[*] Binary protection state of mDNSResponderPosix
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of mDNSResponderPosix
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/mDNSResponderPosix @ 0x8270 */
| #include <stdint.h>
|
; (fcn) sym.plen_to_mask () | void plen_to_mask () {
0x00008270 lui gp, 6 |
0x00008274 addiu gp, gp, -0x61e0 |
0x00008278 addu gp, gp, t9 | gp += t9;
0x0000827c addiu sp, sp, -0x48 |
0x00008280 sw s5, 0x34(sp) | *(var_34h) = s5;
0x00008284 sw s4, 0x30(sp) | *(var_30h) = s4;
0x00008288 lw s5, -0x7fc0(gp) | s5 = *(gp);
0x0000828c lw s4, -0x7fc0(gp) | s4 = *(gp);
0x00008290 sw s7, 0x3c(sp) | *(var_3ch) = s7;
0x00008294 sw s6, 0x38(sp) | *(var_38h) = s6;
0x00008298 sw s3, 0x2c(sp) | *(var_2ch) = s3;
0x0000829c sw s1, 0x24(sp) | *(var_24h) = s1;
0x000082a0 sw gp, 0x18(sp) | *(var_18h) = gp;
0x000082a4 sw ra, 0x44(sp) | *(var_44h) = ra;
0x000082a8 sw fp, 0x40(sp) | *(var_40h) = fp;
0x000082ac sw s2, 0x28(sp) | *(var_28h) = s2;
0x000082b0 sw s0, 0x20(sp) | *(var_20h) = s0;
0x000082b4 move s7, a0 | s7 = a0;
0x000082b8 move s3, a1 | s3 = a1;
0x000082bc move s1, zero | s1 = 0;
0x000082c0 addiu s6, zero, 0x10 | s6 = 0x10;
| /* str._s:_x */
0x000082c4 addiu s4, s4, -0x2870 | s4 += -0x2870;
| /* esilref: '&x' */
0x000082c8 addiu s5, s5, 0x1404 | s5 += 0x1404;
| do {
0x000082cc slti s2, s7, 0x11 | s2 = (s7 < 0x11) ? 1 : 0;
0x000082d0 move v0, s6 | v0 = s6;
| if (s2 == 0) {
0x000082d4 movn v0, s7, s2 | v0 = s7;
| }
0x000082d8 move s2, v0 | s2 = v0;
0x000082dc ori s0, zero, 0xffff | s0 = 0xffff;
0x000082e0 subu v0, s6, v0 | __asm ("subu v0, s6, v0");
0x000082e4 sllv s0, s0, v0 | s0 <<= v0;
0x000082e8 andi s0, s0, 0xffff | s0 &= 0xffff;
| if (s1 != 0) {
0x000082ec bnez s1, 0x8350 | goto label_1;
| }
0x000082f0 lw t9, -0x7b4c(gp) | t9 = sym.imp.__sprintf_chk
0x000082f4 sw s0, 0x10(sp) | *(var_10h) = s0;
0x000082f8 move a3, s5 | a3 = s5;
0x000082fc addiu a2, zero, -1 | a2 = -1;
0x00008300 addiu a1, zero, 1 | a1 = 1;
0x00008304 move a0, s3 | a0 = s3;
0x00008308 jalr t9 | t9 ();
0x0000830c lw gp, 0x18(sp) | gp = *(var_18h);
| label_0:
0x00008310 addiu s1, s1, 1 | s1++;
0x00008314 addiu v0, zero, 8 | v0 = 8;
0x00008318 subu s7, s7, s2 | __asm ("subu s7, s7, s2");
0x0000831c bne s1, v0, 0x82cc |
| } while (s1 != v0);
0x00008320 lw ra, 0x44(sp) | ra = *(var_44h);
0x00008324 lw fp, 0x40(sp) | fp = *(var_40h);
0x00008328 lw s7, 0x3c(sp) | s7 = *(var_3ch);
0x0000832c lw s6, 0x38(sp) | s6 = *(var_38h);
0x00008330 lw s5, 0x34(sp) | s5 = *(var_34h);
0x00008334 lw s4, 0x30(sp) | s4 = *(var_30h);
0x00008338 lw s3, 0x2c(sp) | s3 = *(var_2ch);
0x0000833c lw s2, 0x28(sp) | s2 = *(var_28h);
0x00008340 lw s1, 0x24(sp) | s1 = *(var_24h);
0x00008344 lw s0, 0x20(sp) | s0 = *(var_20h);
0x00008348 addiu sp, sp, 0x48 |
0x0000834c jr ra | return v0;
| label_1:
0x00008350 lw t9, -0x7a40(gp) | t9 = sym.imp.strdup;
0x00008354 move a0, s3 | a0 = s3;
0x00008358 jalr t9 | t9 ();
0x0000835c lw gp, 0x18(sp) | gp = *(var_18h);
0x00008360 move a3, s4 | a3 = s4;
0x00008364 addiu a2, zero, -1 | a2 = -1;
0x00008368 lw t9, -0x7b4c(gp) | t9 = sym.imp.__sprintf_chk
0x0000836c addiu a1, zero, 1 | a1 = 1;
0x00008370 move a0, s3 | a0 = s3;
0x00008374 sw s0, 0x14(sp) | *(var_14h) = s0;
0x00008378 sw v0, 0x10(sp) | *(var_10h) = v0;
0x0000837c move fp, v0 | fp = v0;
0x00008380 jalr t9 | t9 ();
0x00008384 lw gp, 0x18(sp) | gp = *(var_18h);
0x00008388 lw t9, -0x7a3c(gp) | t9 = sym.imp.free;
0x0000838c move a0, fp | a0 = fp;
0x00008390 jalr t9 | t9 ();
0x00008394 lw gp, 0x18(sp) | gp = *(var_18h);
0x00008398 b 0x8310 | goto label_0;
| }
[*] Function sprintf used 3 times mDNSResponderPosix
