1 /*- 2 * Copyright (c) 2003 David O'Brien. All rights reserved. 3 * Copyright (c) 2001 Jake Burkholder 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 1. Redistributions of source code must retain the above copyright 10 * notice, this list of conditions and the following disclaimer. 11 * 2. Redistributions in binary form must reproduce the above copyright 12 * notice, this list of conditions and the following disclaimer in the 13 * documentation and/or other materials provided with the distribution. 14 * 15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 17 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25 * SUCH DAMAGE. 26 */ 27 28 #include <sys/cdefs.h> 29 __FBSDID("$FreeBSD$"); 30 31 #include <sys/types.h> 32 #include <sys/elf32.h> 33 #include <sys/elf64.h> 34 #include <sys/mman.h> 35 #include <sys/stat.h> 36 #include <err.h> 37 #include <fcntl.h> 38 #include <inttypes.h> 39 #include <stddef.h> 40 #include <stdio.h> 41 #include <stdlib.h> 42 #include <string.h> 43 #include <unistd.h> 44 45 #define ED_DYN (1<<0) 46 #define ED_EHDR (1<<1) 47 #define ED_GOT (1<<2) 48 #define ED_HASH (1<<3) 49 #define ED_INTERP (1<<4) 50 #define ED_NOTE (1<<5) 51 #define ED_PHDR (1<<6) 52 #define ED_REL (1<<7) 53 #define ED_SHDR (1<<8) 54 #define ED_SYMTAB (1<<9) 55 #define ED_ALL ((1<<10)-1) 56 57 #define elf_get_addr elf_get_quad 58 #define elf_get_off elf_get_quad 59 #define elf_get_size elf_get_quad 60 61 enum elf_member { 62 D_TAG = 1, D_PTR, D_VAL, 63 64 E_CLASS, E_DATA, E_OSABI, E_TYPE, E_MACHINE, E_VERSION, E_ENTRY, 65 E_PHOFF, E_SHOFF, E_FLAGS, E_EHSIZE, E_PHENTSIZE, E_PHNUM, E_SHENTSIZE, 66 E_SHNUM, E_SHSTRNDX, 67 68 N_NAMESZ, N_DESCSZ, N_TYPE, 69 70 P_TYPE, P_OFFSET, P_VADDR, P_PADDR, P_FILESZ, P_MEMSZ, P_FLAGS, 71 P_ALIGN, 72 73 SH_NAME, SH_TYPE, SH_FLAGS, SH_ADDR, SH_OFFSET, SH_SIZE, SH_LINK, 74 SH_INFO, SH_ADDRALIGN, SH_ENTSIZE, 75 76 ST_NAME, ST_VALUE, ST_SIZE, ST_INFO, ST_SHNDX, 77 78 R_OFFSET, R_INFO, 79 80 RA_OFFSET, RA_INFO, RA_ADDEND 81 }; 82 83 typedef enum elf_member elf_member_t; 84 85 int elf32_offsets[] = { 86 0, 87 88 offsetof(Elf32_Dyn, d_tag), offsetof(Elf32_Dyn, d_un.d_ptr), 89 offsetof(Elf32_Dyn, d_un.d_val), 90 91 offsetof(Elf32_Ehdr, e_ident[EI_CLASS]), 92 offsetof(Elf32_Ehdr, e_ident[EI_DATA]), 93 offsetof(Elf32_Ehdr, e_ident[EI_OSABI]), 94 offsetof(Elf32_Ehdr, e_type), offsetof(Elf32_Ehdr, e_machine), 95 offsetof(Elf32_Ehdr, e_version), offsetof(Elf32_Ehdr, e_entry), 96 offsetof(Elf32_Ehdr, e_phoff), offsetof(Elf32_Ehdr, e_shoff), 97 offsetof(Elf32_Ehdr, e_flags), offsetof(Elf32_Ehdr, e_ehsize), 98 offsetof(Elf32_Ehdr, e_phentsize), offsetof(Elf32_Ehdr, e_phnum), 99 offsetof(Elf32_Ehdr, e_shentsize), offsetof(Elf32_Ehdr, e_shnum), 100 offsetof(Elf32_Ehdr, e_shstrndx), 101 102 offsetof(Elf_Note, n_namesz), offsetof(Elf_Note, n_descsz), 103 offsetof(Elf_Note, n_type), 104 105 offsetof(Elf32_Phdr, p_type), offsetof(Elf32_Phdr, p_offset), 106 offsetof(Elf32_Phdr, p_vaddr), offsetof(Elf32_Phdr, p_paddr), 107 offsetof(Elf32_Phdr, p_filesz), offsetof(Elf32_Phdr, p_memsz), 108 offsetof(Elf32_Phdr, p_flags), offsetof(Elf32_Phdr, p_align), 109 110 offsetof(Elf32_Shdr, sh_name), offsetof(Elf32_Shdr, sh_type), 111 offsetof(Elf32_Shdr, sh_flags), offsetof(Elf32_Shdr, sh_addr), 112 offsetof(Elf32_Shdr, sh_offset), offsetof(Elf32_Shdr, sh_size), 113 offsetof(Elf32_Shdr, sh_link), offsetof(Elf32_Shdr, sh_info), 114 offsetof(Elf32_Shdr, sh_addralign), offsetof(Elf32_Shdr, sh_entsize), 115 116 offsetof(Elf32_Sym, st_name), offsetof(Elf32_Sym, st_value), 117 offsetof(Elf32_Sym, st_size), offsetof(Elf32_Sym, st_info), 118 offsetof(Elf32_Sym, st_shndx), 119 120 offsetof(Elf32_Rel, r_offset), offsetof(Elf32_Rel, r_info), 121 122 offsetof(Elf32_Rela, r_offset), offsetof(Elf32_Rela, r_info), 123 offsetof(Elf32_Rela, r_addend) 124 }; 125 126 int elf64_offsets[] = { 127 0, 128 129 offsetof(Elf64_Dyn, d_tag), offsetof(Elf64_Dyn, d_un.d_ptr), 130 offsetof(Elf64_Dyn, d_un.d_val), 131 132 offsetof(Elf32_Ehdr, e_ident[EI_CLASS]), 133 offsetof(Elf32_Ehdr, e_ident[EI_DATA]), 134 offsetof(Elf32_Ehdr, e_ident[EI_OSABI]), 135 offsetof(Elf64_Ehdr, e_type), offsetof(Elf64_Ehdr, e_machine), 136 offsetof(Elf64_Ehdr, e_version), offsetof(Elf64_Ehdr, e_entry), 137 offsetof(Elf64_Ehdr, e_phoff), offsetof(Elf64_Ehdr, e_shoff), 138 offsetof(Elf64_Ehdr, e_flags), offsetof(Elf64_Ehdr, e_ehsize), 139 offsetof(Elf64_Ehdr, e_phentsize), offsetof(Elf64_Ehdr, e_phnum), 140 offsetof(Elf64_Ehdr, e_shentsize), offsetof(Elf64_Ehdr, e_shnum), 141 offsetof(Elf64_Ehdr, e_shstrndx), 142 143 offsetof(Elf_Note, n_namesz), offsetof(Elf_Note, n_descsz), 144 offsetof(Elf_Note, n_type), 145 146 offsetof(Elf64_Phdr, p_type), offsetof(Elf64_Phdr, p_offset), 147 offsetof(Elf64_Phdr, p_vaddr), offsetof(Elf64_Phdr, p_paddr), 148 offsetof(Elf64_Phdr, p_filesz), offsetof(Elf64_Phdr, p_memsz), 149 offsetof(Elf64_Phdr, p_flags), offsetof(Elf64_Phdr, p_align), 150 151 offsetof(Elf64_Shdr, sh_name), offsetof(Elf64_Shdr, sh_type), 152 offsetof(Elf64_Shdr, sh_flags), offsetof(Elf64_Shdr, sh_addr), 153 offsetof(Elf64_Shdr, sh_offset), offsetof(Elf64_Shdr, sh_size), 154 offsetof(Elf64_Shdr, sh_link), offsetof(Elf64_Shdr, sh_info), 155 offsetof(Elf64_Shdr, sh_addralign), offsetof(Elf64_Shdr, sh_entsize), 156 157 offsetof(Elf64_Sym, st_name), offsetof(Elf64_Sym, st_value), 158 offsetof(Elf64_Sym, st_size), offsetof(Elf64_Sym, st_info), 159 offsetof(Elf64_Sym, st_shndx), 160 161 offsetof(Elf64_Rel, r_offset), offsetof(Elf64_Rel, r_info), 162 163 offsetof(Elf64_Rela, r_offset), offsetof(Elf64_Rela, r_info), 164 offsetof(Elf64_Rela, r_addend) 165 }; 166 167 /* http://www.sco.com/developers/gabi/latest/ch5.dynamic.html#tag_encodings */ 168 static const char * 169 d_tags(u_int64_t tag) { 170 switch (tag) { 171 case 0: return "DT_NULL"; 172 case 1: return "DT_NEEDED"; 173 case 2: return "DT_PLTRELSZ"; 174 case 3: return "DT_PLTGOT"; 175 case 4: return "DT_HASH"; 176 case 5: return "DT_STRTAB"; 177 case 6: return "DT_SYMTAB"; 178 case 7: return "DT_RELA"; 179 case 8: return "DT_RELASZ"; 180 case 9: return "DT_RELAENT"; 181 case 10: return "DT_STRSZ"; 182 case 11: return "DT_SYMENT"; 183 case 12: return "DT_INIT"; 184 case 13: return "DT_FINI"; 185 case 14: return "DT_SONAME"; 186 case 15: return "DT_RPATH"; 187 case 16: return "DT_SYMBOLIC"; 188 case 17: return "DT_REL"; 189 case 18: return "DT_RELSZ"; 190 case 19: return "DT_RELENT"; 191 case 20: return "DT_PLTREL"; 192 case 21: return "DT_DEBUG"; 193 case 22: return "DT_TEXTREL"; 194 case 23: return "DT_JMPREL"; 195 case 24: return "DT_BIND_NOW"; 196 case 25: return "DT_INIT_ARRAY"; 197 case 26: return "DT_FINI_ARRAY"; 198 case 27: return "DT_INIT_ARRAYSZ"; 199 case 28: return "DT_FINI_ARRAYSZ"; 200 case 29: return "DT_RUNPATH"; 201 case 30: return "DT_FLAGS"; 202 case 32: return "DT_PREINIT_ARRAY"; /* XXX: DT_ENCODING */ 203 case 33: return "DT_PREINIT_ARRAYSZ"; 204 /* 0x6000000D - 0x6ffff000 operating system-specific semantics */ 205 case 0x6ffffdf5: return "DT_GNU_PRELINKED"; 206 case 0x6ffffdf6: return "DT_GNU_CONFLICTSZ"; 207 case 0x6ffffdf7: return "DT_GNU_LIBLISTSZ"; 208 case 0x6ffffdf8: return "DT_SUNW_CHECKSUM"; 209 case 0x6ffffdf9: return "DT_PLTPADSZ"; 210 case 0x6ffffdfa: return "DT_MOVEENT"; 211 case 0x6ffffdfb: return "DT_MOVESZ"; 212 case 0x6ffffdfc: return "DT_FEATURE"; 213 case 0x6ffffdfd: return "DT_POSFLAG_1"; 214 case 0x6ffffdfe: return "DT_SYMINSZ"; 215 case 0x6ffffdff: return "DT_SYMINENT (DT_VALRNGHI)"; 216 case 0x6ffffe00: return "DT_ADDRRNGLO"; 217 case 0x6ffffef8: return "DT_GNU_CONFLICT"; 218 case 0x6ffffef9: return "DT_GNU_LIBLIST"; 219 case 0x6ffffefa: return "DT_SUNW_CONFIG"; 220 case 0x6ffffefb: return "DT_SUNW_DEPAUDIT"; 221 case 0x6ffffefc: return "DT_SUNW_AUDIT"; 222 case 0x6ffffefd: return "DT_SUNW_PLTPAD"; 223 case 0x6ffffefe: return "DT_SUNW_MOVETAB"; 224 case 0x6ffffeff: return "DT_SYMINFO (DT_ADDRRNGHI)"; 225 case 0x6ffffff9: return "DT_RELACOUNT"; 226 case 0x6ffffffa: return "DT_RELCOUNT"; 227 case 0x6ffffffb: return "DT_FLAGS_1"; 228 case 0x6ffffffc: return "DT_VERDEF"; 229 case 0x6ffffffd: return "DT_VERDEFNUM"; 230 case 0x6ffffffe: return "DT_VERNEED"; 231 case 0x6fffffff: return "DT_VERNEEDNUM"; 232 case 0x6ffffff0: return "DT_GNU_VERSYM"; 233 /* 0x70000000 - 0x7fffffff processor-specific semantics */ 234 case 0x70000000: return "DT_IA64_PLT_RESERVE"; 235 case 0x7ffffffd: return "DT_SUNW_AUXILIARY"; 236 case 0x7ffffffe: return "DT_SUNW_USED"; 237 case 0x7fffffff: return "DT_SUNW_FILTER"; 238 default: return "ERROR: TAG NOT DEFINED"; 239 } 240 }; 241 242 static const char * 243 e_machines(u_int mach) 244 { 245 switch (mach) { 246 case EM_NONE: return "EM_NONE"; 247 case EM_M32: return "EM_M32"; 248 case EM_SPARC: return "EM_SPARC"; 249 case EM_386: return "EM_386"; 250 case EM_68K: return "EM_68K"; 251 case EM_88K: return "EM_88K"; 252 case EM_486: return "EM_486"; 253 case EM_860: return "EM_860"; 254 case EM_MIPS: return "EM_MIPS"; 255 case EM_IA_64: return "EM_IA_64"; 256 } 257 return "(unknown machine)"; 258 }; 259 260 const char *e_types[] = { 261 "ET_NONE", "ET_REL", "ET_EXEC", "ET_DYN", "ET_CORE" 262 }; 263 264 const char *ei_versions[] = { 265 "EV_NONE", "EV_CURRENT" 266 }; 267 268 const char *ei_classes[] = { 269 "ELFCLASSNONE", "ELFCLASS32", "ELFCLASS64" 270 }; 271 272 const char *ei_data[] = { 273 "ELFDATANONE", "ELFDATA2LSB", "ELFDATA2MSB" 274 }; 275 276 const char *ei_abis[] = { 277 "ELFOSABI_SYSV", "ELFOSABI_HPUX", "ELFOSABI_NETBSD", "ELFOSABI_LINUX", 278 "ELFOSABI_HURD", "ELFOSABI_86OPEN", "ELFOSABI_SOLARIS", 279 "ELFOSABI_MONTEREY", "ELFOSABI_IRIX", "ELFOSABI_FREEBSD", 280 "ELFOSABI_TRU64", "ELFOSABI_MODESTO", "ELFOSABI_OPENBSD" 281 }; 282 283 const char *p_types[] = { 284 "PT_NULL", "PT_LOAD", "PT_DYNAMIC", "PT_INTERP", "PT_NOTE", 285 "PT_SHLIB", "PT_PHDR" 286 }; 287 288 const char *p_flags[] = { 289 "", "PF_X", "PF_W", "PF_X|PF_W", "PF_R", "PF_X|PF_R", "PF_W|PF_R", 290 "PF_X|PF_W|PF_R" 291 }; 292 293 /* http://www.sco.com/developers/gabi/latest/ch4.sheader.html#sh_type */ 294 static const char * 295 sh_types(u_int64_t sht) { 296 switch (sht) { 297 case 0: return "SHT_NULL"; 298 case 1: return "SHT_PROGBITS"; 299 case 2: return "SHT_SYMTAB"; 300 case 3: return "SHT_STRTAB"; 301 case 4: return "SHT_RELA"; 302 case 5: return "SHT_HASH"; 303 case 6: return "SHT_DYNAMIC"; 304 case 7: return "SHT_NOTE"; 305 case 8: return "SHT_NOBITS"; 306 case 9: return "SHT_REL"; 307 case 10: return "SHT_SHLIB"; 308 case 11: return "SHT_DYNSYM"; 309 case 14: return "SHT_INIT_ARRAY"; 310 case 15: return "SHT_FINI_ARRAY"; 311 case 16: return "SHT_PREINIT_ARRAY"; 312 case 17: return "SHT_GROUP"; 313 case 18: return "SHT_SYMTAB_SHNDX"; 314 /* 0x60000000 - 0x6fffffff operating system-specific semantics */ 315 case 0x6ffffff0: return "XXX:VERSYM"; 316 case 0x6ffffff7: return "SHT_GNU_LIBLIST"; 317 case 0x6ffffffc: return "XXX:VERDEF"; 318 case 0x6ffffffd: return "SHT_SUNW(GNU)_verdef"; 319 case 0x6ffffffe: return "SHT_SUNW(GNU)_verneed"; 320 case 0x6fffffff: return "SHT_SUNW(GNU)_versym"; 321 /* 0x70000000 - 0x7fffffff processor-specific semantics */ 322 case 0x70000000: return "SHT_IA_64_EXT"; 323 case 0x70000001: return "SHT_IA_64_UNWIND"; 324 case 0x7ffffffd: return "XXX:AUXILIARY"; 325 case 0x7fffffff: return "XXX:FILTER"; 326 /* 0x80000000 - 0xffffffff application programs */ 327 default: return "ERROR: SHT NOT DEFINED"; 328 } 329 }; 330 331 const char *sh_flags[] = { 332 "", "SHF_WRITE", "SHF_ALLOC", "SHF_WRITE|SHF_ALLOC", "SHF_EXECINSTR", 333 "SHF_WRITE|SHF_EXECINSTR", "SHF_ALLOC|SHF_EXECINSTR", 334 "SHF_WRITE|SHF_ALLOC|SHF_EXECINSTR" 335 }; 336 337 const char *st_types[] = { 338 "STT_NOTYPE", "STT_OBJECT", "STT_FUNC", "STT_SECTION", "STT_FILE" 339 }; 340 341 const char *st_bindings[] = { 342 "STB_LOCAL", "STB_GLOBAL", "STB_WEAK" 343 }; 344 345 char *dynstr; 346 char *shstrtab; 347 char *strtab; 348 FILE *out; 349 350 u_int64_t elf_get_byte(Elf32_Ehdr *e, void *base, elf_member_t member); 351 u_int64_t elf_get_quarter(Elf32_Ehdr *e, void *base, elf_member_t member); 352 u_int64_t elf_get_half(Elf32_Ehdr *e, void *base, elf_member_t member); 353 u_int64_t elf_get_word(Elf32_Ehdr *e, void *base, elf_member_t member); 354 u_int64_t elf_get_quad(Elf32_Ehdr *e, void *base, elf_member_t member); 355 356 void elf_print_ehdr(Elf32_Ehdr *e); 357 void elf_print_phdr(Elf32_Ehdr *e, void *p); 358 void elf_print_shdr(Elf32_Ehdr *e, void *sh); 359 void elf_print_symtab(Elf32_Ehdr *e, void *sh, char *str); 360 void elf_print_dynamic(Elf32_Ehdr *e, void *sh); 361 void elf_print_rel(Elf32_Ehdr *e, void *r); 362 void elf_print_rela(Elf32_Ehdr *e, void *ra); 363 void elf_print_interp(Elf32_Ehdr *e, void *p); 364 void elf_print_got(Elf32_Ehdr *e, void *sh); 365 void elf_print_hash(Elf32_Ehdr *e, void *sh); 366 void elf_print_note(Elf32_Ehdr *e, void *sh); 367 368 void usage(void); 369 370 int 371 main(int ac, char **av) 372 { 373 u_int64_t phoff; 374 u_int64_t shoff; 375 u_int64_t phentsize; 376 u_int64_t phnum; 377 u_int64_t shentsize; 378 u_int64_t shnum; 379 u_int64_t shstrndx; 380 u_int64_t offset; 381 u_int64_t name; 382 u_int64_t type; 383 struct stat sb; 384 u_int flags; 385 Elf32_Ehdr *e; 386 void *p; 387 void *sh; 388 void *v; 389 int fd; 390 int ch; 391 int i; 392 393 out = stdout; 394 flags = 0; 395 while ((ch = getopt(ac, av, "acdeiGhnprsw:")) != -1) 396 switch (ch) { 397 case 'a': 398 flags = ED_ALL; 399 break; 400 case 'c': 401 flags |= ED_SHDR; 402 break; 403 case 'd': 404 flags |= ED_DYN; 405 break; 406 case 'e': 407 flags |= ED_EHDR; 408 break; 409 case 'i': 410 flags |= ED_INTERP; 411 break; 412 case 'G': 413 flags |= ED_GOT; 414 break; 415 case 'h': 416 flags |= ED_HASH; 417 break; 418 case 'n': 419 flags |= ED_NOTE; 420 break; 421 case 'p': 422 flags |= ED_PHDR; 423 break; 424 case 'r': 425 flags |= ED_REL; 426 break; 427 case 's': 428 flags |= ED_SYMTAB; 429 break; 430 case 'w': 431 if ((out = fopen(optarg, "w")) == NULL) 432 err(1, "%s", optarg); 433 break; 434 case '?': 435 default: 436 usage(); 437 } 438 ac -= optind; 439 av += optind; 440 if (ac == 0 || flags == 0) 441 usage(); 442 if ((fd = open(*av, O_RDONLY)) < 0 || 443 fstat(fd, &sb) < 0) 444 err(1, NULL); 445 e = mmap(NULL, sb.st_size, PROT_READ, MAP_SHARED, fd, 0); 446 if (e == MAP_FAILED) 447 err(1, NULL); 448 if (!IS_ELF(*(Elf32_Ehdr *)e)) 449 errx(1, "not an elf file"); 450 phoff = elf_get_off(e, e, E_PHOFF); 451 shoff = elf_get_off(e, e, E_SHOFF); 452 phentsize = elf_get_quarter(e, e, E_PHENTSIZE); 453 phnum = elf_get_quarter(e, e, E_PHNUM); 454 shentsize = elf_get_quarter(e, e, E_SHENTSIZE); 455 shnum = elf_get_quarter(e, e, E_SHNUM); 456 shstrndx = elf_get_quarter(e, e, E_SHSTRNDX); 457 p = (char *)e + phoff; 458 sh = (char *)e + shoff; 459 offset = elf_get_off(e, (char *)sh + shstrndx * shentsize, SH_OFFSET); 460 shstrtab = (char *)e + offset; 461 for (i = 0; (u_int64_t)i < shnum; i++) { 462 name = elf_get_word(e, (char *)sh + i * shentsize, SH_NAME); 463 offset = elf_get_off(e, (char *)sh + i * shentsize, SH_OFFSET); 464 if (strcmp(shstrtab + name, ".strtab") == 0) 465 strtab = (char *)e + offset; 466 if (strcmp(shstrtab + name, ".dynstr") == 0) 467 dynstr = (char *)e + offset; 468 } 469 if (flags & ED_EHDR) 470 elf_print_ehdr(e); 471 if (flags & ED_PHDR) 472 elf_print_phdr(e, p); 473 if (flags & ED_SHDR) 474 elf_print_shdr(e, sh); 475 for (i = 0; (u_int64_t)i < phnum; i++) { 476 v = (char *)p + i * phentsize; 477 type = elf_get_word(e, v, P_TYPE); 478 switch (type) { 479 case PT_INTERP: 480 if (flags & ED_INTERP) 481 elf_print_interp(e, v); 482 break; 483 case PT_NULL: 484 case PT_LOAD: 485 case PT_DYNAMIC: 486 case PT_NOTE: 487 case PT_SHLIB: 488 case PT_PHDR: 489 break; 490 } 491 } 492 for (i = 0; (u_int64_t)i < shnum; i++) { 493 v = (char *)sh + i * shentsize; 494 type = elf_get_word(e, v, SH_TYPE); 495 switch (type) { 496 case SHT_SYMTAB: 497 if (flags & ED_SYMTAB) 498 elf_print_symtab(e, v, strtab); 499 break; 500 case SHT_DYNAMIC: 501 if (flags & ED_DYN) 502 elf_print_dynamic(e, v); 503 break; 504 case SHT_RELA: 505 if (flags & ED_REL) 506 elf_print_rela(e, v); 507 break; 508 case SHT_REL: 509 if (flags & ED_REL) 510 elf_print_rel(e, v); 511 break; 512 case SHT_NOTE: 513 name = elf_get_word(e, v, SH_NAME); 514 if (flags & ED_NOTE && 515 strcmp(shstrtab + name, ".note.ABI-tag") == 0) 516 elf_print_note(e, v); 517 break; 518 case SHT_DYNSYM: 519 if (flags & ED_SYMTAB) 520 elf_print_symtab(e, v, dynstr); 521 break; 522 case SHT_PROGBITS: 523 name = elf_get_word(e, v, SH_NAME); 524 if (flags & ED_GOT && 525 strcmp(shstrtab + name, ".got") == 0) 526 elf_print_got(e, v); 527 break; 528 case SHT_HASH: 529 if (flags & ED_HASH) 530 elf_print_hash(e, v); 531 break; 532 case SHT_NULL: 533 case SHT_STRTAB: 534 case SHT_NOBITS: 535 case SHT_SHLIB: 536 break; 537 } 538 } 539 540 return 0; 541 } 542 543 void 544 elf_print_ehdr(Elf32_Ehdr *e) 545 { 546 u_int64_t class; 547 u_int64_t data; 548 u_int64_t osabi; 549 u_int64_t type; 550 u_int64_t machine; 551 u_int64_t version; 552 u_int64_t entry; 553 u_int64_t phoff; 554 u_int64_t shoff; 555 u_int64_t flags; 556 u_int64_t ehsize; 557 u_int64_t phentsize; 558 u_int64_t phnum; 559 u_int64_t shentsize; 560 u_int64_t shnum; 561 u_int64_t shstrndx; 562 563 class = elf_get_byte(e, e, E_CLASS); 564 data = elf_get_byte(e, e, E_DATA); 565 osabi = elf_get_byte(e, e, E_OSABI); 566 type = elf_get_quarter(e, e, E_TYPE); 567 machine = elf_get_quarter(e, e, E_MACHINE); 568 version = elf_get_word(e, e, E_VERSION); 569 entry = elf_get_addr(e, e, E_ENTRY); 570 phoff = elf_get_off(e, e, E_PHOFF); 571 shoff = elf_get_off(e, e, E_SHOFF); 572 flags = elf_get_word(e, e, E_FLAGS); 573 ehsize = elf_get_quarter(e, e, E_EHSIZE); 574 phentsize = elf_get_quarter(e, e, E_PHENTSIZE); 575 phnum = elf_get_quarter(e, e, E_PHNUM); 576 shentsize = elf_get_quarter(e, e, E_SHENTSIZE); 577 shnum = elf_get_quarter(e, e, E_SHNUM); 578 shstrndx = elf_get_quarter(e, e, E_SHSTRNDX); 579 fprintf(out, "\nelf header:\n"); 580 fprintf(out, "\n"); 581 fprintf(out, "\te_ident: %s %s %s\n", ei_classes[class], ei_data[data], 582 ei_abis[osabi]); 583 fprintf(out, "\te_type: %s\n", e_types[type]); 584 fprintf(out, "\te_machine: %s\n", e_machines(machine)); 585 fprintf(out, "\te_version: %s\n", ei_versions[version]); 586 fprintf(out, "\te_entry: %#jx\n", (intmax_t)entry); 587 fprintf(out, "\te_phoff: %jd\n", (intmax_t)phoff); 588 fprintf(out, "\te_shoff: %jd\n", (intmax_t)shoff); 589 fprintf(out, "\te_flags: %jd\n", (intmax_t)flags); 590 fprintf(out, "\te_ehsize: %jd\n", (intmax_t)ehsize); 591 fprintf(out, "\te_phentsize: %jd\n", (intmax_t)phentsize); 592 fprintf(out, "\te_phnum: %jd\n", (intmax_t)phnum); 593 fprintf(out, "\te_shentsize: %jd\n", (intmax_t)shentsize); 594 fprintf(out, "\te_shnum: %jd\n", (intmax_t)shnum); 595 fprintf(out, "\te_shstrndx: %jd\n", (intmax_t)shstrndx); 596 } 597 598 void 599 elf_print_phdr(Elf32_Ehdr *e, void *p) 600 { 601 u_int64_t phentsize; 602 u_int64_t phnum; 603 u_int64_t type; 604 u_int64_t offset; 605 u_int64_t vaddr; 606 u_int64_t paddr; 607 u_int64_t filesz; 608 u_int64_t memsz; 609 u_int64_t flags; 610 u_int64_t align; 611 void *v; 612 int i; 613 614 phentsize = elf_get_quarter(e, e, E_PHENTSIZE); 615 phnum = elf_get_quarter(e, e, E_PHNUM); 616 fprintf(out, "\nprogram header:\n"); 617 for (i = 0; (u_int64_t)i < phnum; i++) { 618 v = (char *)p + i * phentsize; 619 type = elf_get_word(e, v, P_TYPE); 620 offset = elf_get_off(e, v, P_OFFSET); 621 vaddr = elf_get_addr(e, v, P_VADDR); 622 paddr = elf_get_addr(e, v, P_PADDR); 623 filesz = elf_get_size(e, v, P_FILESZ); 624 memsz = elf_get_size(e, v, P_MEMSZ); 625 flags = elf_get_word(e, v, P_FLAGS); 626 align = elf_get_size(e, v, P_ALIGN); 627 fprintf(out, "\n"); 628 fprintf(out, "entry: %d\n", i); 629 fprintf(out, "\tp_type: %s\n", p_types[type & 0x7]); 630 fprintf(out, "\tp_offset: %jd\n", (intmax_t)offset); 631 fprintf(out, "\tp_vaddr: %#jx\n", (intmax_t)vaddr); 632 fprintf(out, "\tp_paddr: %#jx\n", (intmax_t)paddr); 633 fprintf(out, "\tp_filesz: %jd\n", (intmax_t)filesz); 634 fprintf(out, "\tp_memsz: %jd\n", (intmax_t)memsz); 635 fprintf(out, "\tp_flags: %s\n", p_flags[flags]); 636 fprintf(out, "\tp_align: %jd\n", (intmax_t)align); 637 } 638 } 639 640 void 641 elf_print_shdr(Elf32_Ehdr *e, void *sh) 642 { 643 u_int64_t shentsize; 644 u_int64_t shnum; 645 u_int64_t name; 646 u_int64_t type; 647 u_int64_t flags; 648 u_int64_t addr; 649 u_int64_t offset; 650 u_int64_t size; 651 u_int64_t shlink; 652 u_int64_t info; 653 u_int64_t addralign; 654 u_int64_t entsize; 655 void *v; 656 int i; 657 658 shentsize = elf_get_quarter(e, e, E_SHENTSIZE); 659 shnum = elf_get_quarter(e, e, E_SHNUM); 660 fprintf(out, "\nsection header:\n"); 661 for (i = 0; (u_int64_t)i < shnum; i++) { 662 v = (char *)sh + i * shentsize; 663 name = elf_get_word(e, v, SH_NAME); 664 type = elf_get_word(e, v, SH_TYPE); 665 flags = elf_get_word(e, v, SH_FLAGS); 666 addr = elf_get_addr(e, v, SH_ADDR); 667 offset = elf_get_off(e, v, SH_OFFSET); 668 size = elf_get_size(e, v, SH_SIZE); 669 shlink = elf_get_word(e, v, SH_LINK); 670 info = elf_get_word(e, v, SH_INFO); 671 addralign = elf_get_size(e, v, SH_ADDRALIGN); 672 entsize = elf_get_size(e, v, SH_ENTSIZE); 673 fprintf(out, "\n"); 674 fprintf(out, "entry: %d\n", i); 675 fprintf(out, "\tsh_name: %s\n", shstrtab + name); 676 fprintf(out, "\tsh_type: %s\n", sh_types(type)); 677 fprintf(out, "\tsh_flags: %s\n", sh_flags[flags & 0x7]); 678 fprintf(out, "\tsh_addr: %#jx\n", addr); 679 fprintf(out, "\tsh_offset: %jd\n", (intmax_t)offset); 680 fprintf(out, "\tsh_size: %jd\n", (intmax_t)size); 681 fprintf(out, "\tsh_link: %jd\n", (intmax_t)shlink); 682 fprintf(out, "\tsh_info: %jd\n", (intmax_t)info); 683 fprintf(out, "\tsh_addralign: %jd\n", (intmax_t)addralign); 684 fprintf(out, "\tsh_entsize: %jd\n", (intmax_t)entsize); 685 } 686 } 687 688 void 689 elf_print_symtab(Elf32_Ehdr *e, void *sh, char *str) 690 { 691 u_int64_t offset; 692 u_int64_t entsize; 693 u_int64_t size; 694 u_int64_t name; 695 u_int64_t value; 696 u_int64_t info; 697 u_int64_t shndx; 698 void *st; 699 int len; 700 int i; 701 702 offset = elf_get_off(e, sh, SH_OFFSET); 703 entsize = elf_get_size(e, sh, SH_ENTSIZE); 704 size = elf_get_size(e, sh, SH_SIZE); 705 name = elf_get_word(e, sh, SH_NAME); 706 len = size / entsize; 707 fprintf(out, "\nsymbol table (%s):\n", shstrtab + name); 708 for (i = 0; i < len; i++) { 709 st = (char *)e + offset + i * entsize; 710 name = elf_get_word(e, st, ST_NAME); 711 value = elf_get_addr(e, st, ST_VALUE); 712 size = elf_get_size(e, st, ST_SIZE); 713 info = elf_get_byte(e, st, ST_INFO); 714 shndx = elf_get_quarter(e, st, ST_SHNDX); 715 fprintf(out, "\n"); 716 fprintf(out, "entry: %d\n", i); 717 fprintf(out, "\tst_name: %s\n", str + name); 718 fprintf(out, "\tst_value: %#jx\n", value); 719 fprintf(out, "\tst_size: %jd\n", (intmax_t)size); 720 fprintf(out, "\tst_info: %s %s\n", 721 st_types[ELF32_ST_TYPE(info)], 722 st_bindings[ELF32_ST_BIND(info)]); 723 fprintf(out, "\tst_shndx: %jd\n", (intmax_t)shndx); 724 } 725 } 726 727 void 728 elf_print_dynamic(Elf32_Ehdr *e, void *sh) 729 { 730 u_int64_t offset; 731 u_int64_t entsize; 732 u_int64_t size; 733 int64_t tag; 734 u_int64_t ptr; 735 u_int64_t val; 736 void *d; 737 int i; 738 739 offset = elf_get_off(e, sh, SH_OFFSET); 740 entsize = elf_get_size(e, sh, SH_ENTSIZE); 741 size = elf_get_size(e, sh, SH_SIZE); 742 fprintf(out, "\ndynamic:\n"); 743 for (i = 0; (u_int64_t)i < size / entsize; i++) { 744 d = (char *)e + offset + i * entsize; 745 tag = elf_get_size(e, d, D_TAG); 746 ptr = elf_get_size(e, d, D_PTR); 747 val = elf_get_addr(e, d, D_VAL); 748 fprintf(out, "\n"); 749 fprintf(out, "entry: %d\n", i); 750 fprintf(out, "\td_tag: %s\n", d_tags(tag)); 751 switch (tag) { 752 case DT_NEEDED: 753 case DT_SONAME: 754 case DT_RPATH: 755 fprintf(out, "\td_val: %s\n", dynstr + val); 756 break; 757 case DT_PLTRELSZ: 758 case DT_RELA: 759 case DT_RELASZ: 760 case DT_RELAENT: 761 case DT_STRSZ: 762 case DT_SYMENT: 763 case DT_RELSZ: 764 case DT_RELENT: 765 case DT_PLTREL: 766 fprintf(out, "\td_val: %jd\n", (intmax_t)val); 767 break; 768 case DT_PLTGOT: 769 case DT_HASH: 770 case DT_STRTAB: 771 case DT_SYMTAB: 772 case DT_INIT: 773 case DT_FINI: 774 case DT_REL: 775 case DT_JMPREL: 776 fprintf(out, "\td_ptr: %#jx\n", ptr); 777 break; 778 case DT_NULL: 779 case DT_SYMBOLIC: 780 case DT_DEBUG: 781 case DT_TEXTREL: 782 break; 783 } 784 } 785 } 786 787 void 788 elf_print_rela(Elf32_Ehdr *e, void *sh) 789 { 790 u_int64_t offset; 791 u_int64_t entsize; 792 u_int64_t size; 793 u_int64_t name; 794 u_int64_t info; 795 int64_t addend; 796 void *ra; 797 void *v; 798 int i; 799 800 offset = elf_get_off(e, sh, SH_OFFSET); 801 entsize = elf_get_size(e, sh, SH_ENTSIZE); 802 size = elf_get_size(e, sh, SH_SIZE); 803 name = elf_get_word(e, sh, SH_NAME); 804 v = (char *)e + offset; 805 fprintf(out, "\nrelocation with addend (%s):\n", shstrtab + name); 806 for (i = 0; (u_int64_t)i < size / entsize; i++) { 807 ra = (char *)v + i * entsize; 808 offset = elf_get_addr(e, ra, RA_OFFSET); 809 info = elf_get_word(e, ra, RA_INFO); 810 addend = elf_get_off(e, ra, RA_ADDEND); 811 fprintf(out, "\n"); 812 fprintf(out, "entry: %d\n", i); 813 fprintf(out, "\tr_offset: %#jx\n", offset); 814 fprintf(out, "\tr_info: %jd\n", (intmax_t)info); 815 fprintf(out, "\tr_addend: %jd\n", (intmax_t)addend); 816 } 817 } 818 819 void 820 elf_print_rel(Elf32_Ehdr *e, void *sh) 821 { 822 u_int64_t offset; 823 u_int64_t entsize; 824 u_int64_t size; 825 u_int64_t name; 826 u_int64_t info; 827 void *r; 828 void *v; 829 int i; 830 831 offset = elf_get_off(e, sh, SH_OFFSET); 832 entsize = elf_get_size(e, sh, SH_ENTSIZE); 833 size = elf_get_size(e, sh, SH_SIZE); 834 name = elf_get_word(e, sh, SH_NAME); 835 v = (char *)e + offset; 836 fprintf(out, "\nrelocation (%s):\n", shstrtab + name); 837 for (i = 0; (u_int64_t)i < size / entsize; i++) { 838 r = (char *)v + i * entsize; 839 offset = elf_get_addr(e, r, R_OFFSET); 840 info = elf_get_word(e, r, R_INFO); 841 fprintf(out, "\n"); 842 fprintf(out, "entry: %d\n", i); 843 fprintf(out, "\tr_offset: %#jx\n", offset); 844 fprintf(out, "\tr_info: %jd\n", (intmax_t)info); 845 } 846 } 847 848 void 849 elf_print_interp(Elf32_Ehdr *e, void *p) 850 { 851 u_int64_t offset; 852 char *s; 853 854 offset = elf_get_off(e, p, P_OFFSET); 855 s = (char *)e + offset; 856 fprintf(out, "\ninterp:\n"); 857 fprintf(out, "\t%s\n", s); 858 } 859 860 void 861 elf_print_got(Elf32_Ehdr *e, void *sh) 862 { 863 u_int64_t offset; 864 u_int64_t addralign; 865 u_int64_t size; 866 u_int64_t addr; 867 void *v; 868 int i; 869 870 offset = elf_get_off(e, sh, SH_OFFSET); 871 addralign = elf_get_size(e, sh, SH_ADDRALIGN); 872 size = elf_get_size(e, sh, SH_SIZE); 873 v = (char *)e + offset; 874 fprintf(out, "\nglobal offset table:\n"); 875 for (i = 0; (u_int64_t)i < size / addralign; i++) { 876 addr = elf_get_addr(e, (char *)v + i * addralign, 0); 877 fprintf(out, "\n"); 878 fprintf(out, "entry: %d\n", i); 879 fprintf(out, "\t%#jx\n", addr); 880 } 881 } 882 883 void 884 elf_print_hash(Elf32_Ehdr *e __unused, void *sh __unused) 885 { 886 } 887 888 void 889 elf_print_note(Elf32_Ehdr *e, void *sh) 890 { 891 u_int64_t offset; 892 u_int64_t size; 893 u_int64_t name; 894 u_int32_t namesz; 895 u_int32_t descsz; 896 u_int32_t type; 897 u_int32_t desc; 898 char *n, *s; 899 900 offset = elf_get_off(e, sh, SH_OFFSET); 901 size = elf_get_size(e, sh, SH_SIZE); 902 name = elf_get_word(e, sh, SH_NAME); 903 n = (char *)e + offset; 904 fprintf(out, "\nnote (%s):\n", shstrtab + name); 905 while (n < ((char *)e + offset + size)) { 906 namesz = elf_get_word(e, n, N_NAMESZ); 907 descsz = elf_get_word(e, n, N_DESCSZ); 908 type = elf_get_word(e, n, N_TYPE); 909 s = n + sizeof(Elf_Note); 910 desc = elf_get_word(e, n + sizeof(Elf_Note) + namesz, 0); 911 fprintf(out, "\t%s %d\n", s, desc); 912 n += sizeof(Elf_Note) + namesz + descsz; 913 } 914 } 915 916 u_int64_t 917 elf_get_byte(Elf32_Ehdr *e, void *base, elf_member_t member) 918 { 919 u_int64_t val; 920 u_char *p; 921 922 val = 0; 923 switch (e->e_ident[EI_CLASS]) { 924 case ELFCLASS32: 925 p = (char *)base + elf32_offsets[member]; 926 val = *p; 927 break; 928 case ELFCLASS64: 929 p = (char *)base + elf64_offsets[member]; 930 val = *p; 931 break; 932 case ELFCLASSNONE: 933 errx(1, "invalid class"); 934 } 935 936 return val; 937 } 938 939 u_int64_t 940 elf_get_quarter(Elf32_Ehdr *e, void *base, elf_member_t member) 941 { 942 u_int64_t val; 943 u_char *p; 944 945 val = 0; 946 switch (e->e_ident[EI_CLASS]) { 947 case ELFCLASS32: 948 p = (char *)base + elf32_offsets[member]; 949 switch (e->e_ident[EI_DATA]) { 950 case ELFDATA2MSB: 951 val = p[0] << 8 | p[1]; 952 break; 953 case ELFDATA2LSB: 954 val = p[1] << 8 | p[0]; 955 break; 956 case ELFDATANONE: 957 errx(1, "invalid data format"); 958 } 959 break; 960 case ELFCLASS64: 961 p = (char *)base + elf64_offsets[member]; 962 switch (e->e_ident[EI_DATA]) { 963 case ELFDATA2MSB: 964 val = p[0] << 8 | p[1]; 965 break; 966 case ELFDATA2LSB: 967 val = p[1] << 8 | p[0]; 968 break; 969 case ELFDATANONE: 970 errx(1, "invalid data format"); 971 } 972 break; 973 case ELFCLASSNONE: 974 errx(1, "invalid class"); 975 } 976 977 return val; 978 } 979 980 u_int64_t 981 elf_get_half(Elf32_Ehdr *e, void *base, elf_member_t member) 982 { 983 u_int64_t val; 984 u_char *p; 985 986 val = 0; 987 switch (e->e_ident[EI_CLASS]) { 988 case ELFCLASS32: 989 p = (char *)base + elf32_offsets[member]; 990 switch (e->e_ident[EI_DATA]) { 991 case ELFDATA2MSB: 992 val = p[0] << 8 | p[1]; 993 break; 994 case ELFDATA2LSB: 995 val = p[1] << 8 | p[0]; 996 break; 997 case ELFDATANONE: 998 errx(1, "invalid data format"); 999 } 1000 break; 1001 case ELFCLASS64: 1002 p = (char *)base + elf64_offsets[member]; 1003 switch (e->e_ident[EI_DATA]) { 1004 case ELFDATA2MSB: 1005 val = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1006 break; 1007 case ELFDATA2LSB: 1008 val = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1009 break; 1010 case ELFDATANONE: 1011 errx(1, "invalid data format"); 1012 } 1013 break; 1014 case ELFCLASSNONE: 1015 errx(1, "invalid class"); 1016 } 1017 1018 return val; 1019 } 1020 1021 u_int64_t 1022 elf_get_word(Elf32_Ehdr *e, void *base, elf_member_t member) 1023 { 1024 u_int64_t val; 1025 u_char *p; 1026 1027 val = 0; 1028 switch (e->e_ident[EI_CLASS]) { 1029 case ELFCLASS32: 1030 p = (char *)base + elf32_offsets[member]; 1031 switch (e->e_ident[EI_DATA]) { 1032 case ELFDATA2MSB: 1033 val = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1034 break; 1035 case ELFDATA2LSB: 1036 val = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1037 break; 1038 case ELFDATANONE: 1039 errx(1, "invalid data format"); 1040 } 1041 break; 1042 case ELFCLASS64: 1043 p = (char *)base + elf64_offsets[member]; 1044 switch (e->e_ident[EI_DATA]) { 1045 case ELFDATA2MSB: 1046 val = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1047 break; 1048 case ELFDATA2LSB: 1049 val = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1050 break; 1051 case ELFDATANONE: 1052 errx(1, "invalid data format"); 1053 } 1054 break; 1055 case ELFCLASSNONE: 1056 errx(1, "invalid class"); 1057 } 1058 1059 return val; 1060 } 1061 1062 u_int64_t 1063 elf_get_quad(Elf32_Ehdr *e, void *base, elf_member_t member) 1064 { 1065 u_int64_t high; 1066 u_int64_t low; 1067 u_int64_t val; 1068 u_char *p; 1069 1070 val = 0; 1071 switch (e->e_ident[EI_CLASS]) { 1072 case ELFCLASS32: 1073 p = (char *)base + elf32_offsets[member]; 1074 switch (e->e_ident[EI_DATA]) { 1075 case ELFDATA2MSB: 1076 val = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1077 break; 1078 case ELFDATA2LSB: 1079 val = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1080 break; 1081 case ELFDATANONE: 1082 errx(1, "invalid data format"); 1083 } 1084 break; 1085 case ELFCLASS64: 1086 p = (char *)base + elf64_offsets[member]; 1087 switch (e->e_ident[EI_DATA]) { 1088 case ELFDATA2MSB: 1089 high = p[0] << 24 | p[1] << 16 | p[2] << 8 | p[3]; 1090 low = p[4] << 24 | p[5] << 16 | p[6] << 8 | p[7]; 1091 val = high << 32 | low; 1092 break; 1093 case ELFDATA2LSB: 1094 high = p[7] << 24 | p[6] << 16 | p[5] << 8 | p[4]; 1095 low = p[3] << 24 | p[2] << 16 | p[1] << 8 | p[0]; 1096 val = high << 32 | low; 1097 break; 1098 case ELFDATANONE: 1099 errx(1, "invalid data format"); 1100 } 1101 break; 1102 case ELFCLASSNONE: 1103 errx(1, "invalid class"); 1104 } 1105 1106 return val; 1107 } 1108 1109 void 1110 usage(void) 1111 { 1112 fprintf(stderr, "usage: elfdump [-acdeiGhnprs] [-w file] filename\n"); 1113 exit(1); 1114 } 1115