[*] Binary protection state of connmand
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of connmand
1f770: e1a05008 mov r5, r8
1f774: e1a00008 mov r0, r8
1f778: ebffefa3 bl 1b60c <g_free@plt>
1f77c: e3550000 cmp r5, #0
1f780: 0affffdb beq 1f6f4 <statfs64@plt+0x2ef4>
1f784: e1a02005 mov r2, r5
1f788: e1a01009 mov r1, r9
1f78c: e594005c ldr r0, [r4, #92] ; 0x5c
1f790: ebfff1f8 bl 1bf78 <g_hash_table_insert@plt>
1f794: eaffffd9 b 1f700 <statfs64@plt+0x2f00>
1f798: e5d62003 ldrb r2, [r6, #3]
1f79c: e5d63000 ldrb r3, [r6]
1f7a0: e58d2008 str r2, [sp, #8]
1f7a4: e5d62002 ldrb r2, [r6, #2]
1f7a8: e59f1550 ldr r1, [pc, #1360] ; 1fd00 <statfs64@plt+0x3500>
1f7ac: e58d2004 str r2, [sp, #4]
1f7b0: e5d62001 ldrb r2, [r6, #1]
1f7b4: e1a00005 mov r0, r5
1f7b8: e58d2000 str r2, [sp]
1f7bc: e59f2510 ldr r2, [pc, #1296] ; 1fcd4 <statfs64@plt+0x34d4>
1f7c0: ebfff351 bl 1c50c <sprintf@plt>
1f7c4: e0855000 add r5, r5, r0
1f7c8: e047700b sub r7, r7, fp
--
1f7f0: ca000024 bgt 1f888 <statfs64@plt+0x3088>
1f7f4: e59d3014 ldr r3, [sp, #20]
1f7f8: e2433001 sub r3, r3, #1
1f7fc: e3530004 cmp r3, #4
1f800: 979ff103 ldrls pc, [pc, r3, lsl #2]
1f804: eaffffef b 1f7c8 <statfs64@plt+0x2fc8>
1f808: 0001f798 muleq r1, r8, r7
1f80c: 0001f870 andeq pc, r1, r0, ror r8 ; <UNPREDICTABLE>
1f810: 0001f7c8 andeq pc, r1, r8, asr #15
1f814: 0001f81c andeq pc, r1, ip, lsl r8 ; <UNPREDICTABLE>
1f818: 0001f848 andeq pc, r1, r8, asr #16
1f81c: e5d63001 ldrb r3, [r6, #1]
1f820: e5d62000 ldrb r2, [r6]
1f824: e1822403 orr r2, r2, r3, lsl #8
1f828: e1a03422 lsr r3, r2, #8
1f82c: e1832402 orr r2, r3, r2, lsl #8
1f830: e1a02802 lsl r2, r2, #16
1f834: e1a02822 lsr r2, r2, #16
1f838: e59f14c4 ldr r1, [pc, #1220] ; 1fd04 <statfs64@plt+0x3504>
1f83c: e1a00005 mov r0, r5
1f840: ebfff331 bl 1c50c <sprintf@plt>
1f844: eaffffde b 1f7c4 <statfs64@plt+0x2fc4>
1f848: e5d60001 ldrb r0, [r6, #1]
--
2515c: ebffdba3 bl 1bff0 <g_try_malloc0@plt>
25160: e2504000 subs r4, r0, #0
25164: 0afffff6 beq 25144 <statfs64@plt+0x8944>
25168: e1a00007 mov r0, r7
2516c: ebffdcbf bl 1c470 <g_strdup@plt>
25170: e3a0201c mov r2, #28
25174: e3a01000 mov r1, #0
25178: e1c460b8 strh r6, [r4, #8]
2517c: e584800c str r8, [r4, #12]
25180: e5845000 str r5, [r4]
25184: e5840004 str r0, [r4, #4]
25188: e28d002c add r0, sp, #44 ; 0x2c
2518c: ebffda6e bl 1bb4c <emset@plt>
25190: e3a03002 mov r3, #2
25194: e58d3030 str r3, [sp, #48] ; 0x30
25198: e59f3170 ldr r3, [pc, #368] ; 25310 <statfs64@plt+0x8b10>
2519c: e1a02006 mov r2, r6
251a0: e59f116c ldr r1, [pc, #364] ; 25314 <statfs64@plt+0x8b14>
251a4: e28d0010 add r0, sp, #16
251a8: e58d3028 str r3, [sp, #40] ; 0x28
251ac: ebffdcd6 bl 1c50c <sprintf@plt>
251b0: e28d300c add r3, sp, #12
251b4: e28d2028 add r2, sp, #40 ; 0x28
--
48144: e2604000 rsb r4, r0, #0
48148: ebff4d92 bl 1b798 <strerror@plt>
4814c: e1a01000 mov r1, r0
48150: e59f0094 ldr r0, [pc, #148] ; 481ec <connman_inet_create_tunnel@@Base+0xd0>
48154: ebff8ac5 bl 2ac70 <connman_error@@Base>
48158: e1a00004 mov r0, r4
4815c: e28dd020 add sp, sp, #32
48160: e8bd81f0 pop {r4, r5, r6, r7, r8, pc}
48164: e3a02020 mov r2, #32
48168: e3a01000 mov r1, #0
4816c: e1a0000d mov r0, sp
48170: ebff4e75 bl 1bb4c <emset@plt>
48174: e59f7074 ldr r7, [pc, #116] ; 481f0 <connman_inet_create_tunnel@@Base+0xd4>
48178: e59f3074 ldr r3, [pc, #116] ; 481f4 <connman_inet_create_tunnel@@Base+0xd8>
4817c: e59f8074 ldr r8, [pc, #116] ; 481f8 <connman_inet_create_tunnel@@Base+0xdc>
48180: e3a05000 mov r5, #0
48184: e1cd31b0 strh r3, [sp, #16]
48188: e1a02005 mov r2, r5
4818c: e1a01007 mov r1, r7
48190: e1a0000d mov r0, sp
48194: ebff50dc bl 1c50c <sprintf@plt>
48198: e1a0200d mov r2, sp
4819c: e1a01008 mov r1, r8
[*] Function sprintf used 4 times connmand