Graphical objdump ?

Uncategorized

Hi Lazyweb. I’m curious if a tool exists already to do something I have in mind..

Take an example of objdump -x on a file..

0 .note.gnu.build-id 00000024 0000000000000000 0000000000000000 00000040 2**2
CONTENTS, ALLOC, LOAD, READONLY, DATA
1 .text 0002a374 0000000000000000 0000000000000000 00000064 2**2
CONTENTS, ALLOC, LOAD, RELOC, READONLY, CODE
2 .exit.text 000000cb 0000000000000000 0000000000000000 000416b8 2**0
CONTENTS, ALLOC, LOAD, RELOC, READONLY, CODE
3 .init.text 00000e35 0000000000000000 0000000000000000 00041ad0 2**0
CONTENTS, ALLOC, LOAD, RELOC, READONLY, CODE
4 .ref.text 000000b9 0000000000000000 0000000000000000 00044828 2**0
CONTENTS, ALLOC, LOAD, RELOC, READONLY, CODE
5 .rodata 00001bc2 0000000000000000 0000000000000000 000449f0 2**4
CONTENTS, ALLOC, LOAD, RELOC, READONLY, DATA
6 .rodata.str1.1 00001e97 0000000000000000 0000000000000000 00048688 2**0
CONTENTS, ALLOC, LOAD, READONLY, DATA
7 __bug_table 00000270 0000000000000000 0000000000000000 0004a51f 2**0
CONTENTS, ALLOC, LOAD, RELOC, READONLY, DATA
8 .smp_locks 00000a90 0000000000000000 0000000000000000 0004ac70 2**3
CONTENTS, ALLOC, LOAD, RELOC, READONLY, DATA

I’m curious what strings are in that .rodata.str1.1 section vs the .rodata section. I’d really like a gtk UI that allows me to click that entry, and have it expand to show me what’s in there. The app could be extra smart and have knowledge about what to do for specific sections, (like passing .text to objdump -d). For sections it doesn’t grok, it could just print a hexdump.

Anything like this already exist?

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

4 Comments

4 Comments

  1. askadar  •  Jan 30, 2009 @12:38

    Have you checked out EDB? Its description says that it was build as a replacement fo OllyDb for reverse engineering, so it might have some of the display and analysis features that you are looking for.

    http://www.codef00.com/projects.php

    It’s not a GTK-based, but it has a package in Fedora.

  2. davej  •  Jan 30, 2009 @12:47

    Looks nifty, but only works on executables afaict. I’m interested in poking at kernel modules. (I should have mentioned that, sorry).

  3. marco.roeland  •  Jan 30, 2009 @15:13

    Perhaps you could adapt “dissy”? http://rtlab.tekproj.bth.se/wiki/index.php/Dissy

  4. lkundrak  •  Feb 2, 2009 @10:44

    Btw, dissy is being reviewed here:
    https://bugzilla.redhat.com/show_bug.cgi?id=483575

    Not being extra smart about sections it probably doesn’t do what you need, but hey — you paste the kernel oops directly to its location bar to get a nice callback! :]



  • huaglahglah huaglahglah