[*] Binary protection state of ntpq
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of ntpq
147b0: e3560000 cmp r6, #0
147b4: e0851001 add r1, r5, r1
147b8: 1a000024 bne 14850 <setlogmask@plt+0x1d0c>
147bc: e1a03006 mov r3, r6
147c0: e1a02006 mov r2, r6
147c4: e1a00006 mov r0, r6
147c8: eb00588e bl 2aa08 <setlogmask@plt+0x17ec4>
147cc: e5840000 str r0, [r4]
147d0: e5c06000 strb r6, [r0]
147d4: e5945000 ldr r5, [r4]
147d8: e1a00005 mov r0, r5
147dc: ebfff78e bl 1261c <strlen@plt>
147e0: e594c008 ldr ip, [r4, #8]
147e4: e59f1080 ldr r1, [pc, #128] ; 1486c <setlogmask@plt+0x1d28>
147e8: e35c0007 cmp ip, #7
147ec: e1a03007 mov r3, r7
147f0: e59f2078 ldr r2, [pc, #120] ; 14870 <setlogmask@plt+0x1d2c>
147f4: d1a02001 movle r2, r1
147f8: e59f1074 ldr r1, [pc, #116] ; 14874 <setlogmask@plt+0x1d30>
147fc: e0850000 add r0, r5, r0
14800: ebfff85a bl 12970 <sprintf@plt>
14804: e5943008 ldr r3, [r4, #8]
14808: e3530007 cmp r3, #7
--
16f0c: e3500000 cmp r0, #0
16f10: 0a00010d beq 1734c <setlogmask@plt+0x4808>
16f14: e2888001 add r8, r8, #1
16f18: e3580014 cmp r8, #20
16f1c: e59d3004 ldr r3, [sp, #4]
16f20: 1afffff4 bne 16ef8 <setlogmask@plt+0x43b4>
16f24: e59f359c ldr r3, [pc, #1436] ; 174c8 <setlogmask@plt+0x4984>
16f28: e3a02002 mov r2, #2
16f2c: e59f1598 ldr r1, [pc, #1432] ; 174cc <setlogmask@plt+0x4988>
16f30: e59f0598 ldr r0, [pc, #1432] ; 174d0 <setlogmask@plt+0x498c>
16f34: eb006225 bl 2f7d0 <setlogmask@plt+0x1cc8c>
16f38: e3a03000 mov r3, #0
16f3c: e1a02003 mov r2, r3
16f40: e3a01010 mov r1, #16
16f44: e1a00004 mov r0, r4
16f48: eb004eae bl 2aa08 <setlogmask@plt+0x17ec4>
16f4c: e59f3580 ldr r3, [pc, #1408] ; 174d4 <setlogmask@plt+0x4990>
16f50: e59f2580 ldr r2, [pc, #1408] ; 174d8 <setlogmask@plt+0x4994>
16f54: e59f1580 ldr r1, [pc, #1408] ; 174dc <setlogmask@plt+0x4998>
16f58: e1a04000 mov r4, r0
16f5c: ebffee83 bl 12970 <sprintf@plt>
16f60: eaffffdf b 16ee4 <setlogmask@plt+0x43a0>
16f64: e5d83000 ldrb r3, [r8]
--
1d708: e3a00020 mov r0, #32
1d70c: ebffd43a bl 127fc <fputc@plt>
1d710: eaffffd7 b 1d674 <setlogmask@plt+0xab30>
1d714: e3a00020 mov r0, #32
1d718: ebffd437 bl 127fc <fputc@plt>
1d71c: eaffffe3 b 1d6b0 <setlogmask@plt+0xab6c>
1d720: e3a0000a mov r0, #10
1d724: ebffd3e9 bl 126d0 <__fputc_unlocked@plt>
1d728: eaffffa6 b 1d5c8 <setlogmask@plt+0xaa84>
1d72c: e3a0000a mov r0, #10
1d730: ebffd431 bl 127fc <fputc@plt>
1d734: eaffffa3 b 1d5c8 <setlogmask@plt+0xaa84>
1d738: e59f30e4 ldr r3, [pc, #228] ; 1d824 <setlogmask@plt+0xace0>
1d73c: e1a02007 mov r2, r7
1d740: e79a3003 ldr r3, [sl, r3]
1d744: e28da020 add sl, sp, #32
1d748: e2831f4d add r1, r3, #308 ; 0x134
1d74c: e2811002 add r1, r1, #2
1d750: e1a0000a mov r0, sl
1d754: e58d3010 str r3, [sp, #16]
1d758: ebffd484 bl 12970 <sprintf@plt>
1d75c: e1a01007 mov r1, r7
1d760: e3a0004e mov r0, #78 ; 0x4e
--
1fea4: e1a00007 mov r0, r7
1fea8: ebffca98 bl 12910 <fprintf@plt>
1feac: e3560000 cmp r6, #0
1feb0: 11a00005 movne r0, r5
1feb4: 0affffa0 beq 1fd3c <setlogmask@plt+0xd1f8>
1feb8: ebffcae5 bl 12a54 <free@plt>
1febc: eaffff9e b 1fd3c <setlogmask@plt+0xd1f8>
1fec0: ebffc9d5 bl 1261c <strlen@plt>
1fec4: e1a04000 mov r4, r0
1fec8: e1a00006 mov r0, r6
1fecc: ebffc9d2 bl 1261c <strlen@plt>
1fed0: e0840000 add r0, r4, r0
1fed4: e2800002 add r0, r0, #2
1fed8: ebfff9e1 bl 1e664 <setlogmask@plt+0xbb20>
1fedc: e2505000 subs r5, r0, #0
1fee0: 0affff95 beq 1fd3c <setlogmask@plt+0xd1f8>
1fee4: e59f11e0 ldr r1, [pc, #480] ; 200cc <setlogmask@plt+0xd588>
1fee8: e1a03006 mov r3, r6
1feec: e1a0200b mov r2, fp
1fef0: e08f1001 add r1, pc, r1
1fef4: ebffca9d bl 12970 <sprintf@plt>
1fef8: e3a06001 mov r6, #1
1fefc: eaffffcc b 1fe34 <setlogmask@plt+0xd2f0>
--
22dbc: e1550002 cmp r5, r2
22dc0: 0affff93 beq 22c14 <setlogmask@plt+0x100d0>
22dc4: e5c20000 strb r0, [r2]
22dc8: e1a00005 mov r0, r5
22dcc: ebffbda3 bl 12460 <getenv@plt>
22dd0: e2508000 subs r8, r0, #0
22dd4: 0affff8e beq 22c14 <setlogmask@plt+0x100d0>
22dd8: ebffbe0f bl 1261c <strlen@plt>
22ddc: e1a07000 mov r7, r0
22de0: e1a00004 mov r0, r4
22de4: ebffbe0c bl 1261c <strlen@plt>
22de8: e0870000 add r0, r7, r0
22dec: e2800001 add r0, r0, #1
22df0: e1560000 cmp r6, r0
22df4: 9affff86 bls 22c14 <setlogmask@plt+0x100d0>
22df8: e59f1044 ldr r1, [pc, #68] ; 22e44 <setlogmask@plt+0x10300>
22dfc: e1a03004 mov r3, r4
22e00: e1a02008 mov r2, r8
22e04: e08f1001 add r1, pc, r1
22e08: e1a00005 mov r0, r5
22e0c: ebffbed7 bl 12970 <sprintf@plt>
22e10: eaffffcf b 22d54 <setlogmask@plt+0x10210>
22e14: e2802001 add r2, r0, #1
--
2344c: eaffffbe b 2334c <setlogmask@plt+0x10808>
23450: e5445002 strb r5, [r4, #-2]
23454: e5441001 strb r1, [r4, #-1]
23458: eaffffd6 b 233b8 <setlogmask@plt+0x10874>
2345c: e3a0205c mov r2, #92 ; 0x5c
23460: e1a04003 mov r4, r3
23464: e4c42002 strb r2, [r4], #2
23468: e3a0206e mov r2, #110 ; 0x6e
2346c: e5c32001 strb r2, [r3, #1]
23470: e3a03022 mov r3, #34 ; 0x22
23474: e5c43000 strb r3, [r4]
23478: e3a03000 mov r3, #0
2347c: e5c43001 strb r3, [r4, #1]
23480: e1a0000b mov r0, fp
23484: e8bd8ff8 pop {r3, r4, r5, r6, r7, r8, r9, sl, fp, pc}
23488: e59f301c ldr r3, [pc, #28] ; 234ac <setlogmask@plt+0x10968>
2348c: e1a00004 mov r0, r4
23490: e7991003 ldr r1, [r9, r3]
23494: e2811f69 add r1, r1, #420 ; 0x1a4
23498: e2811002 add r1, r1, #2
2349c: ebffbd33 bl 12970 <sprintf@plt>
234a0: e2843004 add r3, r4, #4
234a4: eaffffa8 b 2334c <setlogmask@plt+0x10808>
--
25b14: e353003e cmp r3, #62 ; 0x3e
25b18: 01a04000 moveq r4, r0
25b1c: 1afffff3 bne 25af0 <setlogmask@plt+0x12fac>
25b20: e3a03000 mov r3, #0
25b24: e5c83000 strb r3, [r8]
25b28: e1a00005 mov r0, r5
25b2c: ebffb2ba bl 1261c <strlen@plt>
25b30: e28d3078 add r3, sp, #120 ; 0x78
25b34: e58d301c str r3, [sp, #28]
25b38: e2847001 add r7, r4, #1
25b3c: e59d9034 ldr r9, [sp, #52] ; 0x34
25b40: e2800004 add r0, r0, #4
25b44: e350003f cmp r0, #63 ; 0x3f
25b48: 959db01c ldrls fp, [sp, #28]
25b4c: 9a000001 bls 25b58 <setlogmask@plt+0x13014>
25b50: ebffe2c3 bl 1e664 <setlogmask@plt+0xbb20>
25b54: e1a0b000 mov fp, r0
25b58: e1a02005 mov r2, r5
25b5c: e59d1014 ldr r1, [sp, #20]
25b60: e1a0000b mov r0, fp
25b64: ebffb381 bl 12970 <sprintf@plt>
25b68: e3a03020 mov r3, #32
25b6c: e5c43001 strb r3, [r4, #1]
--
25f04: e1a02000 mov r2, r0
25f08: e1a04000 mov r4, r0
25f0c: e2850001 add r0, r5, #1
25f10: ebffb1a6 bl 125b0 <strncmp@plt>
25f14: e3500000 cmp r0, #0
25f18: 1a000006 bne 25f38 <setlogmask@plt+0x133f4>
25f1c: e0853004 add r3, r5, r4
25f20: e5d33001 ldrb r3, [r3, #1]
25f24: e353005d cmp r3, #93 ; 0x5d
25f28: 02840002 addeq r0, r4, #2
25f2c: 03a0100a moveq r1, #10
25f30: 00850000 addeq r0, r5, r0
25f34: 0a00000d beq 25f70 <setlogmask@plt+0x1342c>
25f38: e3540010 cmp r4, #16
25f3c: 8afffebe bhi 25a3c <setlogmask@plt+0x12ef8>
25f40: e59f1060 ldr r1, [pc, #96] ; 25fa8 <setlogmask@plt+0x13464>
25f44: e28d4078 add r4, sp, #120 ; 0x78
25f48: e1a02007 mov r2, r7
25f4c: e08f1001 add r1, pc, r1
25f50: e1a00004 mov r0, r4
25f54: ebffb285 bl 12970 <sprintf@plt>
25f58: e1a01004 mov r1, r4
25f5c: e1a00005 mov r0, r5
--
27244: e3570000 cmp r7, #0
27248: e594000c ldr r0, [r4, #12]
2724c: 0a000001 beq 27258 <setlogmask@plt+0x14714>
27250: e3100901 tst r0, #16384 ; 0x4000
27254: 1a0000d5 bne 275b0 <setlogmask@plt+0x14a6c>
27258: e3a03000 mov r3, #0
2725c: e28d1018 add r1, sp, #24
27260: e5213018 str r3, [r1, #-24]! ; 0xffffffe8
27264: e59f347c ldr r3, [pc, #1148] ; 276e8 <setlogmask@plt+0x14ba4>
27268: e3100a01 tst r0, #4096 ; 0x1000
2726c: e796a003 ldr sl, [r6, r3]
27270: 0a0000a2 beq 27500 <setlogmask@plt+0x149bc>
27274: ebffdaf3 bl 1de48 <setlogmask@plt+0xb304>
27278: e28a1021 add r1, sl, #33 ; 0x21
2727c: e1a02000 mov r2, r0
27280: e1a09000 mov r9, r0
27284: e59f0460 ldr r0, [pc, #1120] ; 276ec <setlogmask@plt+0x14ba8>
27288: e08f0000 add r0, pc, r0
2728c: e2800f43 add r0, r0, #268 ; 0x10c
27290: e2800001 add r0, r0, #1
27294: ebffadb5 bl 12970 <sprintf@plt>
27298: e5951000 ldr r1, [r5]
2729c: e5913034 ldr r3, [r1, #52] ; 0x34
--
274d0: e15c0002 cmp ip, r2
274d4: e594001c ldr r0, [r4, #28]
274d8: e59310e4 ldr r1, [r3, #228] ; 0xe4
274dc: 1affff4f bne 27220 <setlogmask@plt+0x146dc>
274e0: e59320e0 ldr r2, [r3, #224] ; 0xe0
274e4: eaffff4e b 27224 <setlogmask@plt+0x146e0>
274e8: e3a0000a mov r0, #10
274ec: ebffac77 bl 126d0 <__fputc_unlocked@plt>
274f0: eaffff74 b 272c8 <setlogmask@plt+0x14784>
274f4: e3a0000a mov r0, #10
274f8: ebffacbf bl 127fc <fputc@plt>
274fc: eaffff71 b 272c8 <setlogmask@plt+0x14784>
27500: ebffda9c bl 1df78 <setlogmask@plt+0xb434>
27504: e28a1021 add r1, sl, #33 ; 0x21
27508: e1a02000 mov r2, r0
2750c: e1a09000 mov r9, r0
27510: e59f01e0 ldr r0, [pc, #480] ; 276f8 <setlogmask@plt+0x14bb4>
27514: e08f0000 add r0, pc, r0
27518: e2800f43 add r0, r0, #268 ; 0x10c
2751c: e2800001 add r0, r0, #1
27520: ebffad12 bl 12970 <sprintf@plt>
27524: e3580000 cmp r8, #0
27528: 1a000003 bne 2753c <setlogmask@plt+0x149f8>
[*] Function sprintf used 10 times ntpq
