1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
ELF Header:
Magic: 7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00
Class: ELF64
Data: 2's complement, little endian
Version: 1 (current)
OS/ABI: UNIX - System V
ABI Version: 0
Type: DYN (Position-Independent Executable file)
Machine: Advanced Micro Devices X86-64
Version: 0x1
Entry point address: 0x11a0
Start of program headers: 64 (bytes into file)
Start of section headers: 12616 (bytes into file)
Flags: 0x0
Size of this header: 64 (bytes)
Size of program headers: 56 (bytes)
Number of program headers: 15
Size of section headers: 64 (bytes)
Number of section headers: 29
Section header string table index: 20
Section Headers:
[Nr] Name Type Address Offset
Size EntSize Flags Link Info Align
[ 0] NULL 0000000000000000 00000000
0000000000000000 0000000000000000 0 0 0
[ 1] .gnu.version VERSYM 00000000000006cc 000006cc
0000000000000028 0000000000000002 A 23 0 2
[ 2] .gnu.version_r VERNEED 00000000000006f8 000006f8
0000000000000050 0000000000000000 A 22 1 8
[ 3] .rela.dyn RELA 0000000000000748 00000748
0000000000000108 0000000000000018 A 23 0 8
[ 4] .rela.plt RELA 0000000000000850 00000850
0000000000000108 0000000000000018 AI 23 16 8
[ 5] .init PROGBITS 0000000000001000 00001000
000000000000001b 0000000000000000 AX 0 0 4
[ 6] .plt PROGBITS 0000000000001020 00001020
00000000000000c0 0000000000000010 AX 0 0 16
[ 7] .plt.got PROGBITS 00000000000010e0 000010e0
0000000000000010 0000000000000010 AX 0 0 16
[ 8] .plt.sec PROGBITS 00000000000010f0 000010f0
00000000000000b0 0000000000000010 AX 0 0 16
[ 9] .text PROGBITS 00000000000011a0 000011a0
0000000000000436 0000000000000000 AX 0 0 16
[10] .fini PROGBITS 00000000000015d8 000015d8
000000000000000d 0000000000000000 AX 0 0 4
[11] .rodata PROGBITS 0000000000002000 00002000
00000000000009e8 0000000000000000 A 0 0 32
[12] .eh_frame_hdr PROGBITS 00000000000029e8 000029e8
000000000000003c 0000000000000000 A 0 0 4
[13] .eh_frame PROGBITS 0000000000002a28 00002a28
00000000000000cc 0000000000000000 A 0 0 8
[14] .init_array INIT_ARRAY 0000000000003d68 00002d68
0000000000000008 0000000000000008 WA 0 0 8
[15] .fini_array FINI_ARRAY 0000000000003d70 00002d70
0000000000000008 0000000000000008 WA 0 0 8
[16] .got PROGBITS 0000000000003f68 00002f68
0000000000000098 0000000000000008 WA 0 0 8
[17] .data PROGBITS 0000000000004000 00003000
0000000000000010 0000000000000000 WA 0 0 8
[18] .bss NOBITS 0000000000004020 00003010
0000000000000030 0000000000000000 WA 0 0 32
[19] .comment PROGBITS 0000000000000000 00003010
000000000000002b 0000000000000001 MS 0 0 1
[20] .shstrtab STRTAB 0000000000000000 0000303b
000000000000010a 0000000000000000 0 0 1
[21] .dynamic DYNAMIC 0000000000005000 00004000
0000000000000200 0000000000000010 WA 22 0 8
[22] .dynstr STRTAB 0000000000005200 00004200
0000000000000106 0000000000000000 A 0 0 8
[23] .dynsym DYNSYM 0000000000005308 00004308
00000000000001e0 0000000000000018 A 22 1 8
[24] .gnu.hash GNU_HASH 00000000000054e8 000044e8
0000000000000034 0000000000000000 A 23 0 8
[25] .interp PROGBITS 0000000000005520 00004520
0000000000000017 0000000000000000 A 0 0 8
[26] .note.ABI-tag NOTE 0000000000005538 00004538
0000000000000020 0000000000000000 A 0 0 4
[27] .note.gnu.bu[...] NOTE 0000000000005558 00004558
0000000000000024 0000000000000000 A 0 0 4
[28] .note.gnu.pr[...] NOTE 0000000000005580 00004580
0000000000000030 0000000000000000 A 0 0 8
Key to Flags:
W (write), A (alloc), X (execute), M (merge), S (strings), I (info),
L (link order), O (extra OS processing required), G (group), T (TLS),
C (compressed), x (unknown), o (OS specific), E (exclude),
D (mbind), l (large), p (processor specific)
Program Headers:
Type Offset VirtAddr PhysAddr
FileSiz MemSiz Flags Align
PHDR 0x0000000000000040 0x0000000000000040 0x0000000000000040
0x0000000000000348 0x0000000000000348 R 0x8
LOAD 0x0000000000000000 0x0000000000000000 0x0000000000000000
0x0000000000000958 0x0000000000000958 R 0x1000
GNU_STACK 0x0000000000000000 0x0000000000000000 0x0000000000000000
0x0000000000000000 0x0000000000000000 RW 0x10
GNU_PROPERTY 0x0000000000000338 0x0000000000000338 0x0000000000000338
0x0000000000000030 0x0000000000000030 R 0x8
LOAD 0x0000000000001000 0x0000000000001000 0x0000000000001000
0x00000000000005e5 0x00000000000005e5 R E 0x1000
LOAD 0x0000000000002000 0x0000000000002000 0x0000000000002000
0x0000000000000af4 0x0000000000000af4 R 0x1000
GNU_EH_FRAME 0x00000000000029e8 0x00000000000029e8 0x00000000000029e8
0x000000000000003c 0x000000000000003c R 0x4
LOAD 0x0000000000002d68 0x0000000000003d68 0x0000000000003d68
0x00000000000002a8 0x00000000000002e8 RW 0x1000
GNU_RELRO 0x0000000000002d68 0x0000000000003d68 0x0000000000003d68
0x0000000000000298 0x0000000000000298 R 0x1
DYNAMIC 0x0000000000004000 0x0000000000005000 0x0000000000005000
0x0000000000000200 0x0000000000000200 RW 0x8
LOAD 0x0000000000004000 0x0000000000005000 0x0000000000005000
0x00000000000005b0 0x00000000000005b0 RW 0x1000
INTERP 0x0000000000004520 0x0000000000005520 0x0000000000005520
0x0000000000000017 0x0000000000000017 R 0x1
[Requesting program interpreter: ./ld-linux-x86-64.so.2]
NOTE 0x0000000000004538 0x0000000000005538 0x0000000000005538
0x0000000000000020 0x0000000000000020 R 0x4
NOTE 0x0000000000004558 0x0000000000005558 0x0000000000005558
0x0000000000000024 0x0000000000000024 R 0x4
NOTE 0x0000000000004580 0x0000000000005580 0x0000000000005580
0x0000000000000030 0x0000000000000030 R 0x8
Section to Segment mapping:
Segment Sections...
00
01 .gnu.version .gnu.version_r .rela.dyn .rela.plt
02
03
04 .init .plt .plt.got .plt.sec .text .fini
05 .rodata .eh_frame_hdr .eh_frame
06 .eh_frame_hdr
07 .init_array .fini_array .got .data .bss
08 .init_array .fini_array .got
09 .dynamic
10 .dynamic .dynstr .dynsym .gnu.hash .interp .note.ABI-tag .note.gnu.build-id .note.gnu.property
11 .interp
12 .note.ABI-tag
13 .note.gnu.build-id
14 .note.gnu.property
Dynamic section at offset 0x4000 contains 28 entries:
Tag Type Name/Value
0x000000000000001d (RUNPATH) Library runpath: [.]
0x0000000000000001 (NEEDED) Shared library: [libc.so.6]
0x000000000000000c (INIT) 0x1000
0x000000000000000d (FINI) 0x15d8
0x0000000000000019 (INIT_ARRAY) 0x3d68
0x000000000000001b (INIT_ARRAYSZ) 8 (bytes)
0x000000000000001a (FINI_ARRAY) 0x3d70
0x000000000000001c (FINI_ARRAYSZ) 8 (bytes)
0x000000006ffffef5 (GNU_HASH) 0x54e8
0x0000000000000005 (STRTAB) 0x5200
0x0000000000000006 (SYMTAB) 0x5308
0x000000000000000a (STRSZ) 262 (bytes)
0x000000000000000b (SYMENT) 24 (bytes)
0x0000000000000015 (DEBUG) 0x0
0x0000000000000003 (PLTGOT) 0x3f68
0x0000000000000002 (PLTRELSZ) 264 (bytes)
0x0000000000000014 (PLTREL) RELA
0x0000000000000017 (JMPREL) 0x850
0x0000000000000007 (RELA) 0x748
0x0000000000000008 (RELASZ) 264 (bytes)
0x0000000000000009 (RELAENT) 24 (bytes)
0x000000000000001e (FLAGS) BIND_NOW
0x000000006ffffffb (FLAGS_1) Flags: NOW PIE
0x000000006ffffffe (VERNEED) 0x6f8
0x000000006fffffff (VERNEEDNUM) 1
0x000000006ffffff0 (VERSYM) 0x6cc
0x000000006ffffff9 (RELACOUNT) 3
0x0000000000000000 (NULL) 0x0
