Elfkit

an elf read and manipulation library in pure rust (no bfd, no gnu code), intended to be used in binary manipulation utils such as strip, objcopy, link editors, etc.

Some binutils replacements are included as example code.

cargo run --example readelf ./tests/samples/amd64_exe

api design

low level

Every type implements fromreader and towriter. You can use them invdividually, but you'll always need a Header to tell the de/serializers about things like endianness, bitwidth,..

structured elf

the most versatile api is propably Elf::fromreader/towriter. You can use it as is, which will hold all sectionc content in Vec or call Elf::load_all() which will parse the sections into their detailed specific structures, such as symbols, relocations, dynamic linker instructions, etc..

implementation status

section specific parsers

| type | read | write | |--------------|---------|---------| | symtab | ok | ok | | rela | ok | ok | | dynamic | ok | ok | | rel | - | - | | note | - | - | | gnu_hash | - | - | | versym | - | - | | verneed | - | - |

architectures

| abi | headers | relocations | |--------------|---------|-------------| | x86_64 | ok | wip | | mips32r2 o32 | ok | | | arm eabi | ok | |

references

• https://en.wikipedia.org/wiki/ExecutableandLinkable_Format
• https://software.intel.com/sites/default/files/article/402129/mpx-linux64-abi.pdf
• http://infocenter.arm.com/help/topic/com.arm.doc.ihi0044f/IHI0044F_aaelf.pdf
• https://dmz-portal.imgtec.com/wiki/MIPSABIProject
• https://dmz-portal.imgtec.com/wiki/MIPSO32ABI-FR0andFR1_Interlinking