GitHunt
AB

abenkhadra/libelfin

C++11 ELF/DWARF parser

Libelfin is a from-scratch
C++11 library for reading ELF binaries and DWARFv4 debug information.

Quick start

make, and optionally make install. You'll need GCC 4.7 or later.

Features

  • Native C++11 code and interface, designed from scratch to interact
    well with C++11 features, from range-based for loops to move
    semantics to enum classes.

  • Libelfin fully implements parsing for Debugging Information Entries
    (DIEs), the core data structure used by the DWARF format, as well as
    most DWARFv4 tables.

  • Supports all DWARFv4 DIE value types except location lists and
    macros.

  • Nearly complete evaluator for DWARFv4 expressions and location
    descriptions.

  • Complete interpreter for DWARFv4 line tables.

  • Iterators for easily and naturally traversing compilation units,
    type units, DIE trees, and DIE attribute lists.

  • Every enum value can be pretty-printed.

  • Large collection of type-safe DIE attribute fetchers.

Non-features

Libelfin implements a syntactic layer for DWARF and ELF, but not a
semantic layer. Interpreting the information stored in DWARF DIE
trees still requires a great deal of understanding of DWARF, but
libelfin will make sense of the bytes for you.

Using libelfin

To build against libdwarf++, use, for example

g++ -std=c++11 a.cc $(pkg-config --cflags --libs libdwarf++)

To use a local build of libelfin, set PKG_CONFIG_PATH. For example,

export PKG_CONFIG_PATH=$PWD/elf:$PWD/dwarf

There are various example programs in examples/.

Status

Libelfin is a good start. It's not production-ready and there are
many parts of the DWARF specification it does not yet implement, but
it's complete enough to be useful for many things and is a good deal
more pleasant to use than every other debug info library I've tried.

Languages

C++94.5%Python2.4%Makefile2.2%Shell0.8%C0.1%Emacs Lisp0.1%

Contributors

MIT License
Created March 13, 2018
Updated March 13, 2018
abenkhadra/libelfin | GitHunt