[*] Binary protection state of lttng-consumerd

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function mmap tear down of lttng-consumerd

bl sym.lttng_consumer_on_read_subbuffer_mmap
ldrd r2, r3, [r6, 0xb8]
add r7, pc
mov r5, r0
cmp.w r3, -1
it eq
cmpeq r2, -1
beq 0x1a3ae
ldr r3, [r4, 8]
cmp r3, r0
beq 0x1a36e
ldr r3, [0x0001a478]
ldr r6, [r7, r3]
ldr r3, [r6]
cmp r3, 0
bne 0x1a36e
ldr r3, [0x0001a47c]
ldr.w r8, [r7, r3]
ldr.w r3, [r8]
cmp r3, 0
bne.w 0x1a454
--
bl sym.kernctl_get_mmap_read_offset
subs r4, r0, 0
blt 0x1f6ee
ldr r3, [sp, 0x14]
add r3, r7
str r3, [r6]
ldr r2, [0x0001f784]
ldr r3, [0x0001f77c]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xfc]
eors r2, r3
mov.w r3, 0
bne 0x1f76e
mov r0, r4
add sp, 0x100
pop.w {r4, r5, r6, r7, r8, pc}
blx 0x7f8c
movs r2, 0xc8
ldr r0, [r0]
--
bl sym.lttng_consumer_on_read_subbuffer_mmap
ldrd r3, r2, [sp, 0x5c]
cmp.w r2, -1
it eq
cmpeq r3, -1
beq.w 0x21c2c
ldr.w r2, [r8]
cmp r0, r2
beq 0x2128a
ldr r1, [0x000212f4]
ldr r1, [r4, r1]
ldr r1, [r1]
cbnz r1, 0x21286
ldr r1, [0x00021300]
mov r3, r0
ldr r1, [r4, r1]
str r2, [sp]
ldr r2, [0x00021314]
ldr r0, [r1]
movs r1, 1
add r2, pc
--
bl sym.kernctl_get_mmap_len
mov r5, r0
cmp r0, 0
bne.w 0x231d8
ldr r1, [sp, 0x14]
mov r2, r7
vmov.i32 d16, 0
str.w r1, [r4, 0xb0]
vstr d16, [sp, 8]
ldr.w r3, [r4, 0xb4]
str r3, [sp]
movs r3, 2
blx 0x7c1c
str.w r0, [r4, 0xac]
adds r0, 1
bne.w 0x22e26
blx 0x7f8c
movs r2, 0xc8
ldr r0, [r0]
add r1, sp, 0x34
blx 0x7740
--
blx sym.imp.mmap64
cbz r0, 0x29c28
ldrb.w r3, [r4, 0x2b1]
bfc r3, 0, 1
strb.w r3, [r4, 0x2b1]
movs r4, 0
mov r0, r4
pop {r4, r5, r6, pc}
mov r0, r6
blx 0x7f34
cmp r0, 0
bne 0x29cac
ldrb.w r3, [r4, 0x2b1]
ldr.w r2, [r4, 0x218]
orr r3, r3, 1
strb.w r3, [r4, 0x2b1]
cmp r2, 0
beq 0x29c22
ldr.w r3, [r4, 0x80]
cmp r3, 0
bne 0x29c22
--
blx sym.imp.mmap64
cmn.w r0, 0xb
it eq
moveq r0, 1
beq 0x29df0
cbz r0, 0x29df2
cmn.w r0, 0x3d
ite eq
moveq r0, 1
movne r0, 2
pop {r3, r4, r5, pc}
mov r1, r5
mov r0, r4
bl 0x29d34
subs r0, 0
it ne
movne r0, 1
lsls r0, r0, 1
pop {r3, r4, r5, pc}
push {r3, lr}
ldr.w r0, [r0, 0x204]
--
blx sym.imp.mmap64
cbz r0, 0x2bdda
adds r0, 0xb
bne.w 0x2bede
mov r0, r4
bl 0x2a620
adds.w r3, r0, 0x69
it ne
movne r3, 1
ands.w r3, r3, r0, lsr 31
bne.w 0x2bede
cmp r0, 0
bne 0x2bd92
movs r0, 1
ldr r2, [0x0002bffc]
ldr r3, [0x0002bff4]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xfc]
eors r2, r3
--
blx sym.imp.mmap64
cbz r0, 0x2ccf0
movs r0, 0
ldr r2, [0x0002cdb8]
ldr r3, [0x0002cd88]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x44]
eors r2, r3
mov.w r3, 0
bne 0x2cd46
add sp, 0x4c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr.w r0, [sb, 0x204]
blx 0x7f34
cbnz r0, 0x2cd62
movs r0, 1
b 0x2ccd6
ldr r3, [0x0002cdbc]
movw r2, 0xc5d
--
bl sym.lttng_consumer_on_read_subbuffer_mmap
ldrd r3, r2, [sp, 0x5c]
cmp.w r2, -1
it eq
cmpeq r3, -1
beq.w 0x30398
ldr r3, [r7]
cmp r0, r3
bne.w 0x303a0
ldr.w r0, [r6, 0x204]
blx 0x7f34
cmp r0, 0
blt.w 0x30d32
sub.w r2, r4, 0x2ec
ldr.w r3, [r6, 0xa8]
ldr r1, [r2]
add r3, r1
str r3, [r2]
sub.w r2, r4, 0x2e8
ldr r2, [r2]
subs r3, r3, r2

[*] Function mmap used 9 times lttng-consumerd