ElfFile (unidbg-android 0.9.5 API)

java.lang.Object
- net.fornwall.jelf.ElfFile

public final class ElfFile
extends Object

An ELF (Executable and Linkable Format) file can be a relocatable, executable, shared or core file.

 http://man7.org/linux/man-pages/man5/elf.5.html
 http://en.wikipedia.org/wiki/Executable_and_Linkable_Format
 http://www.ibm.com/developerworks/library/l-dynamic-libraries/
 http://downloads.openwatcom.org/ftp/devel/docs/elf-64-gen.pdf
 
 Elf64_Addr, Elf64_Off, Elf64_Xword, Elf64_Sxword: 8 bytes
 Elf64_Word, Elf64_Sword: 4 bytes
 Elf64_Half: 2 bytes

字段概要

字段
限定符和类型	字段和说明
`short`	`arch` The required architecture.
`static int`	`ARCH_68k` Motorola 68000 architecture type.
`static int`	`ARCH_88k` Motorola 88000 architecture type.
`static int`	`ARCH_AARCH64`
`static int`	`ARCH_ARM`
`static int`	`ARCH_ATT` AT&T architecture type.
`static int`	`ARCH_i386` Intel 386 architecture type.
`static int`	`ARCH_i860` Intel 860 architecture type.
`static int`	`ARCH_MIPS` MIPS architecture type.
`static int`	`ARCH_NONE` No architecture type.
`static int`	`ARCH_SPARC` SPARC architecture type.
`static int`	`ARCH_X86_64`
`static byte`	`CLASS_32` 32-bit objects.
`static byte`	`CLASS_64` 64-bit objects.
`static byte`	`DATA_LSB` LSB data encoding.
`static byte`	`DATA_MSB` MSB data encoding.
`short`	`eh_size` ELF header size in bytes.
`byte`	`encoding` Returns a byte identifying the data encoding of the processor specific data.
`long`	`entry_point` Virtual address to which the system first transfers control.
`short`	`file_type` Identifies the object file type.
`int`	`flags` Processor specific flags.
`static int`	`FT_CORE` Core file file type.
`static int`	`FT_DYN` Shared object file type.
`static int`	`FT_EXEC` Executable file type.
`static int`	`FT_REL` Relocatable file type.
`short`	`num_ph` e_phnum.
`short`	`num_sh` Number of entries in the section header table, 0 if no entries.
`byte`	`objectSize` Byte identifying the size of objects, either `CLASS_32` or {link 2 .
`short`	`ph_entry_size` e_phentsize.
`long`	`ph_offset` Program header table offset in bytes.
`short`	`sh_entry_size` Section header entry size in bytes.
`long`	`sh_offset` Section header table offset in bytes.
`int`	`version` Version

方法概要

所有方法静态方法实例方法具体方法
限定符和类型	方法和说明
`static ElfFile`	`fromBytes(ByteBuffer buffer)`
`ElfSection`	`getDynamicLinkSection()` The `ElfSection.SHT_DYNAMIC` section (of which there may be only one).
`net.fornwall.jelf.ElfStringTable`	`getDynamicStringTable()` Returns the dynamic symbol table associated with this ELF file, or null if one does not exist.
`ElfSection`	`getDynamicSymbolTableSection()` The `ElfSection.SHT_DYNSYM` section (of which there may be only one), if any.
`ElfSymbol`	`getELFSymbol(long address)` Returns the elf symbol with the specified address or null if one is not found.
`ElfSymbol`	`getELFSymbol(String symbolName)` Returns the elf symbol with the specified name or null if one is not found.
`ElfSection`	`getInitArraySection()`
`String`	`getInterpreter()` The interpreter specified by the `ElfSegment.PT_INTERP` program header, if any.
`ElfSection`	`getPreInitArraySection()`
`ElfSegment`	`getProgramHeader(int index)`
`ElfSection`	`getSection(int index)` Returns the section header at the specified index.
`net.fornwall.jelf.ElfStringTable`	`getSectionNameStringTable()` Returns the section header string table associated with this ELF file.
`net.fornwall.jelf.ElfStringTable`	`getStringTable()` Returns the string table associated with this ELF file.
`ElfSection`	`getSymbolTableSection()` The `ElfSection.SHT_SYMTAB` section (of which there may be only one), if any.

从类继承的方法 java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

- 字段详细资料
  - FT_REL
```
public static final int FT_REL
```
    Relocatable file type. A possible value of file_type.
    
    另请参阅:
    
    常量字段值
  - FT_EXEC
```
public static final int FT_EXEC
```
    Executable file type. A possible value of file_type.
    
    另请参阅:
    
    常量字段值
  - FT_DYN
```
public static final int FT_DYN
```
    Shared object file type. A possible value of file_type.
    
    另请参阅:
    
    常量字段值
  - FT_CORE
```
public static final int FT_CORE
```
    Core file file type. A possible value of file_type.
    
    另请参阅:
    
    常量字段值
  - CLASS_32
```
public static final byte CLASS_32
```
    32-bit objects.
    
    另请参阅:
    
    常量字段值
  - CLASS_64
```
public static final byte CLASS_64
```
    64-bit objects.
    
    另请参阅:
    
    常量字段值
  - DATA_LSB
```
public static final byte DATA_LSB
```
    LSB data encoding.
    
    另请参阅:
    
    常量字段值
  - DATA_MSB
```
public static final byte DATA_MSB
```
    MSB data encoding.
    
    另请参阅:
    
    常量字段值
  - ARCH_NONE
```
public static final int ARCH_NONE
```
    No architecture type.
    
    另请参阅:
    
    常量字段值
  - ARCH_ATT
```
public static final int ARCH_ATT
```
    AT&T architecture type.
    
    另请参阅:
    
    常量字段值
  - ARCH_SPARC
```
public static final int ARCH_SPARC
```
    SPARC architecture type.
    
    另请参阅:
    
    常量字段值
  - ARCH_i386
```
public static final int ARCH_i386
```
    Intel 386 architecture type.
    
    另请参阅:
    
    常量字段值
  - ARCH_68k
```
public static final int ARCH_68k
```
    Motorola 68000 architecture type.
    
    另请参阅:
    
    常量字段值
  - ARCH_88k
```
public static final int ARCH_88k
```
    Motorola 88000 architecture type.
    
    另请参阅:
    
    常量字段值
  - ARCH_i860
```
public static final int ARCH_i860
```
    Intel 860 architecture type.
    
    另请参阅:
    
    常量字段值
  - ARCH_MIPS
```
public static final int ARCH_MIPS
```
    MIPS architecture type.
    
    另请参阅:
    
    常量字段值
  - ARCH_ARM
```
public static final int ARCH_ARM
```
    另请参阅:
    
    常量字段值
  - ARCH_X86_64
```
public static final int ARCH_X86_64
```
    另请参阅:
    
    常量字段值
  - ARCH_AARCH64
```
public static final int ARCH_AARCH64
```
    另请参阅:
    
    常量字段值
  - objectSize
```
public final byte objectSize
```
    Byte identifying the size of objects, either CLASS_32 or {link 2 .
  - encoding
```
public final byte encoding
```
    Returns a byte identifying the data encoding of the processor specific data. This byte will be either DATA_INVALID, DATA_LSB or DATA_MSB.
  - file_type
```
public final short file_type
```
    Identifies the object file type. One of the FT_* constants in the class.
  - arch
```
public final short arch
```
    The required architecture. One of the ARCH_* constants in the class.
  - version
```
public final int version
```
    Version
  - entry_point
```
public final long entry_point
```
    Virtual address to which the system first transfers control. If there is no entry point for the file the value is 0.
  - ph_offset
```
public final long ph_offset
```
    Program header table offset in bytes. If there is no program header table the value is 0.
  - sh_offset
```
public final long sh_offset
```
    Section header table offset in bytes. If there is no section header table the value is 0.
  - flags
```
public int flags
```
    Processor specific flags.
  - eh_size
```
public short eh_size
```
    ELF header size in bytes.
  - ph_entry_size
```
public final short ph_entry_size
```
    e_phentsize. Size of one entry in the file's program header table in bytes. All entries are the same size.
  - num_ph
```
public final short num_ph
```
    e_phnum. Number of ElfSegment entries in the program header table, 0 if no entries.
  - sh_entry_size
```
public final short sh_entry_size
```
    Section header entry size in bytes.
  - num_sh
```
public final short num_sh
```
    Number of entries in the section header table, 0 if no entries.
- 方法详细资料
  - getSection
```
public ElfSection getSection(int index)
                      throws ElfException,
                             IOException
```
    Returns the section header at the specified index. The section header at index 0 is defined as being a undefined section.
    
    抛出:
    
    ElfException
    
    IOException
  - getSectionNameStringTable
```
public net.fornwall.jelf.ElfStringTable getSectionNameStringTable()
                                                           throws ElfException,
                                                                  IOException
```
    Returns the section header string table associated with this ELF file.
    
    抛出:
    
    ElfException
    
    IOException
  - getStringTable
```
public net.fornwall.jelf.ElfStringTable getStringTable()
                                                throws ElfException,
                                                       IOException
```
    Returns the string table associated with this ELF file.
    
    抛出:
    
    ElfException
    
    IOException
  - getDynamicStringTable
```
public net.fornwall.jelf.ElfStringTable getDynamicStringTable()
                                                       throws ElfException,
                                                              IOException
```
    Returns the dynamic symbol table associated with this ELF file, or null if one does not exist.
    
    抛出:
    
    ElfException
    
    IOException
  - getSymbolTableSection
```
public ElfSection getSymbolTableSection()
                                 throws ElfException,
                                        IOException
```
    The ElfSection.SHT_SYMTAB section (of which there may be only one), if any.
    
    抛出:
    
    ElfException
    
    IOException
  - getDynamicSymbolTableSection
```
public ElfSection getDynamicSymbolTableSection()
                                        throws ElfException,
                                               IOException
```
    The ElfSection.SHT_DYNSYM section (of which there may be only one), if any.
    
    抛出:
    
    ElfException
    
    IOException
  - getDynamicLinkSection
```
public ElfSection getDynamicLinkSection()
                                 throws IOException
```
    The ElfSection.SHT_DYNAMIC section (of which there may be only one). Named ".dynamic".
    
    抛出:
    
    IOException
  - getInitArraySection
```
public ElfSection getInitArraySection()
                               throws IOException
```
    抛出:
    
    IOException
  - getPreInitArraySection
```
public ElfSection getPreInitArraySection()
                                  throws IOException
```
    抛出:
    
    IOException
  - getELFSymbol
```
public ElfSymbol getELFSymbol(String symbolName)
                       throws ElfException,
                              IOException
```
    Returns the elf symbol with the specified name or null if one is not found.
    
    抛出:
    
    ElfException
    
    IOException
  - getELFSymbol
```
public ElfSymbol getELFSymbol(long address)
                       throws ElfException,
                              IOException
```
    Returns the elf symbol with the specified address or null if one is not found. 'address' is relative to base of shared object for .so's.
    
    抛出:
    
    ElfException
    
    IOException
  - getProgramHeader
```
public ElfSegment getProgramHeader(int index)
                            throws IOException
```
    抛出:
    
    IOException
  - fromBytes
```
public static ElfFile fromBytes(ByteBuffer buffer)
                         throws ElfException
```
    抛出:
    
    ElfException
  - getInterpreter
```
public String getInterpreter()
                      throws IOException
```
    The interpreter specified by the ElfSegment.PT_INTERP program header, if any.
    
    抛出:
    
    IOException

类 ElfFile

字段概要

方法概要

从类继承的方法 java.lang.Object

字段详细资料

FT_REL

FT_EXEC

FT_DYN

FT_CORE

CLASS_32

CLASS_64

DATA_LSB

DATA_MSB

ARCH_NONE

ARCH_ATT

ARCH_SPARC

ARCH_i386

ARCH_68k

ARCH_88k

ARCH_i860

ARCH_MIPS

ARCH_ARM

ARCH_X86_64

ARCH_AARCH64

objectSize

encoding

file_type

arch

version

entry_point

ph_offset

sh_offset

flags

eh_size

ph_entry_size

num_ph

sh_entry_size

num_sh

方法详细资料

getSection

getSectionNameStringTable

getStringTable

getDynamicStringTable

getSymbolTableSection

getDynamicSymbolTableSection

getDynamicLinkSection

getInitArraySection

getPreInitArraySection

getELFSymbol

getELFSymbol

getProgramHeader

fromBytes

getInterpreter