P_TYPE); 619 offset = elf_get_off(e, v, P_OFFSET); 620 vaddr = elf_get_addr(e, v, P_VADDR); 621 paddr = elf_get_addr(e, v, P_PADDR); 622 filesz = elf_get_size(e, v, P_FILESZ); 623 memsz = elf_get_size(e, v, P_MEMSZ); 624 flags = elf_get_word(e, v, P_FLAGS); 625 align = elf_get_size(e, v, P_ALIGN); 626 fprintf(out, "\n"); 627 fprintf(out, "entry: %d\n", i); 628 fprintf(out, "\tp_type: %s\n", p_types[type & 0x7]); 629 fprintf(out, "\tp_offset: %lld\n", offset); 630 fprintf(out, "\tp_vaddr: %#llx\n", vaddr); 631 fprintf(out, "\tp_paddr: %#llx\n", paddr); 632 fprintf(out, "\tp_filesz: %lld\n", filesz); 633 fprintf(out, "\tp_memsz: %lld\n", memsz); 634 fprintf(out, "\tp_flags: %s\n", p_flags[flags]); 635 fprintf(out, "\tp_align: %lld\n", align); 636 } 637} 638 639void 640elf_print_shdr(Elf32_Ehdr *e, void *sh) 641{ 642 u_int64_t shentsize; 643 u_int64_t shnum; 644 u_int64_t name; 645 u_int64_t type; 646 u_int64_t flags; 647 u_int64_t addr; 648 u_int64_t offset; 649 u_int64_t size; 650 u_int64_t shlink; 651 u_int64_t info; 652 u_int64_t addralign; 653 u_int64_t entsize; 654 void *v; 655 int i; 656 657 shentsize = elf_get_quarter(e, e, E_SHENTSIZE); 658 shnum = elf_get_quarter(e, e, E_SHNUM); 659 fprintf(out, "\nsection header:\n"); 660 for (i = 0; (u_int64_t)i < shnum; i++) { 661 v = (char *)sh + i * shentsize; 662 name = elf_get_word(e, v, SH_NAME); 663 type = elf_get_word(e, v, SH_TYPE); 664 flags = elf_get_word(e, v, SH_FLAGS); 665 addr = elf_get_addr(e, v, SH_ADDR); 666 offset = elf_get_off(e, v, SH_OFFSET); 667 size = elf_get_size(e, v, SH_SIZE); 668 shlink = elf_get_word(e, v, SH_LINK); 669 info = elf_get_word(e, v, SH_INFO); 670 addralign = elf_get_size(e, v, SH_ADDRALIGN); 671 entsize = elf_get_size(e, v, SH_ENTSIZE); 672 fprintf(out, "\n"); 673 fprintf(out, "entry: %d\n", i); 674 fprintf(out, "\tsh_name: %s\n", shstrtab + name); 675 fprintf(out, "\tsh_type: %s\n", sh_types(type)); 676 fprintf(out, "\tsh_flags: %s\n", sh_flags[flags & 0x7]); 677 fprintf(out, "\tsh_addr: %#llx\n", addr); 678 fprintf(out, "\tsh_offset: %lld\n", offset); 679 fprintf(out, "\tsh_size: %lld\n", size); 680 fprintf(out, "\tsh_link: %lld\n", shlink); 681 fprintf(out, "\tsh_info: %lld\n", info); 682 fprintf(out, "\tsh_addralign: %lld\n", addralign); 683 fprintf(out, "\tsh_entsize: %lld\n", entsize); 684 } 685} 686 687void 688elf_print_symtab(Elf32_Ehdr *e, void *sh, char *str) 689{ 690 u_int64_t offset; 691 u_int64_t entsize; 692 u_int64_t size; 693 u_int64_t name; 694 u_int64_t value; 695 u_int64_t info; 696 u_int64_t shndx; 697 void *st; 698 int len; 699 int i; 700 701 offset = elf_get_off(e, sh, SH_OFFSET); 702 entsize = elf_get_size(e, sh, SH_ENTSIZE); 703 size = elf_get_size(e, sh, SH_SIZE); 704 name = elf_get_word(e, sh, SH_NAME); 705 len = size / entsize; 706 fprintf(out, "\nsymbol table (%s):\n", shstrtab + name); 707 for (i = 0; i < len; i++) { 708 st = (char *)e + offset + i * entsize; 709 name = elf_get_word(e, st, ST_NAME); 710 value = elf_get_addr(e, st, ST_VALUE); 711 size = elf_get_size(e, st, ST_SIZE); 712 info = elf_get_byte(e, st, ST_INFO); 713 shndx = elf_get_quarter(e, st, ST_SHNDX); 714 fprintf(out, "\n"); 715 fprintf(out, "entry: %d\n", i); 716 fprintf(out, "\tst_name: %s\n", str + name); 717 fprintf(out, "\tst_value: %#llx\n", value); 718 fprintf(out, "\tst_size: %lld\n", size); 719 fprintf(out, "\tst_info: %s %s\n", 720 st_types[ELF32_ST_TYPE(info)], 721 st_bindings[ELF32_ST_BIND(info)]); 722 fprintf(out, "\tst_shndx: %lld\n", shndx); 723 } 724} 725 726void 727elf_print_dynamic(Elf32_Ehdr *e, void *sh) 728{ 729 u_int64_t offset; 730 u_int64_t entsize; 731 u_int64_t size; 732 int64_t tag; 733 u_int64_t ptr; 734 u_int64_t val; 735 void *d; 736 int i; 737 738 offset = elf_get_off(e, sh, SH_OFFSET); 739 entsize = elf_get_size(e, sh, SH_ENTSIZE); 740 size = elf_get_size(e, sh, SH_SIZE); 741 fprintf(out, "\ndynamic:\n"); 742 for (i = 0; (u_int64_t)i < size / entsize; i++) { 743 d = (char *)e + offset + i * entsize; 744 tag = elf_get_size(e, d, D_TAG); 745 ptr = elf_get_size(e, d, D_PTR); 746 val = elf_get_addr(e, d, D_VAL); 747 fprintf(out, "\n"); 748 fprintf(out, "entry: %d\n", i); 749 fprintf(out, "\td_tag: %s\n", d_tags(tag)); 750 switch (tag) { 751 case DT_NEEDED: 752 case DT_SONAME: 753 case DT_RPATH: 754 fprintf(out, "\td_val: %s\n", dynstr + val); 755 break; 756 case DT_PLTRELSZ: 757 case DT_RELA: 758 case DT_RELASZ: 759 case DT_RELAENT: 760 case DT_STRSZ: 761 case DT_SYMENT: 762 case DT_RELSZ: 763 case DT_RELENT: 764 case DT_PLTREL: 765 fprintf(out, "\td_val: %lld\n", val); 766 break; 767 case DT_PLTGOT: 768 case DT_HASH: 769 case DT_STRTAB: 770 case DT_SYMTAB: 771 case DT_INIT: 772 case DT_FINI: 773 case DT_REL: 774 case DT_JMPREL: 775 fprintf(out, "\td_ptr: %#llx\n", ptr); 776 break; 777 case DT_NULL: 778 case DT_SYMBOLIC: 779 case DT_DEBUG: 780 case DT_TEXTREL: 781 break; 782 } 783 } 784} 785 786void 787elf_print_rela(Elf32_Ehdr *e, void *sh) 788{ 789 u_int64_t offset; 790 u_int64_t entsize; 791 u_int64_t size; 792 u_int64_t name; 793 u_int64_t info; 794 int64_t addend; 795 void *ra; 796 void *v; 797 int i; 798 799 offset = elf_get_off(e, sh, SH_OFFSET); 800 entsize = elf_get_size(e, sh, SH_ENTSIZE); 801 size = elf_get_size(e, sh, SH_SIZE); 802 name = elf_get_word(e, sh, SH_NAME); 803 v = (char *)e + offset; 804 fprintf(out, "\nrelocation with addend (%s):\n", shstrtab + name); 805 for (i = 0; (u_int64_t)i < size / entsize; i++) { 806 ra = (char *)v + i * entsize; 807 offset = elf_get_addr(e, ra, RA_OFFSET); 808 info = elf_get_word(e, ra, RA_INFO); 809 addend = elf_get_off(e, ra, RA_ADDEND); 810 fprintf(out, "\n"); 811 fprintf(out, "entry: %d\n", i); 812 fprintf(out, "\tr_offset: %#llx\n", offset); 813 fprintf(out, "\tr_info: %lld\n", info); 814 fprintf(out, "\tr_addend: %lld\n", addend); 815 } 816} 817 818void 819elf_print_rel(Elf32_Ehdr *e, void *sh) 820{ 821 u_int64_t offset; 822 u_int64_t entsize; 823 u_int64_t size; 824 u_int64_t name; 825 u_int64_t info; 826 void *r; 827 void *v; 828 int i; 829 830 offset = elf_get_off(e, sh, SH_OFFSET); 831 entsize = elf_get_size(e, sh, SH_ENTSIZE); 832 size = elf_get_size(e, sh, SH_SIZE); 833 name = elf_get_word(e, sh, SH_NAME); 834 v = (char *)e + offset; 835 fprintf(out, "\nrelocation (%s):\n", shstrtab + name); 836 for (i = 0; (u_int64_t)i < size / entsize; i++) { 837 r = (char *)v + i * entsize; 838 offset = elf_get_addr(e, r, R_OFFSET); 839 info = elf_get_word(e, r, R_INFO); 840 fprintf(out, "\n"); 841 fprintf(out, "entry: %d\n", i); 842 fprintf(out, "\tr_offset: %#llx\n", offset); 843 fprintf(out, "\tr_info: %lld\n", info); 844 } 845} 846 847void 848elf_print_interp(Elf32_Ehdr *e, void *p) 849{ 850 u_int64_t offset; 851 char *s; 852 853 offset = elf_get_off(e, p, P_OFFSET); 854 s = (char *)e + offset; 855 fprintf(out, "\ninterp:\n"); 856 fprintf(out, "\t%s\n", s); 857} 858 859void 860elf_print_got(Elf32_Ehdr *e, void *sh) 861{ 862 u_int64_t offset; 863 u_int64_t addralign; 864 u_int64_t size; 865 u_int64_t addr; 866 void *v; 867 int i; 868 869 offset = elf_get_off(e, sh, SH_OFFSET); 870 addralign = elf_get_size(e, sh, SH_ADDRALIGN); 871 size = elf_get_size(e, sh, SH_SIZE); 872 v = (char *)e + offset; 873 fprintf(out, "\nglobal offset table:\n"); 874 for (i = 0; (u_int64_t)i < size / addralign; i++) { 875 addr = elf_get_addr(e, (char *)v + i * addralign, 0); 876 fprintf(out, "\n"); 877 fprintf(out, "entry: %d\n", i); 878 fprintf(out, "\t%#llx\n", addr); 879 } 880} 881 882void 883elf_print_hash(Elf32_Ehdr *e __unused, void *sh __unused) 884{ 885} 886 887void 888elf_print_note(Elf32_Ehdr *e, void *sh) 889{ 890 u_int64_t offset; 891 u_int64_t size; 892 u_int64_t name; 893 u_int32_t namesz; 894 u_int32_t descsz; 895 u_int32_t type; 896 u_int32_t desc; 897 char *n, *s; 898 899 offset = elf_get_off(e, sh, SH_OFFSET); 900 size = elf_get_size(e, sh, SH_SIZE); 901 name = elf_get_word(e, sh, SH_NAME); 902 n = (char *)e + offset; 903 fprintf(out, "\nnote (%s):\n", shstrtab + name); 904 while (n < ((char *)e + offset + size)) { 905 namesz = elf_get_word(e, n, N_NAMESZ); 906 descsz = elf_get_word(e, n, N_DESCSZ); 907 type = elf_get_word(e, n, N_TYPE); 908 s = n + sizeof(Elf_Note); 909 desc = elf_get_word(e, n + sizeof(Elf_Note) + namesz, 0); 910 fprintf(out, "\t%s %d\n", s, desc); 911 n += sizeof(Elf_Note) + namesz + descsz; 912 } 913} 914 915u_int64_t 916elf_get_byte(Elf32_Ehdr *e, void *base, elf_member_t member) 917{ 918 u_int64_t val; 919 u_char *p; 920 921 val = 0; 922 switch (e->e_ident[EI_CLASS]) { 923 case ELFCLASS32: 924 p = (char *)base + elf32_offsets[member]; 925 val = *p; 926 break; 927 case ELFCLASS64: 928 p = (char *)base + elf64_offsets[member]; 929 val = *p; 930 break; 931 case ELFCLASSNONE: 932 errx(1, "invalid class"); 933 } 934 935 return val; 936} 937 938u_int64_t 939elf_get_quarter(Elf32_Ehdr *e, void *base, elf_member_t member) 940{ 941 u_int64_t val; 942 u_char *p; 943 944 val = 0; 945 switch (e->e_ident[EI_CLASS]) { 946 case ELFCLASS32: 947 p = (char *)base + elf32_offsets[member]; 948 switch (e->e_ident[EI_DATA]) { 949 case ELFDATA2MSB: 950 val = p[0] << 8 | p[1]; 951 break; 952 case ELFDATA2LSB: 953 val = p[1] << 8 | p[0]; 954 break; 955 case ELFDATANONE: 956 errx(1, "invalid data format"); 957 } 958 break; 959 case ELFCLASS64: 960 p = (char *)base + elf64_offsets[member]; 961 switch (e->e_ident[EI_DATA]) { 962 case ELFDATA2MSB: 963 val = p[0] << 8 | p[1]; 964 break; 965 case ELFDATA2LSB: 966 val = p[1] << 8 | p[0]; 967 break; 968 case ELFDATANONE: 969 errx(1, "invalid data format"); 970 } 971 break; 972 case ELFCLASSNONE: 973 errx(1, "invalid class"); 974 } 975 976 return val; 977} 978 979u_int64_t 980elf_get_half(Elf32_Ehdr *e, void *base, elf_member_t member) 981{ 982 u_int64_t val; 983 u_char *p; 984 985 val = 0; 986 switch (e->e_ident[EI_CLASS]) { 987 case ELFCLASS32: 988 p = (char *)base + elf32_offsets[member]; 989 switch (e->e_ident[EI_DATA]) { 990 case ELFDATA2MSB: 991 val = p[0] << 8 | p[1]; 992 break; 993 case ELFDATA2LSB: 994 val = p[1] << 8 | p[0]; 995 break; 996 case ELFDATANONE: 997 errx(1, "invalid data format"); 998 } 999 break; 1000 case ELFCLASS64: 1001 p = (char *)base + elf64_offsets[member]; 1002 switch (e->e_ident[EI_DATA]) { 1003 case ELFDATA2MSB: 1004 val = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1005 break; 1006 case ELFDATA2LSB: 1007 val = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1008 break; 1009 case ELFDATANONE: 1010 errx(1, "invalid data format"); 1011 } 1012 break; 1013 case ELFCLASSNONE: 1014 errx(1, "invalid class"); 1015 } 1016 1017 return val; 1018} 1019 1020u_int64_t 1021elf_get_word(Elf32_Ehdr *e, void *base, elf_member_t member) 1022{ 1023 u_int64_t val; 1024 u_char *p; 1025 1026 val = 0; 1027 switch (e->e_ident[EI_CLASS]) { 1028 case ELFCLASS32: 1029 p = (char *)base + elf32_offsets[member]; 1030 switch (e->e_ident[EI_DATA]) { 1031 case ELFDATA2MSB: 1032 val = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1033 break; 1034 case ELFDATA2LSB: 1035 val = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1036 break; 1037 case ELFDATANONE: 1038 errx(1, "invalid data format"); 1039 } 1040 break; 1041 case ELFCLASS64: 1042 p = (char *)base + elf64_offsets[member]; 1043 switch (e->e_ident[EI_DATA]) { 1044 case ELFDATA2MSB: 1045 val = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1046 break; 1047 case ELFDATA2LSB: 1048 val = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1049 break; 1050 case ELFDATANONE: 1051 errx(1, "invalid data format"); 1052 } 1053 break; 1054 case ELFCLASSNONE: 1055 errx(1, "invalid class"); 1056 } 1057 1058 return val; 1059} 1060 1061u_int64_t 1062elf_get_quad(Elf32_Ehdr *e, void *base, elf_member_t member) 1063{ 1064 u_int64_t high; 1065 u_int64_t low; 1066 u_int64_t val; 1067 u_char *p; 1068 1069 val = 0; 1070 switch (e->e_ident[EI_CLASS]) { 1071 case ELFCLASS32: 1072 p = (char *)base + elf32_offsets[member]; 1073 switch (e->e_ident[EI_DATA]) { 1074 case ELFDATA2MSB: 1075 val = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1076 break; 1077 case ELFDATA2LSB: 1078 val = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1079 break; 1080 case ELFDATANONE: 1081 errx(1, "invalid data format"); 1082 } 1083 break; 1084 case ELFCLASS64: 1085 p = (char *)base + elf64_offsets[member]; 1086 switch (e->e_ident[EI_DATA]) { 1087 case ELFDATA2MSB: 1088 high = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1089 low = p[4] << 24 | p[5] << 16 | p[6] << 8 | p[7]; 1090 val = high << 32 | low; 1091 break; 1092 case ELFDATA2LSB: 1093 high = p[7] << 24 | p[6] << 16 | p[5] << 8 | p[4]; 1094 low = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1095 val = high << 32 | low; 1096 break; 1097 case ELFDATANONE: 1098 errx(1, "invalid data format"); 1099 } 1100 break; 1101 case ELFCLASSNONE: 1102 errx(1, "invalid class"); 1103 } 1104 1105 return val; 1106} 1107 1108void 1109usage(void) 1110{ 1111 fprintf(stderr, "usage: elfdump [-acdeiGhnprs] [-w file] filename\n"); 1112 exit(1); 1113} 1114