[*] Binary protection state of ldd
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function fprintf tear down of ldd
00010878 <__register_frame_info@plt>:
10878: e28fc600 add ip, pc, #0, 12
1087c: e28cca11 add ip, ip, #69632 ; 0x11000
10880: e5bcf800 ldr pc, [ip, #2048]! ; 0x800
00010884 <free@plt>:
10884: e28fc600 add ip, pc, #0, 12
10888: e28cca11 add ip, ip, #69632 ; 0x11000
1088c: e5bcf7f8 ldr pc, [ip, #2040]! ; 0x7f8
Disassembly of section .text:
00010890 <.text>:
10890: e3500001 cmp r0, #1
10894: e92d4ff8 push {r3, r4, r5, r6, r7, r8, r9, sl, fp, lr}
10898: ca000067 bgt 10a3c <free@plt+0x1b8>
1089c: e59f31b0 ldr r3, [pc, #432] ; 10a54 <free@plt+0x1d0>
108a0: e59f11b0 ldr r1, [pc, #432] ; 10a58 <free@plt+0x1d4>
108a4: e5930000 ldr r0, [r3]
108a8: ebffffc2 bl 107b8 <fprintf@plt>
108ac: e3a00001 mov r0, #1
108b0: ebffffe4 bl 10848 <exit@plt>
108b4: e5b94004 ldr r4, [r9, #4]!
108b8: e59f119c ldr r1, [pc, #412] ; 10a5c <free@plt+0x1d8>
108bc: e1a00004 mov r0, r4
108c0: ebffffd4 bl 10818 <strcmp@plt>
108c4: e3500000 cmp r0, #0
108c8: 0a000019 beq 10934 <free@plt+0xb0>
108cc: e59f118c ldr r1, [pc, #396] ; 10a60 <free@plt+0x1dc>
108d0: e1a00004 mov r0, r4
108d4: ebffffcf bl 10818 <strcmp@plt>
108d8: e3500000 cmp r0, #0
108dc: 0a000004 beq 108f4 <free@plt+0x70>
108e0: e59f117c ldr r1, [pc, #380] ; 10a64 <free@plt+0x1e0>
108e4: e1a00004 mov r0, r4
108e8: ebffffca bl 10818 <strcmp@plt>
108ec: e3500000 cmp r0, #0
108f0: 1a000005 bne 1090c <free@plt+0x88>
108f4: e59f3158 ldr r3, [pc, #344] ; 10a54 <free@plt+0x1d0>
108f8: e59f1168 ldr r1, [pc, #360] ; 10a68 <free@plt+0x1e4>
108fc: e5930000 ldr r0, [r3]
10900: ebffffac bl 107b8 <fprintf@plt>
10904: e3a00000 mov r0, #0
10908: eaffffe8 b 108b0 <free@plt+0x2c>
--
10b9c: e59f2014 ldr r2, [pc, #20] ; 10bb8 <free@plt+0x334>
10ba0: e5922000 ldr r2, [r2]
10ba4: e3520000 cmp r2, #0
10ba8: 012fff1e bxeq lr
10bac: e92d4010 push {r4, lr}
10bb0: eb000267 bl 11554 <free@plt+0xcd0>
10bb4: e8bd8010 pop {r4, pc}
10bb8: 000220bc strheq r2, [r2], -ip
10bbc: e92d47f0 push {r4, r5, r6, r7, r8, r9, sl, lr}
10bc0: e1a08000 mov r8, r0
10bc4: e24dd058 sub sp, sp, #88 ; 0x58
10bc8: e1a00002 mov r0, r2
10bcc: e1a06001 mov r6, r1
10bd0: ebffff07 bl 107f4 <strdup@plt>
10bd4: e2505000 subs r5, r0, #0
10bd8: 1a000032 bne 10ca8 <free@plt+0x424>
10bdc: e59f3118 ldr r3, [pc, #280] ; 10cfc <free@plt+0x478>
10be0: e59f2118 ldr r2, [pc, #280] ; 10d00 <free@plt+0x47c>
10be4: e59f1118 ldr r1, [pc, #280] ; 10d04 <free@plt+0x480>
10be8: e5930000 ldr r0, [r3]
10bec: ebfffef1 bl 107b8 <fprintf@plt>
10bf0: e3a00001 mov r0, #1
10bf4: ebffff13 bl 10848 <exit@plt>
--
10d94: e8bd81f0 pop {r4, r5, r6, r7, r8, pc}
10d98: e2866008 add r6, r6, #8
10d9c: eafffff1 b 10d68 <free@plt+0x4e4>
10da0: e92d4ff0 push {r4, r5, r6, r7, r8, r9, sl, fp, lr}
10da4: e3a02000 mov r2, #0
10da8: e24ddf4b sub sp, sp, #300 ; 0x12c
10dac: e58d2014 str r2, [sp, #20]
10db0: e58d200c str r2, [sp, #12]
10db4: e59f274c ldr r2, [pc, #1868] ; 11508 <free@plt+0xc84>
10db8: e1500002 cmp r0, r2
10dbc: 1a000002 bne 10dcc <free@plt+0x548>
10dc0: e3a00000 mov r0, #0
10dc4: e28ddf4b add sp, sp, #300 ; 0x12c
10dc8: e8bd8ff0 pop {r4, r5, r6, r7, r8, r9, sl, fp, pc}
10dcc: e3500000 cmp r0, #0
10dd0: e58d0010 str r0, [sp, #16]
10dd4: 1a000005 bne 10df0 <free@plt+0x56c>
10dd8: e59f372c ldr r3, [pc, #1836] ; 1150c <free@plt+0xc88>
10ddc: e59f172c ldr r1, [pc, #1836] ; 11510 <free@plt+0xc8c>
10de0: e5930000 ldr r0, [r3]
10de4: ebfffe73 bl 107b8 <fprintf@plt>
10de8: e3e00000 mvn r0, #0
10dec: eafffff4 b 10dc4 <free@plt+0x540>
--
10e5c: e3a02003 mov r2, #3
10e60: e1a01005 mov r1, r5
10e64: e88d0009 stm sp, {r0, r3}
10e68: e3a03002 mov r3, #2
10e6c: e3a00000 mov r0, #0
10e70: ebfffe44 bl 10788 <ap@plt>
10e74: e3700001 cmn r0, #1
10e78: e58d000c str r0, [sp, #12]
10e7c: 1a00000c bne 10eb4 <free@plt+0x630>
10e80: e1a00004 mov r0, r4
10e84: ebfffe60 bl 1080c <fclose@plt>
10e88: e59f367c ldr r3, [pc, #1660] ; 1150c <free@plt+0xc88>
10e8c: e5934000 ldr r4, [r3]
10e90: ebfffe69 bl 1083c <__errno_location@plt>
10e94: e5900000 ldr r0, [r0]
10e98: ebfffe28 bl 10740 <strerror@plt>
10e9c: e59d2010 ldr r2, [sp, #16]
10ea0: e59f1670 ldr r1, [pc, #1648] ; 11518 <free@plt+0xc94>
10ea4: e1a03000 mov r3, r0
10ea8: e1a00004 mov r0, r4
10eac: ebfffe41 bl 107b8 <fprintf@plt>
10eb0: eaffffcc b 10de8 <free@plt+0x564>
10eb4: e1a00004 mov r0, r4
--
10f54: e1833402 orr r3, r3, r2, lsl #8
10f58: e59d200c ldr r2, [sp, #12]
10f5c: e1c232bc strh r3, [r2, #44] ; 0x2c
10f60: e1d223b0 ldrh r2, [r2, #48] ; 0x30
10f64: e1a03422 lsr r3, r2, #8
10f68: e1833402 orr r3, r3, r2, lsl #8
10f6c: e59d200c ldr r2, [sp, #12]
10f70: e1c233b0 strh r3, [r2, #48] ; 0x30
10f74: e59d300c ldr r3, [sp, #12]
10f78: e1d331b0 ldrh r3, [r3, #16]
10f7c: e2433002 sub r3, r3, #2
10f80: e3530001 cmp r3, #1
10f84: 9a000008 bls 10fac <free@plt+0x728>
10f88: e59d2010 ldr r2, [sp, #16]
10f8c: e59f1594 ldr r1, [pc, #1428] ; 11528 <free@plt+0xca4>
10f90: ea000001 b 10f9c <free@plt+0x718>
10f94: e59d2010 ldr r2, [sp, #16]
10f98: e59f158c ldr r1, [pc, #1420] ; 1152c <free@plt+0xca8>
10f9c: e59f3568 ldr r3, [pc, #1384] ; 1150c <free@plt+0xc88>
10fa0: e5930000 ldr r0, [r3]
10fa4: ebfffe03 bl 107b8 <fprintf@plt>
10fa8: eaffff8e b 10de8 <free@plt+0x564>
10fac: e59d2030 ldr r2, [sp, #48] ; 0x30
10fb0: e59f1578 ldr r1, [pc, #1400] ; 11530 <free@plt+0xcac>
10fb4: e3120b02 tst r2, #2048 ; 0x800
10fb8: e3a03000 mov r3, #0
10fbc: 13a03001 movne r3, #1
10fc0: e1d12002 bics r2, r1, r2
10fc4: 0a00001c beq 1103c <free@plt+0x7b8>
10fc8: e3530000 cmp r3, #0
10fcc: e58d3014 str r3, [sp, #20]
10fd0: 0a000004 beq 10fe8 <free@plt+0x764>
10fd4: e59f3530 ldr r3, [pc, #1328] ; 1150c <free@plt+0xc88>
10fd8: e59d2010 ldr r2, [sp, #16]
10fdc: e59f1550 ldr r1, [pc, #1360] ; 11534 <free@plt+0xcb0>
10fe0: e5930000 ldr r0, [r3]
10fe4: ebfffdf3 bl 107b8 <fprintf@plt>
10fe8: e59f3534 ldr r3, [pc, #1332] ; 11524 <free@plt+0xca0>
10fec: e3a02000 mov r2, #0
--
11304: e59bb00c ldr fp, [fp, #12]
11308: eaffffd8 b 11270 <free@plt+0x9ec>
1130c: e352002f cmp r2, #47 ; 0x2f
11310: 01a00003 moveq r0, r3
11314: e4d32001 ldrb r2, [r3], #1
11318: e3520000 cmp r2, #0
1131c: 1afffffa bne 1130c <free@plt+0xa88>
11320: e1a01005 mov r1, r5
11324: ebfffd3b bl 10818 <strcmp@plt>
11328: e3500000 cmp r0, #0
1132c: 1afffff4 bne 11304 <free@plt+0xa80>
11330: eaffffb2 b 11200 <free@plt+0x97c>
11334: e3a00b01 mov r0, #1024 ; 0x400
11338: ebfffd0f bl 1077c <alloc@plt>
1133c: e2505000 subs r5, r0, #0
11340: 1a000038 bne 11428 <free@plt+0xba4>
11344: e59f31c0 ldr r3, [pc, #448] ; 1150c <free@plt+0xc88>
11348: e59f21f4 ldr r2, [pc, #500] ; 11544 <free@plt+0xcc0>
1134c: e59f11f4 ldr r1, [pc, #500] ; 11548 <free@plt+0xcc4>
11350: e5930000 ldr r0, [r3]
11354: ebfffd17 bl 107b8 <fprintf@plt>
11358: e3a00001 mov r0, #1
1135c: ebfffd39 bl 10848 <exit@plt>
[*] Function fprintf used 8 times ldd
