Questions tagged [objdump]

objdump is a program for displaying various information about object files. For instance, it can be used as a disassembler to view executable in assembly form. It is part of the GNU Binutils for fine-grained control over executable and other binary data.

477 questions
114
votes
11 answers

How to disassemble one single function using objdump?

I've got a binary installed on my system, and would like to look at the disassembly of a given function. Preferrably using objdump, but other solutions would be acceptable as well. From this questions I've learned that I might be able to disassemble…
MvG
  • 57,380
  • 22
  • 148
  • 276
101
votes
3 answers

How can I examine contents of a data section of an ELF file on Linux?

I've been using objdump to look at assembly code in Linux ELF binaries. Sometimes there is an indirect jump through a jump table that is stored in the rodata (read-only data) section. How to get objdump or any other tool to show me the contents of…
Norman Ramsey
  • 198,648
  • 61
  • 360
  • 533
94
votes
2 answers

How can objdump emit intel syntax

How can I tell objdump to emit assembly in Intel Syntax rather than the default AT&T syntax?
pythonic
  • 20,589
  • 43
  • 136
  • 219
75
votes
5 answers

What does each column of objdump's Symbol table mean?

SYMBOL TABLE: 0000000000000000 w *UND* 0000000000000000 __gmon_start__ I've man objdump but there's no such info. Anyone know what the 5 columns mean?
Je Rog
  • 5,675
  • 8
  • 39
  • 47
73
votes
7 answers

How can I tell, with something like objdump, if an object file has been built with -fPIC?

How can I tell, with something like objdump, if an object file has been built with -fPIC?
Crazy Chenz
  • 12,650
  • 12
  • 50
  • 62
68
votes
8 answers

How to disassemble, modify and then reassemble a Linux executable?

Is there anyway this can be done? I've used objdump but that doesn't produce assembly output that will be accepted by any assembler that I know of. I'd like to be able to change instructions within an executable and then test it afterwards.
FlagCapper
  • 799
  • 1
  • 6
  • 5
62
votes
3 answers

What is register %eiz?

In the following assembly code that I dumped out using objdump: lea 0x0(%esi,%eiz,1),%esi What is register %eiz? What does the preceding code mean?
Summer_More_More_Tea
  • 12,740
  • 12
  • 51
  • 83
56
votes
1 answer

readelf vs. objdump: why are both needed

I need to learn about the ELF file layout for a project I am working on and I noticed the existence of these tools. Why do all Linux distributions include both readelf and objdump? Do these tools complement one another? When would i prefer to use…
zr.
  • 7,528
  • 11
  • 50
  • 84
55
votes
2 answers

Disassembling A Flat Binary File Using objdump

Can I disassemble a flat binary file using objdump? I'm familiar with disassembling a structured binary executable such as an ELF file using: objdump -d file.elf But if I have a flat binary file that I know is supposed to be loaded at, e.g.,…
Multimedia Mike
  • 12,660
  • 5
  • 46
  • 62
44
votes
4 answers

Tool to analyze size of ELF sections and symbol

I need a way to analyze output file of my GCC compiler for ARM. I am compiling for bare metal and I am quite concerned with size. I can use arm-none-eabi-objdump provided by the cross-compiler but parsing the output is not something I would be eager…
RushPL
  • 4,732
  • 1
  • 34
  • 44
33
votes
3 answers

How does objdump manage to display source code with the -S option?

Is there a reference to the source file in the binary? I tried running strings on the binary and couldn't find any reference to the source file listed...
anon
  • 591
  • 2
  • 6
  • 11
32
votes
2 answers

Can objdump un-mangle names of C++ template functions?

I have a C++ object file that contains instantiations of some C++ template functions. The object file in question instantiates the same function for a few different combinations of template parameters. I'm trying to debug a problem and would like to…
Jason R
  • 11,159
  • 6
  • 50
  • 81
25
votes
5 answers

How do I find out which functions of a shared object are used by a program or an other library?

How do I find out which functions of a shared object are used by a program or an other library? In this specific case, I would like to see which functions in /lib/libgcc1_s.so.1 are used by an other dynamic library. Since they are dynamically…
lultimouomo
  • 251
  • 1
  • 3
  • 3
24
votes
2 answers

How to reverse the objcopy's strip with only-keep-debug?

In modern linux almost all objects are stripped and splitted in two parts (two files). First is executable itself and second is debug symbols, stripped out from original ELF. Such files are created with objcopy --only-keep-debug original.elf…
osgx
  • 90,338
  • 53
  • 357
  • 513
24
votes
2 answers

What is the difference between ldd and objdump?

I am running these two commands, and I'm getting different output: $ ldd `which ls` linux-gate.so.1 => (0x00db3000) libselinux.so.1 => /lib/i386-linux-gnu/libselinux.so.1 (0x00ba2000) librt.so.1 => /lib/i386-linux-gnu/librt.so.1…
alexgolec
  • 26,898
  • 33
  • 107
  • 159
1
2 3
31 32