blocks|key|353185|text|我假设您正在尝试以编程方式从C/C%2B%2B程序中访问这些信息。我怀疑您应该能够使用GNU二进制文件描述符库+(BFD)做您想做的事情，它用于实现GNU链接器、objdump等(它还有一个维基百科文章)。特别是参阅手册的第2.6节，它都是关于章节的。BFD创建一个"部分“链接列表，通过结构bfd的”节“成员访问。我认为您应该能够在argv上使用fopen打开当前的二进制文件。BFD船与二值。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|353186|entityMap|0|LINK|mutability|MUTABLE|url|http://sourceware.org/binutils/docs-2.22/bfd/index.html|1|http://en.wikipedia.org/wiki/Binary_File_Descriptor_library|2|http://sourceware.org/binutils/docs-2.22/bfd/Sections.html#Sections|3|http://sourceware.org/binutils/docs-2.22/bfd/typedef-asection.html#typedef-asection|4|http://sourceware.org/binutils/docs-2.22/bfd/BFD-front-end.html#BFD-front-end|5|http://sourceware.org/binutils/docs-2.22/bfd/Opening-and-Closing.html#Opening-and-Closing|6|http://www.gnu.org/software/binutils/^0|13|C|0|2J|6|1|2Z|5|2|3M|2|3|3W|5|4|4Q|5|5|5B|2|6|0^^$0|@$1|2|3|4|5|6|7|X|8|@]|9|@$A|Y|B|Z|1|10]|$A|11|B|12|1|13]|$A|14|B|15|1|16]|$A|17|B|18|1|19]|$A|1A|B|1B|1|1C]|$A|1D|B|1E|1|1F]|$A|1G|B|1H|1|1I]]|C|$]]|$1|D|3|-4|5|6|7|1J|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]|L|$5|G|H|I|C|$J|M]]|N|$5|G|H|I|C|$J|O]]|P|$5|G|H|I|C|$J|Q]]|R|$5|G|H|I|C|$J|S]]|T|$5|G|H|I|C|$J|U]]|V|$5|G|H|I|C|$J|W]]]]

I assume you're trying to programmatically access this information from a C/C++ program. I suspect you should be able to do what you want with the <a href="http://sourceware.org/binutils/docs-2.22/bfd/index.html" rel="nofollow">GNU Binary File Descriptor library</a> (BFD), which is used to implement the GNU linker, objdump, etc. (it also has a <a href="http://en.wikipedia.org/wiki/Binary_File_Descriptor_library" rel="nofollow">Wikipedia article</a>). See in particular <a href="http://sourceware.org/binutils/docs-2.22/bfd/Sections.html#Sections" rel="nofollow">section 2.6</a> of the manual, which is all about sections. BFD creates a linked list of "<a href="http://sourceware.org/binutils/docs-2.22/bfd/typedef-asection.html#typedef-asection" rel="nofollow">struct bfd_section</a>", accessed through the "sections" member of <a href="http://sourceware.org/binutils/docs-2.22/bfd/BFD-front-end.html#BFD-front-end" rel="nofollow">struct bfd</a>. I think you should be able to open the current binary by using <a href="http://sourceware.org/binutils/docs-2.22/bfd/Opening-and-Closing.html#Opening-and-Closing" rel="nofollow">bfd_fopen</a> on argv[0]. BFD ships with <a href="http://www.gnu.org/software/binutils/" rel="nofollow">binutils</a>.

blocks|key|241731|text|Read亲自命令可以这样做，例如，readelf+-s|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|241732|这并不简单，所以发布到readelf源代码的链接似乎是最好的选择。其中一个原因是处理标头和节结构需要大量的宏。|241733|8c-source.html|241734|entityMap|0|LINK|mutability|MUTABLE|url|http://rpm5.org/docs/api/readelf_8c-source.html^0|H|A|0|0|0|E|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@$9|S|A|T|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|U|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|V|8|@]|D|@$9|W|A|X|1|Y]]|E|$]]|$1|J|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]]|K|$L|$5|M|N|O|E|$P|Q]]]]

The readelf command can do this e.g., <code>readelf -s</code>

This not trivial, so posting a link to source code for readelf seems like a best choice. One reason for this is the large number of macros required to process header and section structs.

<a href="http://rpm5.org/docs/api/readelf_8c-source.html" rel="nofollow">http://rpm5.org/docs/api/readelf_8c-source.html</a>

blocks|key|722408|text|这听起来是个很糟糕的主意，但是如果您对它有合法的使用，我只需要解析/proc/self/maps并打开引用的文件。没有理由相信节头甚至被映射到内存中；很可能，它们位于磁盘上的.data之后，因此在将共享对象映射到内存时将被.bss的零覆盖。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|722409|打开文件后，可以使用libbfd，但我将直接使用elf.h。跟踪Ehdr到Shdr表很容易。|722410|entityMap^0|X|F|2F|5|33|4|0|A|6|O|5|W|4|11|4|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]|$9|M|A|N|B|C]|$9|O|A|P|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|Q|8|@$9|R|A|S|B|C]|$9|T|A|U|B|C]|$9|V|A|W|B|C]|$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]]|I|$]]

This sounds like a really bad idea, but if you have a legitimate use for it, I would just parse <code>/proc/self/maps</code> and open the referenced files. There is no reason to believe that section headers are even mapped into memory; in all likelihood, they're located immediately after <code>.data</code> on disk and thus will be overwritten with zeros for <code>.bss</code> when the shared object is mapped into memory.

Once you have the files open, you could use <code>libbfd</code>, but I would just use <code>elf.h</code> directly. It's easy to follow the <code>Ehdr</code> to the <code>Shdr</code> table.

I am looking for a nice way of enumerating all ELF sections and their addresses of the current binary and all shared objects the current process might have loaded.

I know about the existance of dl_iterate_phdr() which gives me an easy to use list of ELF segments, but I am looking for ELF sections, so it's not the right call for me.

I don't care about portability, as long as it works on Linux with ELF I am happy!

Any hint appreciated!

Enumerate all ELF sections of all shared objects currently loaded

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我正在寻找一种很好的方法来枚举当前二进制文件和当前进程可能加载的所有共享对象的所有ELF部分及其地址。我知道dl_iterate_phdr()的存在，它为我提供了一个易于使用的ELF段列表，但是我正在寻找ELF部分，所以它不是我的正确调用。我不关心可移植性，只要它在Linux上与ELF一起工作，我就很高兴！任何暗示都很...

问枚举当前加载的所有共享对象的所有ELF部分。
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问枚举当前加载的所有共享对象的所有ELF部分。EN