[*] Binary protection state of video-service-legacy

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of video-service-legacy

sw ra, 0x6c(sp)
sw s7, 0x64(sp)
sw s6, 0x60(sp)
sw s5, 0x5c(sp)
sw s4, 0x58(sp)
sw s1, 0x4c(sp)
sw s0, 0x48(sp)
lw a1, -0x7fd8(gp)
sw v0, 0x24(sp)
lw v0, (v0)
lw t9, -sym.imp.sd_bus_message_read(gp)
move s2, a0
lw a0, 0x80(sp)
addiu a2, sp, 0x34
addiu a1, a1, 0x2558
sw v0, 0x44(sp)
sw zero, 0x34(sp)
sw zero, 0x38(sp)
sw zero, 0x3c(sp)
jalr t9
lw s3, 0x84(sp)
move fp, v0
bltz v0, 0x1650
lw gp, 0x18(sp)
lw s0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a1, s3
jalr t9
addiu a0, s0, str.Channel_i
lw gp, 0x18(sp)
move a0, v0
addiu a2, sp, 0x38
lw s1, -0x7fd8(gp)
lw t9, -sym.conf_get_bool(gp)
addiu a1, s1, str.show_all
bal sym.conf_get_bool
move s4, v0
lw gp, 0x18(sp)
move a0, s4
beqz v0, 0x13a8
lw t9, -sym.imp.g_free(gp)
lw v1, 0x34(sp)
lw v0, 0x38(sp)
beq v1, v0, 0x1610
nop
jalr t9
nop
lw gp, 0x18(sp)
addiu a2, sp, 0x3c
lw s4, -0x7fd8(gp)
lw a1, -0x7fd8(gp)
lw t9, -sym.conf_get_int(gp)
addiu a1, a1, str.num_sensors
bal sym.conf_get_int
addiu a0, s4, str.settings
lw v0, 0x3c(sp)
blez v0, 0x16d0
lw gp, 0x18(sp)
addiu v1, zero, 1
beq v0, v1, 0x14cc
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, s0, str.Channel_i
jalr t9
move a1, s3
lw gp, 0x18(sp)
lw a2, 0x34(sp)
move a0, v0
lw t9, -sym.conf_set_bool(gp)
addiu a1, s1, str.show_all
bal sym.conf_set_bool
move s0, v0
lw gp, 0x18(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s0
lw gp, 0x18(sp)
move a2, s3
lw a1, -0x7fd8(gp)
lw a0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a1, a1, str._com_axis_VideoLegacy1_Channel
jalr t9
addiu a0, a0, str._s__d
lw gp, 0x18(sp)
move a1, v0
move a0, s2
lw a3, -0x7fd8(gp)
lw a2, -0x7fd8(gp)
lw t9, -sym.imp.sd_bus_emit_properties_changed(gp)
addiu a3, a3, str.ResolutionList
addiu a2, a2, str.com.axis.Configuration.Legacy
sw zero, 0x10(sp)
jalr t9
move s0, v0
lw gp, 0x18(sp)
move fp, v0
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s0
bltz fp, 0x1690
--
addiu a0, s4, str.settings
bal sym.conf_get_int
sw zero, 0x40(sp)
lw v0, 0x40(sp)
blez v0, 0x16fc
lw gp, 0x18(sp)
lw v0, -0x7fd8(gp)
lw fp, -0x7fd8(gp)
sw v0, 0x20(sp)
addiu v0, fp, 0x2848
sw v0, 0x28(sp)
lw v0, -0x7fd8(gp)
lw s6, -0x7fd8(gp)
addiu v0, v0, str._sFailed_to_emit_ResolutionList_changed_signal:__s
lw s5, -0x7fd8(gp)
lw s4, -0x7fd8(gp)
addiu s7, zero, 1
addiu s0, s0, str.Channel_i
b 0x1540
sw v0, 0x2c(sp)
lw v0, 0x40(sp)
addiu s7, s7, 1
slt v0, v0, s7
bnez v0, 0x148c
lw v0, 0x24(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a1, s7
jalr t9
move a0, s0
lw gp, 0x18(sp)
lw a2, 0x34(sp)
move a0, v0
lw t9, -sym.conf_set_bool(gp)
addiu a1, s1, str.show_all
bal sym.conf_set_bool
move s3, v0
lw gp, 0x18(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s3
lw gp, 0x18(sp)
move a2, s7
addiu a1, s6, str._com_axis_VideoLegacy1_Channel
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, s5, str._s__d
lw gp, 0x18(sp)
move s3, v0
lw v0, 0x20(sp)
lw t9, -sym.imp.sd_bus_emit_properties_changed(gp)
addiu a3, s4, str.ResolutionList
addiu a2, v0, str.com.axis.Configuration.Legacy
move a1, s3
move a0, s2
jalr t9
sw zero, 0x10(sp)
lw gp, 0x18(sp)
move fp, v0
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s3
bgez fp, 0x152c
lw gp, 0x18(sp)
lw t9, -sym.imp.strerror(gp)
--
move a0, zero
addiu fp, zero, -3
b 0x1488
lw gp, 0x18(sp)
lw a3, -0x7fd8(gp)
lw a2, -0x7fd8(gp)
lw t9, -sym.imp.g_log(gp)
addiu a3, a3, 0x2848
b 0x16e4
addiu a2, a2, str._sCould_not_get_number_of_channels
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, -0x6710
addu gp, gp, t9
addiu sp, sp, -0x38
lw a0, -0x7fd8(gp)
sw s0, 0x28(sp)
lw s0, -0x7f68(gp)
sw ra, 0x34(sp)
sw gp, 0x18(sp)
sw s2, 0x30(sp)
sw s1, 0x2c(sp)
lw v0, (s0)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a1, 0x4c(sp)
addiu a0, a0, str.Channel_i
sw v0, 0x24(sp)
sw zero, 0x20(sp)
jalr t9
lw s2, 0x48(sp)
lw gp, 0x18(sp)
addiu a2, sp, 0x20
move a0, v0
lw a1, -0x7fd8(gp)
lw t9, -sym.conf_get_bool(gp)
addiu a1, a1, str.show_all
bal sym.conf_get_bool
move s1, v0
lw gp, 0x18(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s1
lw gp, 0x18(sp)
lw a2, 0x20(sp)
--
addiu a2, sp, 0x20
addiu a1, a1, str.num_channels
addiu a0, a0, str.settings
sw v0, 0x24(sp)
sw zero, 0x20(sp)
bal sym.conf_get_int
nop
lw v0, 0x20(sp)
blez v0, 0x1aa8
lw gp, 0x18(sp)
lw s4, -0x7fc8(gp)
lw s3, -0x7fd8(gp)
lw s2, -0x7fd8(gp)
lw s1, -0x7fd8(gp)
addiu s0, zero, 1
addiu s4, s4, 0x2f80
addiu s3, s3, str._com_axis_VideoLegacy1_Channel
addiu s2, s2, str._s__d
b 0x19d8
addiu s1, s1, str.com.axis.Configuration.Legacy
lw v0, 0x20(sp)
addiu s0, s0, 1
slt v0, v0, s0
bnez v0, 0x1a6c
addiu v0, zero, 1
lw t9, -sym.imp.g_strdup_printf(gp)
move a2, s0
move a1, s3
jalr t9
move a0, s2
lw gp, 0x18(sp)
move a3, s1
move a2, v0
lw t9, -sym.imp.sd_bus_add_object_vtable(gp)
move a1, zero
move a0, s5
sw s0, 0x14(sp)
sw s4, 0x10(sp)
jalr t9
move s7, v0
lw gp, 0x18(sp)
move fp, v0
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s7
bgez fp, 0x19c4
--
addiu a3, a3, 0x2848
addiu a2, a2, str._sFailed_to_get_number_of_channels_from_conf_file.
addiu a1, zero, 0x100
jalr t9
move a0, zero
lw gp, 0x18(sp)
b 0x1a6c
move v0, zero
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, -0x6ad0
addu gp, gp, t9
addiu sp, sp, -0x30
move a1, a0
sw s0, 0x20(sp)
lw s0, -0x7f68(gp)
sw ra, 0x2c(sp)
sw gp, 0x10(sp)
sw s2, 0x28(sp)
sw s1, 0x24(sp)
lw v0, (s0)
move s1, a0
lw a0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, a0, str.Channel_i
sw v0, 0x1c(sp)
sw zero, 0x18(sp)
jalr t9
nop
lw gp, 0x10(sp)
addiu a2, sp, 0x18
move a0, v0
lw a1, -0x7fd8(gp)
lw t9, -sym.conf_get_bool(gp)
addiu a1, a1, str.show_all
bal sym.conf_get_bool
move s2, v0
lw gp, 0x10(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s2
lw gp, 0x10(sp)
lw a1, 0x18(sp)
addiu v1, zero, 2

[*] Function printf used 8 times video-service-legacy