Struct symbolic::debuginfo::elf::ElfObject

pub struct ElfObject<'data> { /* private fields */ }

Executable and Linkable Format, used for executables and libraries on Linux.

Implementations

impl<'data> ElfObject<'data>

pub fn test(data: &[u8]) -> bool

Tests whether the buffer could contain an ELF object.

pub fn parse(data: &'data [u8]) -> Result<ElfObject<'data>, ElfError>

Tries to parse an ELF object from the given slice. Will return a partially parsed ELF object if at least the program and section headers can be parsed.

pub fn file_format(&self) -> FileFormat

The container file format, which is always FileFormat::Elf.

pub fn code_id(&self) -> Option<CodeId>

The code identifier of this object.

As opposed to Mach-O, ELF does not specify a unique ID for object files in its header. Compilers and linkers usually add either SHT_NOTE sections or PT_NOTE program header elements for this purpose.

pub fn debug_link(&self) -> Result<Option<DebugLink<'_>>, DebugLinkError<'_>>

The debug link of this object.

The debug link is an alternative to the build id for specifying the location of an ELF’s debugging information. It refers to a filename that can be used to build various debug paths where debuggers can look for the debug files.

Errors

• None if there is no gnu_debuglink section
• DebugLinkError if this section exists, but is malformed

pub fn name(&self) -> Option<&'data str>

The binary’s soname, if any.

pub fn debug_id(&self) -> DebugId

The debug information identifier of an ELF object.

The debug identifier is a rehash of the first 16 bytes of the code_id, if present. Otherwise, this function will hash the first page of the .text section (program code) to synthesize a unique ID. This is likely not a valid UUID since was generated off a hash value.

If all of the above fails, the identifier will be an empty DebugId.

pub fn arch(&self) -> Arch

The CPU architecture of this object, as specified in the ELF header.

pub fn kind(&self) -> ObjectKind

The kind of this object, as specified in the ELF header.

pub fn load_address(&self) -> u64

The address at which the image prefers to be loaded into memory.

ELF files store all internal addresses as if it was loaded at that address. When the image is actually loaded, that spot might already be taken by other images and so it must be relocated to a new address. At runtime, a relocation table manages the arithmetics behind this.

Addresses used in symbols or debug_session have already been rebased relative to that load address, so that the caller only has to deal with addresses relative to the actual start of the image.

pub fn has_symbols(&self) -> bool

Determines whether this object exposes a public symbol table.

pub fn symbols(&self) -> ElfSymbolIterator<'data, '_>

Returns an iterator over symbols in the public symbol table.

pub fn symbol_map(&self) -> SymbolMap<'data>

Returns an ordered map of symbols in the symbol table.

pub fn has_debug_info(&self) -> bool

Determines whether this object contains debug information.

pub fn debug_session(&self) -> Result<DwarfDebugSession<'data>, DwarfError>

Constructs a debugging session.

A debugging session loads certain information from the object file and creates caches for efficient access to various records in the debug information. Since this can be quite a costly process, try to reuse the debugging session as long as possible.

ELF files generally use DWARF debugging information, which is also used by MachO containers on macOS.

Constructing this session will also work if the object does not contain debugging information, in which case the session will be a no-op. This can be checked via has_debug_info.

pub fn has_unwind_info(&self) -> bool

Determines whether this object contains stack unwinding information.

pub fn has_sources(&self) -> bool

Determines whether this object contains embedded source.

pub fn is_malformed(&self) -> bool

Determines whether this object is malformed and was only partially parsed

pub fn data(&self) -> &'data [u8]

Returns the raw data of the ELF file.

Trait Implementations

impl<'slf, 'data> AsSelf<'slf> for ElfObject<'data>where 'data: 'slf,

type Ref = ElfObject<'slf>

The Self type with 'slf lifetimes, returned by as_self.

fn as_self(&'slf self) -> &'slf <ElfObject<'data> as AsSelf<'slf>>::Ref

Returns a reference to self with downcasted lifetime.

impl Debug for ElfObject<'_>

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'data> Dwarf<'data> for ElfObject<'data>

fn endianity(&self) -> RunTimeEndian

Returns whether the file was compiled for a big-endian or little-endian machine.

fn raw_section(&self, name: &str) -> Option<DwarfSection<'data>>

Returns information and raw data of a section.

fn section(&self, name: &str) -> Option<DwarfSection<'data>>

Returns information and data of a section.

fn has_section(&self, name: &str) -> bool

Determines whether the specified section exists.

impl<'data, 'object> ObjectLike<'data, 'object> for ElfObject<'data>where 'data: 'object,

type Error = DwarfError

Errors thrown when reading information from this object.

type Session = DwarfDebugSession<'data>

A session that allows optimized access to debugging information.

type SymbolIterator = ElfSymbolIterator<'data, 'object>

The iterator over the symbols in the public symbol table.

fn file_format(&self) -> FileFormat

The container format of this file.

fn code_id(&self) -> Option<CodeId>

The code identifier of this object.

fn debug_id(&self) -> DebugId

The debug information identifier of this object.

fn arch(&self) -> Arch

The CPU architecture of this object.

fn kind(&self) -> ObjectKind

The kind of this object.

fn load_address(&self) -> u64

The address at which the image prefers to be loaded into memory.

fn has_symbols(&self) -> bool

Determines whether this object exposes a public symbol table.

fn symbols( &'object self ) -> <ElfObject<'data> as ObjectLike<'data, 'object>>::SymbolIterator

Returns an iterator over symbols in the public symbol table.

fn symbol_map(&self) -> SymbolMap<'data>

Returns an ordered map of symbols in the symbol table.

fn has_debug_info(&self) -> bool

Determines whether this object contains debug information.

fn debug_session( &self ) -> Result<<ElfObject<'data> as ObjectLike<'data, 'object>>::Session, <ElfObject<'data> as ObjectLike<'data, 'object>>::Error>

Constructs a debugging session.

fn has_unwind_info(&self) -> bool

Determines whether this object contains stack unwinding information.

fn has_sources(&self) -> bool

Determines whether this object contains embedded sources.

fn is_malformed(&self) -> bool

Determines whether this object is malformed and was only partially parsed