[ < ] | [ > ] | [ << ] | [ Up ] | [ >> ] | [Top] | [Contents] | [Index] | [ ? ] |
objdump [`-a'|`--archive-headers'] [`-b' bfdname|`--target=bfdname'] [`-C'|`--demangle'[=style] ] [`-d'|`--disassemble'] [`-D'|`--disassemble-all'] [`-z'|`--disassemble-zeroes'] [`-EB'|`-EL'|`--endian='{big | little }] [`-f'|`--file-headers'] [`-F'|`--file-offsets'] [`--file-start-context'] [`-g'|`--debugging'] [`-e'|`--debugging-tags'] [`-h'|`--section-headers'|`--headers'] [`-i'|`--info'] [`-j' section|`--section='section] [`-l'|`--line-numbers'] [`-S'|`--source'] [`-m' machine|`--architecture='machine] [`-M' options|`--disassembler-options='options] [`-p'|`--private-headers'] [`-P' options|`--private='options] [`-r'|`--reloc'] [`-R'|`--dynamic-reloc'] [`-s'|`--full-contents'] [`-W[lLiaprmfFsoRt]'| `--dwarf'[=rawline,=decodedline,=info,=abbrev,=pubnames,=aranges,=macro,=frames,=frames-interp,=str,=loc,=Ranges,=pubtypes,=trace_info,=trace_abbrev,=trace_aranges,=gdb_index]] [`-G'|`--stabs'] [`-t'|`--syms'] [`-T'|`--dynamic-syms'] [`-x'|`--all-headers'] [`-w'|`--wide'] [`--start-address='address] [`--stop-address='address] [`--prefix-addresses'] [`--[no-]show-raw-insn'] [`--adjust-vma='offset] [`--special-syms'] [`--prefix='prefix] [`--prefix-strip='level] [`--insn-width='width] [`-V'|`--version'] [`-H'|`--help'] objfile... |
objdump
displays information about one or more object files.
The options control what particular information to display. This
information is mostly useful to programmers who are working on the
compilation tools, as opposed to programmers who just want their
program to compile and work.
objfile... are the object files to be examined. When you
specify archives, objdump
shows information on each of the member
object files.
The long and short forms of options, shown here as alternatives, are equivalent. At least one option from the list `-a,-d,-D,-e,-f,-g,-G,-h,-H,-p,-P,-r,-R,-s,-S,-t,-T,-V,-x' must be given.
-a
--archive-header
--adjust-vma=offset
-b bfdname
--target=bfdname
For example,
objdump -b oasys -m vax -h fu.o |
-C
--demangle[=style]
-g
--debugging
-e
--debugging-tags
-d
--disassemble
-D
--disassemble-all
If the target is an ARM architecture this switch also has the effect of forcing the disassembler to decode pieces of data found in code sections as if they were instructions.
--prefix-addresses
-EB
-EL
--endian={big|little}
-f
--file-headers
-F
--file-offsets
--file-start-context
-h
--section-headers
--headers
File segments may be relocated to nonstandard addresses, for example by
using the `-Ttext', `-Tdata', or `-Tbss' options to
ld
. However, some object file formats, such as a.out, do not
store the starting address of the file segments. In those situations,
although ld
relocates the sections correctly, using `objdump
-h' to list the file section headers cannot show the correct addresses.
Instead, it shows the usual addresses, which are implicit for the
target.
-H
--help
objdump
and exit.
-i
--info
-j name
--section=name
-l
--line-numbers
-m machine
--architecture=machine
If the target is an ARM architecture then this switch has an additional effect. It restricts the disassembly to only those instructions supported by the architecture specified by machine. If it is necessary to use this switch because the input file does not contain any architecture information, but it is also desired to disassemble all the instructions use `-marm'.
-M options
--disassembler-options=options
If the target is an ARM architecture then this switch can be used to select which register name set is used during disassembler. Specifying `-M reg-names-std' (the default) will select the register names as used in ARM's instruction set documentation, but with register 13 called 'sp', register 14 called 'lr' and register 15 called 'pc'. Specifying `-M reg-names-apcs' will select the name set used by the ARM Procedure Call Standard, whilst specifying `-M reg-names-raw' will just use `r' followed by the register number.
There are also two variants on the APCS register naming scheme enabled by `-M reg-names-atpcs' and `-M reg-names-special-atpcs' which use the ARM/Thumb Procedure Call Standard naming conventions. (Either with the normal register names or the special register names).
This option can also be used for ARM architectures to force the disassembler to interpret all instructions as Thumb instructions by using the switch `--disassembler-options=force-thumb'. This can be useful when attempting to disassemble thumb code produced by other compilers.
For the x86, some of the options duplicate functions of the `-m' switch, but allow finer grained control. Multiple selections from the following may be specified as a comma separated string. `x86-64', `i386' and `i8086' select disassembly for the given architecture. `intel' and `att' select between intel syntax mode and AT&T syntax mode. `intel-mnemonic' and `att-mnemonic' select between intel mnemonic mode and AT&T mnemonic mode. `intel-mnemonic' implies `intel' and `att-mnemonic' implies `att'. `addr64', `addr32', `addr16', `data32' and `data16' specify the default address size and operand size. These four options will be overridden if `x86-64', `i386' or `i8086' appear later in the option string. Lastly, `suffix', when in AT&T mode, instructs the disassembler to print a mnemonic suffix even when the suffix could be inferred by the operands.
For PowerPC, `booke' controls the disassembly of BookE instructions. `32' and `64' select PowerPC and PowerPC64 disassembly, respectively. `e300' selects disassembly for the e300 family. `440' selects disassembly for the PowerPC 440. `ppcps' selects disassembly for the paired single instructions of the PPC750CL.
For MIPS, this option controls the printing of instruction mnemonic names and register names in disassembled instructions. Multiple selections from the following may be specified as a comma separated string, and invalid options are ignored:
no-aliases
msa
virt
gpr-names=ABI
fpr-names=ABI
cp0-names=ARCH
hwr-names=ARCH
rdhwr
instruction) names
as appropriate for the CPU or architecture specified by
ARCH. By default, HWR names are selected according to
the architecture and CPU of the binary being disassembled.
reg-names=ABI
reg-names=ARCH
For any of the options listed above, ABI or ARCH may be specified as `numeric' to have numbers printed rather than names, for the selected types of registers. You can list the available values of ABI and ARCH using the `--help' option.
For VAX, you can specify function entry addresses with `-M entry:0xf00ba'. You can use this multiple times to properly disassemble VAX binary files that don't contain symbol tables (like ROM dumps). In these cases, the function entry mask would otherwise be decoded as VAX instructions, which would probably lead the rest of the function being wrongly disassembled.
-p
--private-headers
-P options
--private=options
For XCOFF, the available options are: `header', `aout', `sections', `syms', `relocs', `lineno', `loader', `except', `typchk', `traceback', `toc' and `ldinfo'.
-r
--reloc
-R
--dynamic-reloc
-s
--full-contents
-S
--source
--prefix=prefix
--prefix-strip=level
--show-raw-insn
--no-show-raw-insn
--insn-width=width
-W[lLiaprmfFsoRt]
--dwarf[=rawline,=decodedline,=info,=abbrev,=pubnames,=aranges,=macro,=frames,=frames-interp,=str,=loc,=Ranges,=pubtypes,=trace_info,=trace_abbrev,=trace_aranges,=gdb_index]
Note that there is no single letter option to display the content of trace sections or .gdb_index.
Note: the output from the `=info' option can also be affected by the options `--dwarf-depth', the `--dwarf-start' and the `--dwarf-check'.
--dwarf-depth=n
.debug_info
section to n children.
This is only useful with `--dwarf=info'. The default is
to print all DIEs; the special value 0 for n will also have this
effect.
With a non-zero value for n, DIEs at or deeper than n levels will not be printed. The range for n is zero-based.
--dwarf-start=n
If specified, this option will suppress printing of any header information and all DIEs before the DIE numbered n. Only siblings and children of the specified DIE will be printed.
This can be used in conjunction with `--dwarf-depth'.
--dwarf-check
-G
--stabs
.stab
debugging symbol-table entries are carried in an ELF
section. In most other file formats, debugging symbol-table entries are
interleaved with linkage symbols, and are visible in the `--syms'
output.
--start-address=address
--stop-address=address
-t
--syms
[ 4](sec 3)(fl 0x00)(ty 0)(scl 3) (nx 1) 0x00000000 .bss [ 6](sec 1)(fl 0x00)(ty 0)(scl 2) (nx 0) 0x00000000 fred |
where the number inside the square brackets is the number of the entry in the symbol table, the sec number is the section number, the fl value are the symbol's flag bits, the ty number is the symbol's type, the scl number is the symbol's storage class and the nx value is the number of auxilary entries associated with the symbol. The last two fields are the symbol's value and its name.
The other common output format, usually seen with ELF based files, looks like this:
00000000 l d .bss 00000000 .bss 00000000 g .text 00000000 fred |
Here the first number is the symbol's value (sometimes refered to as its address). The next field is actually a set of characters and spaces indicating the flag bits that are set on the symbol. These characters are described below. Next is the section with which the symbol is associated or *ABS* if the section is absolute (ie not connected with any section), or *UND* if the section is referenced in the file being dumped, but not defined there.
After the section name comes another field, a number, which for common symbols is the alignment and for other symbol is the size. Finally the symbol's name is displayed.
The flag characters are divided into 7 groups as follows:
l
g
u
!
w
C
W
I
i
d
D
F
f
O
-T
--dynamic-syms
--special-syms
-V
--version
objdump
and exit.
-x
--all-headers
-w
--wide
-z
--disassemble-zeroes
[ << ] | [ >> ] | [Top] | [Contents] | [Index] | [ ? ] |