[*] Binary protection state of ntpd
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of ntpd
51088: ebff0dd3 bl 147dc <emcpy@plt>
5108c: e1a00004 mov r0, r4
51090: e48052fc str r5, [r0], #764 ; 0x2fc
51094: e3a02004 mov r2, #4
51098: e59f1014 ldr r1, [pc, #20] ; 510b4 <setlogmask@plt+0x3bb58>
5109c: ebff0dce bl 147dc <emcpy@plt>
510a0: e3a00001 mov r0, #1
510a4: e8bd8070 pop {r4, r5, r6, pc}
510a8: e1a00005 mov r0, r5
510ac: e8bd8070 pop {r4, r5, r6, pc}
510b0: 00084428 andeq r4, r8, r8, lsr #8
510b4: 0008308f andeq r3, r8, pc, lsl #1
510b8: e92d4ff0 push {r4, r5, r6, r7, r8, r9, sl, fp, lr}
510bc: e59f28e4 ldr r2, [pc, #2276] ; 519a8 <setlogmask@plt+0x3c44c>
510c0: e28db020 add fp, sp, #32
510c4: e24dd0dc sub sp, sp, #220 ; 0xdc
510c8: e1a0a001 mov sl, r1
510cc: e5d13059 ldrb r3, [r1, #89] ; 0x59
510d0: e24b0064 sub r0, fp, #100 ; 0x64
510d4: e59f18d0 ldr r1, [pc, #2256] ; 519ac <setlogmask@plt+0x3c450>
510d8: ebff1026 bl 15178 <sprintf@plt>
510dc: e5da1059 ldrb r1, [sl, #89] ; 0x59
510e0: e59f08c8 ldr r0, [pc, #2248] ; 519b0 <setlogmask@plt+0x3c454>
--
513f0: e2e77000 rsc r7, r7, #0
513f4: e51b2030 ldr r2, [fp, #-48] ; 0xffffffd0
513f8: e59f35e0 ldr r3, [pc, #1504] ; 519e0 <setlogmask@plt+0x3c484>
513fc: e14b0ed4 ldrd r0, [fp, #-228] ; 0xffffff1c
51400: e0823003 add r3, r2, r3
51404: e0833007 add r3, r3, r7
51408: e58430e8 str r3, [r4, #232] ; 0xe8
5140c: e5943308 ldr r3, [r4, #776] ; 0x308
51410: e58460ec str r6, [r4, #236] ; 0xec
51414: e2833001 add r3, r3, #1
51418: e5843308 str r3, [r4, #776] ; 0x308
5141c: e1cd00f8 strd r0, [sp, #8]
51420: e55b103b ldrb r1, [fp, #-59] ; 0xffffffc5
51424: e2843038 add r3, r4, #56 ; 0x38
51428: e15b23b8 ldrh r2, [fp, #-56] ; 0xffffffc8
5142c: e50b30ec str r3, [fp, #-236] ; 0xffffff14
51430: e58d1000 str r1, [sp]
51434: e55b303a ldrb r3, [fp, #-58] ; 0xffffffc6
51438: e59f15a4 ldr r1, [pc, #1444] ; 519e4 <setlogmask@plt+0x3c488>
5143c: e2840038 add r0, r4, #56 ; 0x38
51440: ebff0f4c bl 15178 <sprintf@plt>
51444: e2840038 add r0, r4, #56 ; 0x38
51448: ebff0d8e bl 14a88 <strlen@plt>
--
69ea0: e3a00020 mov r0, #32
69ea4: ebfeabea bl 14e54 <fputc@plt>
69ea8: eaffffd7 b 69e0c <setlogmask@plt+0x548b0>
69eac: e3a00020 mov r0, #32
69eb0: ebfeabe7 bl 14e54 <fputc@plt>
69eb4: eaffffe3 b 69e48 <setlogmask@plt+0x548ec>
69eb8: e3a0000a mov r0, #10
69ebc: ebfeab5a bl 14c2c <__fputc_unlocked@plt>
69ec0: eaffffa6 b 69d60 <setlogmask@plt+0x54804>
69ec4: e3a0000a mov r0, #10
69ec8: ebfeabe1 bl 14e54 <fputc@plt>
69ecc: eaffffa3 b 69d60 <setlogmask@plt+0x54804>
69ed0: e59f30e4 ldr r3, [pc, #228] ; 69fbc <setlogmask@plt+0x54a60>
69ed4: e1a02007 mov r2, r7
69ed8: e79a3003 ldr r3, [sl, r3]
69edc: e28da020 add sl, sp, #32
69ee0: e2831f4d add r1, r3, #308 ; 0x134
69ee4: e2811002 add r1, r1, #2
69ee8: e1a0000a mov r0, sl
69eec: e58d3010 str r3, [sp, #16]
69ef0: ebfeaca0 bl 15178 <sprintf@plt>
69ef4: e1a01007 mov r1, r7
69ef8: e3a0004e mov r0, #78 ; 0x4e
--
6c63c: e1a00007 mov r0, r7
6c640: ebfea2a5 bl 150dc <fprintf@plt>
6c644: e3560000 cmp r6, #0
6c648: 11a00005 movne r0, r5
6c64c: 0affffa0 beq 6c4d4 <setlogmask@plt+0x56f78>
6c650: ebfea346 bl 15370 <free@plt>
6c654: eaffff9e b 6c4d4 <setlogmask@plt+0x56f78>
6c658: ebfea10a bl 14a88 <strlen@plt>
6c65c: e1a04000 mov r4, r0
6c660: e1a00006 mov r0, r6
6c664: ebfea107 bl 14a88 <strlen@plt>
6c668: e0840000 add r0, r4, r0
6c66c: e2800002 add r0, r0, #2
6c670: ebfff9e1 bl 6adfc <setlogmask@plt+0x558a0>
6c674: e2505000 subs r5, r0, #0
6c678: 0affff95 beq 6c4d4 <setlogmask@plt+0x56f78>
6c67c: e59f11e0 ldr r1, [pc, #480] ; 6c864 <setlogmask@plt+0x57308>
6c680: e1a03006 mov r3, r6
6c684: e1a0200b mov r2, fp
6c688: e08f1001 add r1, pc, r1
6c68c: ebfea2b9 bl 15178 <sprintf@plt>
6c690: e3a06001 mov r6, #1
6c694: eaffffcc b 6c5cc <setlogmask@plt+0x57070>
--
6f554: e1550002 cmp r5, r2
6f558: 0affff93 beq 6f3ac <setlogmask@plt+0x59e50>
6f55c: e5c20000 strb r0, [r2]
6f560: e1a00005 mov r0, r5
6f564: ebfe9481 bl 14770 <getenv@plt>
6f568: e2508000 subs r8, r0, #0
6f56c: 0affff8e beq 6f3ac <setlogmask@plt+0x59e50>
6f570: ebfe9544 bl 14a88 <strlen@plt>
6f574: e1a07000 mov r7, r0
6f578: e1a00004 mov r0, r4
6f57c: ebfe9541 bl 14a88 <strlen@plt>
6f580: e0870000 add r0, r7, r0
6f584: e2800001 add r0, r0, #1
6f588: e1560000 cmp r6, r0
6f58c: 9affff86 bls 6f3ac <setlogmask@plt+0x59e50>
6f590: e59f1044 ldr r1, [pc, #68] ; 6f5dc <setlogmask@plt+0x5a080>
6f594: e1a03004 mov r3, r4
6f598: e1a02008 mov r2, r8
6f59c: e08f1001 add r1, pc, r1
6f5a0: e1a00005 mov r0, r5
6f5a4: ebfe96f3 bl 15178 <sprintf@plt>
6f5a8: eaffffcf b 6f4ec <setlogmask@plt+0x59f90>
6f5ac: e2802001 add r2, r0, #1
--
6fbe4: eaffffbe b 6fae4 <setlogmask@plt+0x5a588>
6fbe8: e5445002 strb r5, [r4, #-2]
6fbec: e5441001 strb r1, [r4, #-1]
6fbf0: eaffffd6 b 6fb50 <setlogmask@plt+0x5a5f4>
6fbf4: e3a0205c mov r2, #92 ; 0x5c
6fbf8: e1a04003 mov r4, r3
6fbfc: e4c42002 strb r2, [r4], #2
6fc00: e3a0206e mov r2, #110 ; 0x6e
6fc04: e5c32001 strb r2, [r3, #1]
6fc08: e3a03022 mov r3, #34 ; 0x22
6fc0c: e5c43000 strb r3, [r4]
6fc10: e3a03000 mov r3, #0
6fc14: e5c43001 strb r3, [r4, #1]
6fc18: e1a0000b mov r0, fp
6fc1c: e8bd8ff8 pop {r3, r4, r5, r6, r7, r8, r9, sl, fp, pc}
6fc20: e59f301c ldr r3, [pc, #28] ; 6fc44 <setlogmask@plt+0x5a6e8>
6fc24: e1a00004 mov r0, r4
6fc28: e7991003 ldr r1, [r9, r3]
6fc2c: e2811f69 add r1, r1, #420 ; 0x1a4
6fc30: e2811002 add r1, r1, #2
6fc34: ebfe954f bl 15178 <sprintf@plt>
6fc38: e2843004 add r3, r4, #4
6fc3c: eaffffa8 b 6fae4 <setlogmask@plt+0x5a588>
--
722ac: e353003e cmp r3, #62 ; 0x3e
722b0: 01a04000 moveq r4, r0
722b4: 1afffff3 bne 72288 <setlogmask@plt+0x5cd2c>
722b8: e3a03000 mov r3, #0
722bc: e5c83000 strb r3, [r8]
722c0: e1a00005 mov r0, r5
722c4: ebfe89ef bl 14a88 <strlen@plt>
722c8: e28d3078 add r3, sp, #120 ; 0x78
722cc: e58d301c str r3, [sp, #28]
722d0: e2847001 add r7, r4, #1
722d4: e59d9034 ldr r9, [sp, #52] ; 0x34
722d8: e2800004 add r0, r0, #4
722dc: e350003f cmp r0, #63 ; 0x3f
722e0: 959db01c ldrls fp, [sp, #28]
722e4: 9a000001 bls 722f0 <setlogmask@plt+0x5cd94>
722e8: ebffe2c3 bl 6adfc <setlogmask@plt+0x558a0>
722ec: e1a0b000 mov fp, r0
722f0: e1a02005 mov r2, r5
722f4: e59d1014 ldr r1, [sp, #20]
722f8: e1a0000b mov r0, fp
722fc: ebfe8b9d bl 15178 <sprintf@plt>
72300: e3a03020 mov r3, #32
72304: e5c43001 strb r3, [r4, #1]
--
7269c: e1a02000 mov r2, r0
726a0: e1a04000 mov r4, r0
726a4: e2850001 add r0, r5, #1
726a8: ebfe88cc bl 149e0 <strncmp@plt>
726ac: e3500000 cmp r0, #0
726b0: 1a000006 bne 726d0 <setlogmask@plt+0x5d174>
726b4: e0853004 add r3, r5, r4
726b8: e5d33001 ldrb r3, [r3, #1]
726bc: e353005d cmp r3, #93 ; 0x5d
726c0: 02840002 addeq r0, r4, #2
726c4: 03a0100a moveq r1, #10
726c8: 00850000 addeq r0, r5, r0
726cc: 0a00000d beq 72708 <setlogmask@plt+0x5d1ac>
726d0: e3540010 cmp r4, #16
726d4: 8afffebe bhi 721d4 <setlogmask@plt+0x5cc78>
726d8: e59f1060 ldr r1, [pc, #96] ; 72740 <setlogmask@plt+0x5d1e4>
726dc: e28d4078 add r4, sp, #120 ; 0x78
726e0: e1a02007 mov r2, r7
726e4: e08f1001 add r1, pc, r1
726e8: e1a00004 mov r0, r4
726ec: ebfe8aa1 bl 15178 <sprintf@plt>
726f0: e1a01004 mov r1, r4
726f4: e1a00005 mov r0, r5
--
739dc: e3570000 cmp r7, #0
739e0: e594000c ldr r0, [r4, #12]
739e4: 0a000001 beq 739f0 <setlogmask@plt+0x5e494>
739e8: e3100901 tst r0, #16384 ; 0x4000
739ec: 1a0000d5 bne 73d48 <setlogmask@plt+0x5e7ec>
739f0: e3a03000 mov r3, #0
739f4: e28d1018 add r1, sp, #24
739f8: e5213018 str r3, [r1, #-24]! ; 0xffffffe8
739fc: e59f347c ldr r3, [pc, #1148] ; 73e80 <setlogmask@plt+0x5e924>
73a00: e3100a01 tst r0, #4096 ; 0x1000
73a04: e796a003 ldr sl, [r6, r3]
73a08: 0a0000a2 beq 73c98 <setlogmask@plt+0x5e73c>
73a0c: ebffdaf3 bl 6a5e0 <setlogmask@plt+0x55084>
73a10: e28a1021 add r1, sl, #33 ; 0x21
73a14: e1a02000 mov r2, r0
73a18: e1a09000 mov r9, r0
73a1c: e59f0460 ldr r0, [pc, #1120] ; 73e84 <setlogmask@plt+0x5e928>
73a20: e08f0000 add r0, pc, r0
73a24: e2800f43 add r0, r0, #268 ; 0x10c
73a28: e2800001 add r0, r0, #1
73a2c: ebfe85d1 bl 15178 <sprintf@plt>
73a30: e5951000 ldr r1, [r5]
73a34: e5913034 ldr r3, [r1, #52] ; 0x34
--
73c68: e15c0002 cmp ip, r2
73c6c: e594001c ldr r0, [r4, #28]
73c70: e59310e4 ldr r1, [r3, #228] ; 0xe4
73c74: 1affff4f bne 739b8 <setlogmask@plt+0x5e45c>
73c78: e59320e0 ldr r2, [r3, #224] ; 0xe0
73c7c: eaffff4e b 739bc <setlogmask@plt+0x5e460>
73c80: e3a0000a mov r0, #10
73c84: ebfe83e8 bl 14c2c <__fputc_unlocked@plt>
73c88: eaffff74 b 73a60 <setlogmask@plt+0x5e504>
73c8c: e3a0000a mov r0, #10
73c90: ebfe846f bl 14e54 <fputc@plt>
73c94: eaffff71 b 73a60 <setlogmask@plt+0x5e504>
73c98: ebffda9c bl 6a710 <setlogmask@plt+0x551b4>
73c9c: e28a1021 add r1, sl, #33 ; 0x21
73ca0: e1a02000 mov r2, r0
73ca4: e1a09000 mov r9, r0
73ca8: e59f01e0 ldr r0, [pc, #480] ; 73e90 <setlogmask@plt+0x5e934>
73cac: e08f0000 add r0, pc, r0
73cb0: e2800f43 add r0, r0, #268 ; 0x10c
73cb4: e2800001 add r0, r0, #1
73cb8: ebfe852e bl 15178 <sprintf@plt>
73cbc: e3580000 cmp r8, #0
73cc0: 1a000003 bne 73cd4 <setlogmask@plt+0x5e778>
[*] Function sprintf used 10 times ntpd