xref: /illumos-gate/usr/src/cmd/dis/dis_target.c (revision e8d80663e4f91871f843bb8ad9108dc0b76dfcf3)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 
22 /*
23  * Copyright (c) 2006, 2010, Oracle and/or its affiliates. All rights reserved.
24  *
25  * Copyright 2011 Jason King.  All rights reserved.
26  */
27 
28 #include <assert.h>
29 #include <errno.h>
30 #include <fcntl.h>
31 #include <gelf.h>
32 #include <libelf.h>
33 #include <stdlib.h>
34 #include <string.h>
35 #include <unistd.h>
36 
37 #include <sys/fcntl.h>
38 #include <sys/stat.h>
39 #include <sys/sysmacros.h>
40 #include <sys/types.h>
41 
42 #include "dis_target.h"
43 #include "dis_util.h"
44 
45 /*
46  * Standard ELF disassembler target.
47  *
48  * We only support disassembly of ELF files, though this target interface could
49  * be extended in the future.  Each basic type (target, func, section) contains
50  * enough information to uniquely identify the location within the file.  The
51  * interfaces use libelf(3LIB) to do the actual processing of the file.
52  */
53 
54 /*
55  * Symbol table entry type.  We maintain our own symbol table sorted by address,
56  * with the symbol name already resolved against the ELF symbol table.
57  */
58 typedef struct sym_entry {
59 	GElf_Sym	se_sym;		/* value of symbol */
60 	char		*se_name;	/* name of symbol */
61 	int		se_shndx;	/* section where symbol is located */
62 } sym_entry_t;
63 
64 /*
65  * Create a map of the virtual address ranges of every section.  This will
66  * allow us to create dummpy mappings for unassigned addresses.  Otherwise
67  * multiple sections with unassigned addresses will appear to overlap and
68  * mess up symbol resolution (which uses the virtual address).
69  */
70 typedef struct dis_shnmap {
71 	const char 	*dm_name;	/* name of section */
72 	uint64_t	dm_start;	/* virtual address of section */
73 	size_t		dm_length;	/* address length */
74 	boolean_t	dm_mapped;	/* did we assign the mapping */
75 } dis_shnmap_t;
76 
77 /*
78  * Target data structure.  This structure keeps track of the ELF file
79  * information, a few bits of pre-processed section index information, and
80  * sorted versions of the symbol table.  We also keep track of the last symbol
81  * looked up, as the majority of lookups remain within the same symbol.
82  */
83 struct dis_tgt {
84 	Elf		*dt_elf;	/* libelf handle */
85 	Elf		*dt_elf_root;	/* main libelf handle (for archives) */
86 	const char	*dt_filename;	/* name of file */
87 	int		dt_fd;		/* underlying file descriptor */
88 	size_t		dt_shstrndx;	/* section index of .shstrtab */
89 	size_t		dt_symidx;	/* section index of symbol table */
90 	sym_entry_t	*dt_symcache;	/* last symbol looked up */
91 	sym_entry_t	*dt_symtab;	/* sorted symbol table */
92 	int		dt_symcount;	/* # of symbol table entries */
93 	struct dis_tgt	*dt_next;	/* next target (for archives) */
94 	Elf_Arhdr	*dt_arhdr;	/* archive header (for archives) */
95 	dis_shnmap_t	*dt_shnmap;	/* section address map */
96 	size_t		dt_shncount;	/* # of sections in target */
97 };
98 
99 /*
100  * Function data structure.  We resolve the symbol and lookup the associated ELF
101  * data when building this structure.  The offset is calculated based on the
102  * section's starting address.
103  */
104 struct dis_func {
105 	sym_entry_t	*df_sym;	/* symbol table reference */
106 	Elf_Data	*df_data;	/* associated ELF data */
107 	size_t		df_offset;	/* offset within data */
108 };
109 
110 /*
111  * Section data structure.  We store the entire section header so that we can
112  * determine some properties (such as whether or not it contains text) after
113  * building the structure.
114  */
115 struct dis_scn {
116 	GElf_Shdr	ds_shdr;
117 	const char	*ds_name;
118 	Elf_Data	*ds_data;
119 };
120 
121 /* Lifted from Psymtab.c, omitting STT_TLS */
122 #define	DATA_TYPES      \
123 	((1 << STT_OBJECT) | (1 << STT_FUNC) | (1 << STT_COMMON))
124 #define	IS_DATA_TYPE(tp)	(((1 << (tp)) & DATA_TYPES) != 0)
125 
126 /*
127  * Save the virtual address range for this section and select the
128  * best section to use as the symbol table.  We prefer SHT_SYMTAB
129  * over SHT_DYNSYM.
130  */
131 /* ARGSUSED */
132 static void
133 tgt_scn_init(dis_tgt_t *tgt, dis_scn_t *scn, void *data)
134 {
135 	int *index = data;
136 
137 	*index += 1;
138 
139 	tgt->dt_shnmap[*index].dm_name = scn->ds_name;
140 	tgt->dt_shnmap[*index].dm_start = scn->ds_shdr.sh_addr;
141 	tgt->dt_shnmap[*index].dm_length = scn->ds_shdr.sh_size;
142 	tgt->dt_shnmap[*index].dm_mapped = B_FALSE;
143 
144 	/*
145 	 * Prefer SHT_SYMTAB over SHT_DYNSYM
146 	 */
147 	if (scn->ds_shdr.sh_type == SHT_DYNSYM && tgt->dt_symidx == 0)
148 		tgt->dt_symidx = *index;
149 	else if (scn->ds_shdr.sh_type == SHT_SYMTAB)
150 		tgt->dt_symidx = *index;
151 }
152 
153 static int
154 sym_compare(const void *a, const void *b)
155 {
156 	const sym_entry_t *syma = a;
157 	const sym_entry_t *symb = b;
158 	const char *aname = syma->se_name;
159 	const char *bname = symb->se_name;
160 
161 	if (syma->se_sym.st_value < symb->se_sym.st_value)
162 		return (-1);
163 
164 	if (syma->se_sym.st_value > symb->se_sym.st_value)
165 		return (1);
166 
167 	/*
168 	 * Prefer functions over non-functions
169 	 */
170 	if (GELF_ST_TYPE(syma->se_sym.st_info) !=
171 	    GELF_ST_TYPE(symb->se_sym.st_info)) {
172 		if (GELF_ST_TYPE(syma->se_sym.st_info) == STT_FUNC)
173 			return (-1);
174 		if (GELF_ST_TYPE(symb->se_sym.st_info) == STT_FUNC)
175 			return (1);
176 	}
177 
178 	/*
179 	 * For symbols with the same address and type, we sort them according to
180 	 * a hierarchy:
181 	 *
182 	 * 	1. weak symbols (common name)
183 	 * 	2. global symbols (external name)
184 	 * 	3. local symbols
185 	 */
186 	if (GELF_ST_BIND(syma->se_sym.st_info) !=
187 	    GELF_ST_BIND(symb->se_sym.st_info)) {
188 		if (GELF_ST_BIND(syma->se_sym.st_info) == STB_WEAK)
189 			return (-1);
190 		if (GELF_ST_BIND(symb->se_sym.st_info) == STB_WEAK)
191 			return (1);
192 
193 		if (GELF_ST_BIND(syma->se_sym.st_info) == STB_GLOBAL)
194 			return (-1);
195 		if (GELF_ST_BIND(symb->se_sym.st_info) == STB_GLOBAL)
196 			return (1);
197 	}
198 
199 	/*
200 	 * As a last resort, if we have multiple symbols of the same type at the
201 	 * same address, prefer the version with the fewest leading underscores.
202 	 */
203 	if (aname == NULL)
204 		return (-1);
205 	if (bname == NULL)
206 		return (1);
207 
208 	while (*aname == '_' && *bname == '_') {
209 		aname++;
210 		bname++;
211 	}
212 
213 	if (*bname == '_')
214 		return (-1);
215 	if (*aname == '_')
216 		return (1);
217 
218 	/*
219 	 * Prefer the symbol with the smaller size.
220 	 */
221 	if (syma->se_sym.st_size < symb->se_sym.st_size)
222 		return (-1);
223 	if (syma->se_sym.st_size > symb->se_sym.st_size)
224 		return (1);
225 
226 	/*
227 	 * We really do have two identical symbols for some reason.  Just report
228 	 * them as equal, and to the lucky one go the spoils.
229 	 */
230 	return (0);
231 }
232 
233 /*
234  * Construct an optimized symbol table sorted by starting address.
235  */
236 static void
237 construct_symtab(dis_tgt_t *tgt)
238 {
239 	Elf_Scn *scn;
240 	GElf_Shdr shdr;
241 	Elf_Data *symdata;
242 	int i;
243 	GElf_Word *symshndx = NULL;
244 	int symshndx_size;
245 	sym_entry_t *sym;
246 	sym_entry_t *p_symtab = NULL;
247 	int nsym = 0; /* count of symbols we're not interested in */
248 
249 	/*
250 	 * Find the symshndx section, if any
251 	 */
252 	for (scn = elf_nextscn(tgt->dt_elf, NULL); scn != NULL;
253 	    scn = elf_nextscn(tgt->dt_elf, scn)) {
254 		if (gelf_getshdr(scn, &shdr) == NULL)
255 			break;
256 		if (shdr.sh_type == SHT_SYMTAB_SHNDX &&
257 		    shdr.sh_link == tgt->dt_symidx) {
258 			Elf_Data	*data;
259 
260 			if ((data = elf_getdata(scn, NULL)) != NULL) {
261 				symshndx = (GElf_Word *)data->d_buf;
262 				symshndx_size = data->d_size /
263 				    sizeof (GElf_Word);
264 				break;
265 			}
266 		}
267 	}
268 
269 	if ((scn = elf_getscn(tgt->dt_elf, tgt->dt_symidx)) == NULL)
270 		die("%s: failed to get section information", tgt->dt_filename);
271 	if (gelf_getshdr(scn, &shdr) == NULL)
272 		die("%s: failed to get section header", tgt->dt_filename);
273 	if (shdr.sh_entsize == 0)
274 		die("%s: symbol table has zero size", tgt->dt_filename);
275 
276 	if ((symdata = elf_getdata(scn, NULL)) == NULL)
277 		die("%s: failed to get symbol table", tgt->dt_filename);
278 
279 	tgt->dt_symcount = symdata->d_size / gelf_fsize(tgt->dt_elf, ELF_T_SYM,
280 	    1, EV_CURRENT);
281 
282 	p_symtab = safe_malloc(tgt->dt_symcount * sizeof (sym_entry_t));
283 
284 	for (i = 0, sym = p_symtab; i < tgt->dt_symcount; i++) {
285 		if (gelf_getsym(symdata, i, &(sym->se_sym)) == NULL) {
286 			warn("%s: gelf_getsym returned NULL for %d",
287 			    tgt->dt_filename, i);
288 			nsym++;
289 			continue;
290 		}
291 
292 		/*
293 		 * We're only interested in data symbols.
294 		 */
295 		if (!IS_DATA_TYPE(GELF_ST_TYPE(sym->se_sym.st_info))) {
296 			nsym++;
297 			continue;
298 		}
299 
300 		if (sym->se_sym.st_shndx == SHN_XINDEX && symshndx != NULL) {
301 			if (i > symshndx_size) {
302 				warn("%s: bad SHNX_XINDEX %d",
303 				    tgt->dt_filename, i);
304 				sym->se_shndx = -1;
305 			} else {
306 				sym->se_shndx = symshndx[i];
307 			}
308 		} else {
309 			sym->se_shndx = sym->se_sym.st_shndx;
310 		}
311 
312 		/* Deal with symbols with special section indicies */
313 		if (sym->se_shndx == SHN_ABS) {
314 			/*
315 			 * If st_value == 0, references to these
316 			 * symbols in code are modified in situ
317 			 * thus we will never attempt to look
318 			 * them up.
319 			 */
320 			if (sym->se_sym.st_value == 0) {
321 				/*
322 				 * References to these symbols in code
323 				 * are modified in situ by the runtime
324 				 * linker and no code on disk will ever
325 				 * attempt to look them up.
326 				 */
327 				nsym++;
328 				continue;
329 			} else {
330 				/*
331 				 * If st_value != 0, (such as examining
332 				 * something in /system/object/.../object)
333 				 * the values should resolve to a value
334 				 * within an existing section (such as
335 				 * .data).  This also means it never needs
336 				 * to have st_value mapped.
337 				 */
338 				sym++;
339 				continue;
340 			}
341 		}
342 
343 		/*
344 		 * Ignore the symbol if it has some other special
345 		 * section index
346 		 */
347 		if (sym->se_shndx == SHN_UNDEF ||
348 		    sym->se_shndx >= SHN_LORESERVE) {
349 			nsym++;
350 			continue;
351 		}
352 
353 		if ((sym->se_name = elf_strptr(tgt->dt_elf, shdr.sh_link,
354 		    (size_t)sym->se_sym.st_name)) == NULL) {
355 			warn("%s: failed to lookup symbol %d name",
356 			    tgt->dt_filename, i);
357 			nsym++;
358 			continue;
359 		}
360 
361 		/*
362 		 * If we had to map this section, its symbol value
363 		 * also needs to be mapped.
364 		 */
365 		if (tgt->dt_shnmap[sym->se_shndx].dm_mapped)
366 			sym->se_sym.st_value +=
367 			    tgt->dt_shnmap[sym->se_shndx].dm_start;
368 
369 		sym++;
370 	}
371 
372 	tgt->dt_symcount -= nsym;
373 	tgt->dt_symtab = realloc(p_symtab, tgt->dt_symcount *
374 	    sizeof (sym_entry_t));
375 
376 	qsort(tgt->dt_symtab, tgt->dt_symcount, sizeof (sym_entry_t),
377 	    sym_compare);
378 }
379 
380 /*
381  * Assign virtual address ranges for sections that need it
382  */
383 static void
384 create_addrmap(dis_tgt_t *tgt)
385 {
386 	uint64_t addr;
387 	int i;
388 
389 	if (tgt->dt_shnmap == NULL)
390 		return;
391 
392 	/* find the greatest used address */
393 	for (addr = 0, i = 1; i < tgt->dt_shncount; i++)
394 		if (tgt->dt_shnmap[i].dm_start > addr)
395 			addr = tgt->dt_shnmap[i].dm_start +
396 			    tgt->dt_shnmap[i].dm_length;
397 
398 	addr = P2ROUNDUP(addr, 0x1000);
399 
400 	/*
401 	 * Assign section a starting address beyond the largest mapped section
402 	 * if no address was given.
403 	 */
404 	for (i = 1; i < tgt->dt_shncount; i++) {
405 		if (tgt->dt_shnmap[i].dm_start != 0)
406 			continue;
407 
408 		tgt->dt_shnmap[i].dm_start = addr;
409 		tgt->dt_shnmap[i].dm_mapped = B_TRUE;
410 		addr = P2ROUNDUP(addr + tgt->dt_shnmap[i].dm_length, 0x1000);
411 	}
412 }
413 
414 /*
415  * Create a target backed by an ELF file.
416  */
417 dis_tgt_t *
418 dis_tgt_create(const char *file)
419 {
420 	dis_tgt_t *tgt, *current;
421 	int idx;
422 	Elf *elf;
423 	GElf_Ehdr ehdr;
424 	Elf_Arhdr *arhdr = NULL;
425 	int cmd;
426 
427 	if (elf_version(EV_CURRENT) == EV_NONE)
428 		die("libelf(3ELF) out of date");
429 
430 	tgt = safe_malloc(sizeof (dis_tgt_t));
431 
432 	if ((tgt->dt_fd = open(file, O_RDONLY)) < 0) {
433 		warn("%s: failed opening file, reason: %s", file,
434 		    strerror(errno));
435 		free(tgt);
436 		return (NULL);
437 	}
438 
439 	if ((tgt->dt_elf_root =
440 	    elf_begin(tgt->dt_fd, ELF_C_READ, NULL)) == NULL) {
441 		warn("%s: invalid or corrupt ELF file", file);
442 		dis_tgt_destroy(tgt);
443 		return (NULL);
444 	}
445 
446 	current = tgt;
447 	cmd = ELF_C_READ;
448 	while ((elf = elf_begin(tgt->dt_fd, cmd, tgt->dt_elf_root)) != NULL) {
449 
450 		if (elf_kind(tgt->dt_elf_root) == ELF_K_AR &&
451 		    (arhdr = elf_getarhdr(elf)) == NULL) {
452 			warn("%s: malformed archive", file);
453 			dis_tgt_destroy(tgt);
454 			return (NULL);
455 		}
456 
457 		/*
458 		 * Make sure that this Elf file is sane
459 		 */
460 		if (gelf_getehdr(elf, &ehdr) == NULL) {
461 			if (arhdr != NULL) {
462 				/*
463 				 * For archives, we drive on in the face of bad
464 				 * members.  The "/" and "//" members are
465 				 * special, and should be silently ignored.
466 				 */
467 				if (strcmp(arhdr->ar_name, "/") != 0 &&
468 				    strcmp(arhdr->ar_name, "//") != 0)
469 					warn("%s[%s]: invalid file type",
470 					    file, arhdr->ar_name);
471 				cmd = elf_next(elf);
472 				(void) elf_end(elf);
473 				continue;
474 			}
475 
476 			warn("%s: invalid file type", file);
477 			dis_tgt_destroy(tgt);
478 			return (NULL);
479 		}
480 
481 		/*
482 		 * If we're seeing a new Elf object, then we have an
483 		 * archive. In this case, we create a new target, and chain it
484 		 * off the master target.  We can later iterate over these
485 		 * targets using dis_tgt_next().
486 		 */
487 		if (current->dt_elf != NULL) {
488 			dis_tgt_t *next = safe_malloc(sizeof (dis_tgt_t));
489 			next->dt_elf_root = tgt->dt_elf_root;
490 			next->dt_fd = -1;
491 			current->dt_next = next;
492 			current = next;
493 		}
494 		current->dt_elf = elf;
495 		current->dt_arhdr = arhdr;
496 
497 		if (elf_getshdrstrndx(elf, &current->dt_shstrndx) == -1) {
498 			warn("%s: failed to get section string table for "
499 			    "file", file);
500 			dis_tgt_destroy(tgt);
501 			return (NULL);
502 		}
503 
504 		current->dt_shnmap = safe_malloc(sizeof (dis_shnmap_t) *
505 		    ehdr.e_shnum);
506 		current->dt_shncount = ehdr.e_shnum;
507 
508 		idx = 0;
509 		dis_tgt_section_iter(current, tgt_scn_init, &idx);
510 		current->dt_filename = file;
511 
512 		create_addrmap(current);
513 		if (current->dt_symidx != 0)
514 			construct_symtab(current);
515 
516 		cmd = elf_next(elf);
517 	}
518 
519 	/*
520 	 * Final sanity check.  If we had an archive with no members, then bail
521 	 * out with a nice message.
522 	 */
523 	if (tgt->dt_elf == NULL) {
524 		warn("%s: empty archive\n", file);
525 		dis_tgt_destroy(tgt);
526 		return (NULL);
527 	}
528 
529 	return (tgt);
530 }
531 
532 /*
533  * Return the filename associated with the target.
534  */
535 const char *
536 dis_tgt_name(dis_tgt_t *tgt)
537 {
538 	return (tgt->dt_filename);
539 }
540 
541 /*
542  * Return the archive member name, if any.
543  */
544 const char *
545 dis_tgt_member(dis_tgt_t *tgt)
546 {
547 	if (tgt->dt_arhdr)
548 		return (tgt->dt_arhdr->ar_name);
549 	else
550 		return (NULL);
551 }
552 
553 /*
554  * Return the Elf_Ehdr associated with this target.  Needed to determine which
555  * disassembler to use.
556  */
557 void
558 dis_tgt_ehdr(dis_tgt_t *tgt, GElf_Ehdr *ehdr)
559 {
560 	(void) gelf_getehdr(tgt->dt_elf, ehdr);
561 }
562 
563 /*
564  * Return the next target in the list, if this is an archive.
565  */
566 dis_tgt_t *
567 dis_tgt_next(dis_tgt_t *tgt)
568 {
569 	return (tgt->dt_next);
570 }
571 
572 /*
573  * Destroy a target and free up any associated memory.
574  */
575 void
576 dis_tgt_destroy(dis_tgt_t *tgt)
577 {
578 	dis_tgt_t *current, *next;
579 
580 	current = tgt->dt_next;
581 	while (current != NULL) {
582 		next = current->dt_next;
583 		if (current->dt_elf)
584 			(void) elf_end(current->dt_elf);
585 		if (current->dt_symtab)
586 			free(current->dt_symtab);
587 		free(current);
588 		current = next;
589 	}
590 
591 	if (tgt->dt_elf)
592 		(void) elf_end(tgt->dt_elf);
593 	if (tgt->dt_elf_root)
594 		(void) elf_end(tgt->dt_elf_root);
595 
596 	if (tgt->dt_symtab)
597 		free(tgt->dt_symtab);
598 
599 	free(tgt);
600 }
601 
602 /*
603  * Given an address, return the section it is in and set the offset within
604  * the section.
605  */
606 const char *
607 dis_find_section(dis_tgt_t *tgt, uint64_t addr, off_t *offset)
608 {
609 	int i;
610 
611 	for (i = 1; i < tgt->dt_shncount; i++) {
612 		if ((addr >= tgt->dt_shnmap[i].dm_start) &&
613 		    (addr < tgt->dt_shnmap[i].dm_start +
614 		    tgt->dt_shnmap[i].dm_length)) {
615 			*offset = addr - tgt->dt_shnmap[i].dm_start;
616 			return (tgt->dt_shnmap[i].dm_name);
617 		}
618 	}
619 
620 	*offset = 0;
621 	return (NULL);
622 }
623 
624 /*
625  * Given an address, returns the name of the corresponding symbol, as well as
626  * the offset within that symbol.  If no matching symbol is found, then NULL is
627  * returned.
628  *
629  * If 'cache_result' is specified, then we keep track of the resulting symbol.
630  * This cached result is consulted first on subsequent lookups in order to avoid
631  * unecessary lookups.  This flag should be used for resolving the current PC,
632  * as the majority of addresses stay within the current function.
633  */
634 const char *
635 dis_tgt_lookup(dis_tgt_t *tgt, uint64_t addr, off_t *offset, int cache_result,
636     size_t *size, int *isfunc)
637 {
638 	int lo, hi, mid;
639 	sym_entry_t *sym, *osym, *match;
640 	int found;
641 
642 	if (tgt->dt_symcache != NULL &&
643 	    addr >= tgt->dt_symcache->se_sym.st_value &&
644 	    addr < tgt->dt_symcache->se_sym.st_value +
645 	    tgt->dt_symcache->se_sym.st_size) {
646 		*offset = addr - tgt->dt_symcache->se_sym.st_value;
647 		*size = tgt->dt_symcache->se_sym.st_size;
648 		return (tgt->dt_symcache->se_name);
649 	}
650 
651 	lo = 0;
652 	hi = (tgt->dt_symcount - 1);
653 	found = 0;
654 	match = osym = NULL;
655 	while (lo <= hi) {
656 		mid = (lo + hi) / 2;
657 
658 		sym = &tgt->dt_symtab[mid];
659 
660 		if (addr >= sym->se_sym.st_value &&
661 		    addr < sym->se_sym.st_value + sym->se_sym.st_size &&
662 		    (!found || sym->se_sym.st_value > osym->se_sym.st_value)) {
663 			osym = sym;
664 			found = 1;
665 		} else if (addr == sym->se_sym.st_value) {
666 			/*
667 			 * Particularly for .plt objects, it's possible to have
668 			 * a zero sized object.  We want to return this, but we
669 			 * want it to be a last resort.
670 			 */
671 			match = sym;
672 		}
673 
674 		if (addr < sym->se_sym.st_value)
675 			hi = mid - 1;
676 		else
677 			lo = mid + 1;
678 	}
679 
680 	if (!found) {
681 		if (match)
682 			osym = match;
683 		else
684 			return (NULL);
685 	}
686 
687 	/*
688 	 * Walk backwards to find the best match.
689 	 */
690 	do {
691 		sym = osym;
692 
693 		if (osym == tgt->dt_symtab)
694 			break;
695 
696 		osym = osym - 1;
697 	} while ((sym->se_sym.st_value == osym->se_sym.st_value) &&
698 	    (addr >= osym->se_sym.st_value) &&
699 	    (addr < osym->se_sym.st_value + osym->se_sym.st_size));
700 
701 	if (cache_result)
702 		tgt->dt_symcache = sym;
703 
704 	*offset = addr - sym->se_sym.st_value;
705 	*size = sym->se_sym.st_size;
706 	if (isfunc)
707 		*isfunc = (GELF_ST_TYPE(sym->se_sym.st_info) == STT_FUNC);
708 
709 	return (sym->se_name);
710 }
711 
712 #if !defined(__sparc)
713 /*
714  * Given an address, return the starting offset of the next symbol in the file.
715  * Only needed on variable length instruction architectures.
716  */
717 off_t
718 dis_tgt_next_symbol(dis_tgt_t *tgt, uint64_t addr)
719 {
720 	sym_entry_t *sym;
721 
722 	for (sym = tgt->dt_symcache;
723 	    sym != tgt->dt_symtab + tgt->dt_symcount;
724 	    sym++) {
725 		if (sym->se_sym.st_value >= addr)
726 			return (sym->se_sym.st_value - addr);
727 	}
728 
729 	return (0);
730 }
731 #endif
732 
733 /*
734  * Iterate over all sections in the target, executing the given callback for
735  * each.
736  */
737 void
738 dis_tgt_section_iter(dis_tgt_t *tgt, section_iter_f func, void *data)
739 {
740 	dis_scn_t sdata;
741 	Elf_Scn *scn;
742 	int idx;
743 
744 	for (scn = elf_nextscn(tgt->dt_elf, NULL), idx = 1; scn != NULL;
745 	    scn = elf_nextscn(tgt->dt_elf, scn), idx++) {
746 
747 		if (gelf_getshdr(scn, &sdata.ds_shdr) == NULL) {
748 			warn("%s: failed to get section %d header",
749 			    tgt->dt_filename, idx);
750 			continue;
751 		}
752 
753 		if ((sdata.ds_name = elf_strptr(tgt->dt_elf, tgt->dt_shstrndx,
754 		    sdata.ds_shdr.sh_name)) == NULL) {
755 			warn("%s: failed to get section %d name",
756 			    tgt->dt_filename, idx);
757 			continue;
758 		}
759 
760 		if ((sdata.ds_data = elf_getdata(scn, NULL)) == NULL) {
761 			warn("%s: failed to get data for section '%s'",
762 			    tgt->dt_filename, sdata.ds_name);
763 			continue;
764 		}
765 
766 		/*
767 		 * dis_tgt_section_iter is also used before the section map
768 		 * is initialized, so only check when we need to.  If the
769 		 * section map is uninitialized, it will return 0 and have
770 		 * no net effect.
771 		 */
772 		if (sdata.ds_shdr.sh_addr == 0)
773 			sdata.ds_shdr.sh_addr = tgt->dt_shnmap[idx].dm_start;
774 
775 		func(tgt, &sdata, data);
776 	}
777 }
778 
779 /*
780  * Return 1 if the given section contains text, 0 otherwise.
781  */
782 int
783 dis_section_istext(dis_scn_t *scn)
784 {
785 	return ((scn->ds_shdr.sh_type == SHT_PROGBITS) &&
786 	    (scn->ds_shdr.sh_flags == (SHF_ALLOC | SHF_EXECINSTR)));
787 }
788 
789 /*
790  * Return a pointer to the section data.
791  */
792 void *
793 dis_section_data(dis_scn_t *scn)
794 {
795 	return (scn->ds_data->d_buf);
796 }
797 
798 /*
799  * Return the size of the section data.
800  */
801 size_t
802 dis_section_size(dis_scn_t *scn)
803 {
804 	return (scn->ds_data->d_size);
805 }
806 
807 /*
808  * Return the address for the given section.
809  */
810 uint64_t
811 dis_section_addr(dis_scn_t *scn)
812 {
813 	return (scn->ds_shdr.sh_addr);
814 }
815 
816 /*
817  * Return the name of the current section.
818  */
819 const char *
820 dis_section_name(dis_scn_t *scn)
821 {
822 	return (scn->ds_name);
823 }
824 
825 /*
826  * Create an allocated copy of the given section
827  */
828 dis_scn_t *
829 dis_section_copy(dis_scn_t *scn)
830 {
831 	dis_scn_t *new;
832 
833 	new = safe_malloc(sizeof (dis_scn_t));
834 	(void) memcpy(new, scn, sizeof (dis_scn_t));
835 
836 	return (new);
837 }
838 
839 /*
840  * Free section memory
841  */
842 void
843 dis_section_free(dis_scn_t *scn)
844 {
845 	free(scn);
846 }
847 
848 /*
849  * Iterate over all functions in the target, executing the given callback for
850  * each one.
851  */
852 void
853 dis_tgt_function_iter(dis_tgt_t *tgt, function_iter_f func, void *data)
854 {
855 	int i;
856 	sym_entry_t *sym;
857 	dis_func_t df;
858 	Elf_Scn *scn;
859 	GElf_Shdr	shdr;
860 
861 	for (i = 0, sym = tgt->dt_symtab; i < tgt->dt_symcount; i++, sym++) {
862 
863 		/* ignore non-functions */
864 		if ((GELF_ST_TYPE(sym->se_sym.st_info) != STT_FUNC) ||
865 		    (sym->se_name == NULL) ||
866 		    (sym->se_sym.st_size == 0) ||
867 		    (sym->se_shndx >= SHN_LORESERVE))
868 			continue;
869 
870 		/* get the ELF data associated with this function */
871 		if ((scn = elf_getscn(tgt->dt_elf, sym->se_shndx)) == NULL ||
872 		    gelf_getshdr(scn, &shdr) == NULL ||
873 		    (df.df_data = elf_getdata(scn, NULL)) == NULL ||
874 		    df.df_data->d_size == 0) {
875 			warn("%s: failed to read section %d",
876 			    tgt->dt_filename, sym->se_shndx);
877 			continue;
878 		}
879 
880 		if (tgt->dt_shnmap[sym->se_shndx].dm_mapped)
881 			shdr.sh_addr = tgt->dt_shnmap[sym->se_shndx].dm_start;
882 
883 		/*
884 		 * Verify that the address lies within the section that we think
885 		 * it does.
886 		 */
887 		if (sym->se_sym.st_value < shdr.sh_addr ||
888 		    (sym->se_sym.st_value + sym->se_sym.st_size) >
889 		    (shdr.sh_addr + shdr.sh_size)) {
890 			warn("%s: bad section %d for address %p",
891 			    tgt->dt_filename, sym->se_sym.st_shndx,
892 			    sym->se_sym.st_value);
893 			continue;
894 		}
895 
896 		df.df_sym = sym;
897 		df.df_offset = sym->se_sym.st_value - shdr.sh_addr;
898 
899 		func(tgt, &df, data);
900 	}
901 }
902 
903 /*
904  * Return the data associated with a given function.
905  */
906 void *
907 dis_function_data(dis_func_t *func)
908 {
909 	return ((char *)func->df_data->d_buf + func->df_offset);
910 }
911 
912 /*
913  * Return the size of a function.
914  */
915 size_t
916 dis_function_size(dis_func_t *func)
917 {
918 	return (func->df_sym->se_sym.st_size);
919 }
920 
921 /*
922  * Return the address of a function.
923  */
924 uint64_t
925 dis_function_addr(dis_func_t *func)
926 {
927 	return (func->df_sym->se_sym.st_value);
928 }
929 
930 /*
931  * Return the name of the function
932  */
933 const char *
934 dis_function_name(dis_func_t *func)
935 {
936 	return (func->df_sym->se_name);
937 }
938 
939 /*
940  * Return a copy of a function.
941  */
942 dis_func_t *
943 dis_function_copy(dis_func_t *func)
944 {
945 	dis_func_t *new;
946 
947 	new = safe_malloc(sizeof (dis_func_t));
948 	(void) memcpy(new, func, sizeof (dis_func_t));
949 
950 	return (new);
951 }
952 
953 /*
954  * Free function memory
955  */
956 void
957 dis_function_free(dis_func_t *func)
958 {
959 	free(func);
960 }
961