[*] Binary protection state of ntpd

  
  	Partial RELRO  No Canary found   NX disabled  No PIE       No RPATH     No RUNPATH   No Symbols


[*] Function sprintf tear down of ntpd

   51088:	ebff0dd3 	bl	147dc <emcpy@plt>
   5108c:	e1a00004 	mov	r0, r4
   51090:	e48052fc 	str	r5, [r0], #764	; 0x2fc
   51094:	e3a02004 	mov	r2, #4
   51098:	e59f1014 	ldr	r1, [pc, #20]	; 510b4 <setlogmask@plt+0x3bb58>
   5109c:	ebff0dce 	bl	147dc <emcpy@plt>
   510a0:	e3a00001 	mov	r0, #1
   510a4:	e8bd8070 	pop	{r4, r5, r6, pc}
   510a8:	e1a00005 	mov	r0, r5
   510ac:	e8bd8070 	pop	{r4, r5, r6, pc}
   510b0:	00084428 	andeq	r4, r8, r8, lsr #8
   510b4:	0008308f 	andeq	r3, r8, pc, lsl #1
   510b8:	e92d4ff0 	push	{r4, r5, r6, r7, r8, r9, sl, fp, lr}
   510bc:	e59f28e4 	ldr	r2, [pc, #2276]	; 519a8 <setlogmask@plt+0x3c44c>
   510c0:	e28db020 	add	fp, sp, #32
   510c4:	e24dd0dc 	sub	sp, sp, #220	; 0xdc
   510c8:	e1a0a001 	mov	sl, r1
   510cc:	e5d13059 	ldrb	r3, [r1, #89]	; 0x59
   510d0:	e24b0064 	sub	r0, fp, #100	; 0x64
   510d4:	e59f18d0 	ldr	r1, [pc, #2256]	; 519ac <setlogmask@plt+0x3c450>
   510d8:	ebff1026 	bl	15178 <sprintf@plt>
   510dc:	e5da1059 	ldrb	r1, [sl, #89]	; 0x59
   510e0:	e59f08c8 	ldr	r0, [pc, #2248]	; 519b0 <setlogmask@plt+0x3c454>
--
   513f0:	e2e77000 	rsc	r7, r7, #0
   513f4:	e51b2030 	ldr	r2, [fp, #-48]	; 0xffffffd0
   513f8:	e59f35e0 	ldr	r3, [pc, #1504]	; 519e0 <setlogmask@plt+0x3c484>
   513fc:	e14b0ed4 	ldrd	r0, [fp, #-228]	; 0xffffff1c
   51400:	e0823003 	add	r3, r2, r3
   51404:	e0833007 	add	r3, r3, r7
   51408:	e58430e8 	str	r3, [r4, #232]	; 0xe8
   5140c:	e5943308 	ldr	r3, [r4, #776]	; 0x308
   51410:	e58460ec 	str	r6, [r4, #236]	; 0xec
   51414:	e2833001 	add	r3, r3, #1
   51418:	e5843308 	str	r3, [r4, #776]	; 0x308
   5141c:	e1cd00f8 	strd	r0, [sp, #8]
   51420:	e55b103b 	ldrb	r1, [fp, #-59]	; 0xffffffc5
   51424:	e2843038 	add	r3, r4, #56	; 0x38
   51428:	e15b23b8 	ldrh	r2, [fp, #-56]	; 0xffffffc8
   5142c:	e50b30ec 	str	r3, [fp, #-236]	; 0xffffff14
   51430:	e58d1000 	str	r1, [sp]
   51434:	e55b303a 	ldrb	r3, [fp, #-58]	; 0xffffffc6
   51438:	e59f15a4 	ldr	r1, [pc, #1444]	; 519e4 <setlogmask@plt+0x3c488>
   5143c:	e2840038 	add	r0, r4, #56	; 0x38
   51440:	ebff0f4c 	bl	15178 <sprintf@plt>
   51444:	e2840038 	add	r0, r4, #56	; 0x38
   51448:	ebff0d8e 	bl	14a88 <strlen@plt>
--
   69ea0:	e3a00020 	mov	r0, #32
   69ea4:	ebfeabea 	bl	14e54 <fputc@plt>
   69ea8:	eaffffd7 	b	69e0c <setlogmask@plt+0x548b0>
   69eac:	e3a00020 	mov	r0, #32
   69eb0:	ebfeabe7 	bl	14e54 <fputc@plt>
   69eb4:	eaffffe3 	b	69e48 <setlogmask@plt+0x548ec>
   69eb8:	e3a0000a 	mov	r0, #10
   69ebc:	ebfeab5a 	bl	14c2c <__fputc_unlocked@plt>
   69ec0:	eaffffa6 	b	69d60 <setlogmask@plt+0x54804>
   69ec4:	e3a0000a 	mov	r0, #10
   69ec8:	ebfeabe1 	bl	14e54 <fputc@plt>
   69ecc:	eaffffa3 	b	69d60 <setlogmask@plt+0x54804>
   69ed0:	e59f30e4 	ldr	r3, [pc, #228]	; 69fbc <setlogmask@plt+0x54a60>
   69ed4:	e1a02007 	mov	r2, r7
   69ed8:	e79a3003 	ldr	r3, [sl, r3]
   69edc:	e28da020 	add	sl, sp, #32
   69ee0:	e2831f4d 	add	r1, r3, #308	; 0x134
   69ee4:	e2811002 	add	r1, r1, #2
   69ee8:	e1a0000a 	mov	r0, sl
   69eec:	e58d3010 	str	r3, [sp, #16]
   69ef0:	ebfeaca0 	bl	15178 <sprintf@plt>
   69ef4:	e1a01007 	mov	r1, r7
   69ef8:	e3a0004e 	mov	r0, #78	; 0x4e
--
   6c63c:	e1a00007 	mov	r0, r7
   6c640:	ebfea2a5 	bl	150dc <fprintf@plt>
   6c644:	e3560000 	cmp	r6, #0
   6c648:	11a00005 	movne	r0, r5
   6c64c:	0affffa0 	beq	6c4d4 <setlogmask@plt+0x56f78>
   6c650:	ebfea346 	bl	15370 <free@plt>
   6c654:	eaffff9e 	b	6c4d4 <setlogmask@plt+0x56f78>
   6c658:	ebfea10a 	bl	14a88 <strlen@plt>
   6c65c:	e1a04000 	mov	r4, r0
   6c660:	e1a00006 	mov	r0, r6
   6c664:	ebfea107 	bl	14a88 <strlen@plt>
   6c668:	e0840000 	add	r0, r4, r0
   6c66c:	e2800002 	add	r0, r0, #2
   6c670:	ebfff9e1 	bl	6adfc <setlogmask@plt+0x558a0>
   6c674:	e2505000 	subs	r5, r0, #0
   6c678:	0affff95 	beq	6c4d4 <setlogmask@plt+0x56f78>
   6c67c:	e59f11e0 	ldr	r1, [pc, #480]	; 6c864 <setlogmask@plt+0x57308>
   6c680:	e1a03006 	mov	r3, r6
   6c684:	e1a0200b 	mov	r2, fp
   6c688:	e08f1001 	add	r1, pc, r1
   6c68c:	ebfea2b9 	bl	15178 <sprintf@plt>
   6c690:	e3a06001 	mov	r6, #1
   6c694:	eaffffcc 	b	6c5cc <setlogmask@plt+0x57070>
--
   6f554:	e1550002 	cmp	r5, r2
   6f558:	0affff93 	beq	6f3ac <setlogmask@plt+0x59e50>
   6f55c:	e5c20000 	strb	r0, [r2]
   6f560:	e1a00005 	mov	r0, r5
   6f564:	ebfe9481 	bl	14770 <getenv@plt>
   6f568:	e2508000 	subs	r8, r0, #0
   6f56c:	0affff8e 	beq	6f3ac <setlogmask@plt+0x59e50>
   6f570:	ebfe9544 	bl	14a88 <strlen@plt>
   6f574:	e1a07000 	mov	r7, r0
   6f578:	e1a00004 	mov	r0, r4
   6f57c:	ebfe9541 	bl	14a88 <strlen@plt>
   6f580:	e0870000 	add	r0, r7, r0
   6f584:	e2800001 	add	r0, r0, #1
   6f588:	e1560000 	cmp	r6, r0
   6f58c:	9affff86 	bls	6f3ac <setlogmask@plt+0x59e50>
   6f590:	e59f1044 	ldr	r1, [pc, #68]	; 6f5dc <setlogmask@plt+0x5a080>
   6f594:	e1a03004 	mov	r3, r4
   6f598:	e1a02008 	mov	r2, r8
   6f59c:	e08f1001 	add	r1, pc, r1
   6f5a0:	e1a00005 	mov	r0, r5
   6f5a4:	ebfe96f3 	bl	15178 <sprintf@plt>
   6f5a8:	eaffffcf 	b	6f4ec <setlogmask@plt+0x59f90>
   6f5ac:	e2802001 	add	r2, r0, #1
--
   6fbe4:	eaffffbe 	b	6fae4 <setlogmask@plt+0x5a588>
   6fbe8:	e5445002 	strb	r5, [r4, #-2]
   6fbec:	e5441001 	strb	r1, [r4, #-1]
   6fbf0:	eaffffd6 	b	6fb50 <setlogmask@plt+0x5a5f4>
   6fbf4:	e3a0205c 	mov	r2, #92	; 0x5c
   6fbf8:	e1a04003 	mov	r4, r3
   6fbfc:	e4c42002 	strb	r2, [r4], #2
   6fc00:	e3a0206e 	mov	r2, #110	; 0x6e
   6fc04:	e5c32001 	strb	r2, [r3, #1]
   6fc08:	e3a03022 	mov	r3, #34	; 0x22
   6fc0c:	e5c43000 	strb	r3, [r4]
   6fc10:	e3a03000 	mov	r3, #0
   6fc14:	e5c43001 	strb	r3, [r4, #1]
   6fc18:	e1a0000b 	mov	r0, fp
   6fc1c:	e8bd8ff8 	pop	{r3, r4, r5, r6, r7, r8, r9, sl, fp, pc}
   6fc20:	e59f301c 	ldr	r3, [pc, #28]	; 6fc44 <setlogmask@plt+0x5a6e8>
   6fc24:	e1a00004 	mov	r0, r4
   6fc28:	e7991003 	ldr	r1, [r9, r3]
   6fc2c:	e2811f69 	add	r1, r1, #420	; 0x1a4
   6fc30:	e2811002 	add	r1, r1, #2
   6fc34:	ebfe954f 	bl	15178 <sprintf@plt>
   6fc38:	e2843004 	add	r3, r4, #4
   6fc3c:	eaffffa8 	b	6fae4 <setlogmask@plt+0x5a588>
--
   722ac:	e353003e 	cmp	r3, #62	; 0x3e
   722b0:	01a04000 	moveq	r4, r0
   722b4:	1afffff3 	bne	72288 <setlogmask@plt+0x5cd2c>
   722b8:	e3a03000 	mov	r3, #0
   722bc:	e5c83000 	strb	r3, [r8]
   722c0:	e1a00005 	mov	r0, r5
   722c4:	ebfe89ef 	bl	14a88 <strlen@plt>
   722c8:	e28d3078 	add	r3, sp, #120	; 0x78
   722cc:	e58d301c 	str	r3, [sp, #28]
   722d0:	e2847001 	add	r7, r4, #1
   722d4:	e59d9034 	ldr	r9, [sp, #52]	; 0x34
   722d8:	e2800004 	add	r0, r0, #4
   722dc:	e350003f 	cmp	r0, #63	; 0x3f
   722e0:	959db01c 	ldrls	fp, [sp, #28]
   722e4:	9a000001 	bls	722f0 <setlogmask@plt+0x5cd94>
   722e8:	ebffe2c3 	bl	6adfc <setlogmask@plt+0x558a0>
   722ec:	e1a0b000 	mov	fp, r0
   722f0:	e1a02005 	mov	r2, r5
   722f4:	e59d1014 	ldr	r1, [sp, #20]
   722f8:	e1a0000b 	mov	r0, fp
   722fc:	ebfe8b9d 	bl	15178 <sprintf@plt>
   72300:	e3a03020 	mov	r3, #32
   72304:	e5c43001 	strb	r3, [r4, #1]
--
   7269c:	e1a02000 	mov	r2, r0
   726a0:	e1a04000 	mov	r4, r0
   726a4:	e2850001 	add	r0, r5, #1
   726a8:	ebfe88cc 	bl	149e0 <strncmp@plt>
   726ac:	e3500000 	cmp	r0, #0
   726b0:	1a000006 	bne	726d0 <setlogmask@plt+0x5d174>
   726b4:	e0853004 	add	r3, r5, r4
   726b8:	e5d33001 	ldrb	r3, [r3, #1]
   726bc:	e353005d 	cmp	r3, #93	; 0x5d
   726c0:	02840002 	addeq	r0, r4, #2
   726c4:	03a0100a 	moveq	r1, #10
   726c8:	00850000 	addeq	r0, r5, r0
   726cc:	0a00000d 	beq	72708 <setlogmask@plt+0x5d1ac>
   726d0:	e3540010 	cmp	r4, #16
   726d4:	8afffebe 	bhi	721d4 <setlogmask@plt+0x5cc78>
   726d8:	e59f1060 	ldr	r1, [pc, #96]	; 72740 <setlogmask@plt+0x5d1e4>
   726dc:	e28d4078 	add	r4, sp, #120	; 0x78
   726e0:	e1a02007 	mov	r2, r7
   726e4:	e08f1001 	add	r1, pc, r1
   726e8:	e1a00004 	mov	r0, r4
   726ec:	ebfe8aa1 	bl	15178 <sprintf@plt>
   726f0:	e1a01004 	mov	r1, r4
   726f4:	e1a00005 	mov	r0, r5
--
   739dc:	e3570000 	cmp	r7, #0
   739e0:	e594000c 	ldr	r0, [r4, #12]
   739e4:	0a000001 	beq	739f0 <setlogmask@plt+0x5e494>
   739e8:	e3100901 	tst	r0, #16384	; 0x4000
   739ec:	1a0000d5 	bne	73d48 <setlogmask@plt+0x5e7ec>
   739f0:	e3a03000 	mov	r3, #0
   739f4:	e28d1018 	add	r1, sp, #24
   739f8:	e5213018 	str	r3, [r1, #-24]!	; 0xffffffe8
   739fc:	e59f347c 	ldr	r3, [pc, #1148]	; 73e80 <setlogmask@plt+0x5e924>
   73a00:	e3100a01 	tst	r0, #4096	; 0x1000
   73a04:	e796a003 	ldr	sl, [r6, r3]
   73a08:	0a0000a2 	beq	73c98 <setlogmask@plt+0x5e73c>
   73a0c:	ebffdaf3 	bl	6a5e0 <setlogmask@plt+0x55084>
   73a10:	e28a1021 	add	r1, sl, #33	; 0x21
   73a14:	e1a02000 	mov	r2, r0
   73a18:	e1a09000 	mov	r9, r0
   73a1c:	e59f0460 	ldr	r0, [pc, #1120]	; 73e84 <setlogmask@plt+0x5e928>
   73a20:	e08f0000 	add	r0, pc, r0
   73a24:	e2800f43 	add	r0, r0, #268	; 0x10c
   73a28:	e2800001 	add	r0, r0, #1
   73a2c:	ebfe85d1 	bl	15178 <sprintf@plt>
   73a30:	e5951000 	ldr	r1, [r5]
   73a34:	e5913034 	ldr	r3, [r1, #52]	; 0x34
--
   73c68:	e15c0002 	cmp	ip, r2
   73c6c:	e594001c 	ldr	r0, [r4, #28]
   73c70:	e59310e4 	ldr	r1, [r3, #228]	; 0xe4
   73c74:	1affff4f 	bne	739b8 <setlogmask@plt+0x5e45c>
   73c78:	e59320e0 	ldr	r2, [r3, #224]	; 0xe0
   73c7c:	eaffff4e 	b	739bc <setlogmask@plt+0x5e460>
   73c80:	e3a0000a 	mov	r0, #10
   73c84:	ebfe83e8 	bl	14c2c <__fputc_unlocked@plt>
   73c88:	eaffff74 	b	73a60 <setlogmask@plt+0x5e504>
   73c8c:	e3a0000a 	mov	r0, #10
   73c90:	ebfe846f 	bl	14e54 <fputc@plt>
   73c94:	eaffff71 	b	73a60 <setlogmask@plt+0x5e504>
   73c98:	ebffda9c 	bl	6a710 <setlogmask@plt+0x551b4>
   73c9c:	e28a1021 	add	r1, sl, #33	; 0x21
   73ca0:	e1a02000 	mov	r2, r0
   73ca4:	e1a09000 	mov	r9, r0
   73ca8:	e59f01e0 	ldr	r0, [pc, #480]	; 73e90 <setlogmask@plt+0x5e934>
   73cac:	e08f0000 	add	r0, pc, r0
   73cb0:	e2800f43 	add	r0, r0, #268	; 0x10c
   73cb4:	e2800001 	add	r0, r0, #1
   73cb8:	ebfe852e 	bl	15178 <sprintf@plt>
   73cbc:	e3580000 	cmp	r8, #0
   73cc0:	1a000003 	bne	73cd4 <setlogmask@plt+0x5e778>


[*] Function sprintf used 10 times ntpd