simpleReadElf/fileHeader.c at master · CamiloJac/simpleReadElf · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
#include <stdio.h>
#include <string.h>
#include <elf.h>
#include <stdint.h>


char * getOSABI(unsigned char);
char * getEType(uint16_t);
char * getMachine(uint16_t);

void dispFileHdr(uint8_t *mem)
{
    int i;
    Elf64_Ehdr *ehdr;

    /*
     * The inital ELF Header starts at 0
     * of our mapped memory
     */
    ehdr = (Elf64_Ehdr *)mem;

    printf("ELF Header:\n  Magic:%5x%3x%3x%3x ", ehdr->e_ident[EI_MAG0],
            ehdr->e_ident[EI_MAG1], ehdr->e_ident[EI_MAG2], ehdr->e_ident[EI_MAG3]);
    for (i = 4; i < 16; i++) {
        printf("%02x ", mem[i]);
    }
    printf("\n");
    printf("  Class:%34s\n  Data:%59s\n  Version:%38s\n  OS/ABI:%43s\n"
        "  ABI Version:%24d\n  Type:%54s\n  Machine:%29d\n  Version:%#30x\n"
        "  Entry point address:%#20lx\n  Start of program headers:%12ld (bytes into file)\n"
        "  Start of section headers:%15ld (bytes into file)\n  Flags:%#30x\n"
        "  Size of this header:%17d (bytes)\n  Size of program headers:%13d (bytes)\n"
        "  Number of program headers:%10d\n  Size of section headers:%13d (bytes)\n"
        "  Number of section headers:%11d\n",
                            ((ehdr->e_ident[EI_CLASS] == 0) ? "ELFNONE" :
                            (ehdr->e_ident[EI_CLASS] == 1) ? "ELF32" :
                            "ELF64"),
                            ((ehdr->e_ident[EI_DATA] == 0) ? "Unknown data format" :
                            (ehdr->e_ident[EI_DATA] == 1) ? "2's complement, little endian" :
                            "2's complement, big endian"),
                             ((ehdr->e_ident[EI_VERSION] == 0) ? "0 (invalid)" :
                            "1 (current)"),
                            getOSABI(ehdr->e_ident[EI_OSABI]),
                            ehdr->e_ident[EI_ABIVERSION],
                            getEType(ehdr->e_type),
                            ehdr->e_machine,
                            ehdr->e_version,
                            ehdr->e_entry,
                            ehdr->e_phoff,
                            ehdr->e_shoff,
                            ehdr->e_flags,
                            ehdr->e_ehsize,
                            ehdr->e_phentsize,
                            ehdr->e_phnum,
                            ehdr->e_shentsize,
                            ehdr->e_shnum);
}


char * getOSABI(unsigned char EI_VAL)
{
    switch (EI_VAL) {
    case 0:
    case 1:
        return "Unix - System V";
    case 2:
        return "HP - UX";
    case 3:
        return "NetBSD";
    case 4:
        return "Linux ABI";
    case 5:
        return "Solaris";
    case 6:
        return "IRIX";
    case 7:
        return "FreeBSD";
    case 8:
        return "TRU64 UNIX";
    case 9:
        return "ARM";
    case 10:
        return "Stand-alone";
    }
}


char * getEType(uint16_t e_type)
{
    switch (e_type) {
    case 0:
        return "NONE (Unknown type)";
    case 1:
        return "REL (Relocatable file)";
    case 2:
        return "EXEC (Executable file)";
    case 3:
        return "DYN (Shared object file)";
    case 4:
        return "CORE (Core file)";
    }
}