vmlinux-to-elf
vmlinux-to-elf copied to clipboard
marin-m
A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
The tool works as suggested, the output is printed on the screen, but in my case is more than 2000 functions, how can I save the output to a file...
I am trying to decompile Android device's stock ROM vmlinux and at first I wanted to use your script to improve decompilation quality. When I try to process vmlinux, I...
Source: https://downloads.openwrt.org/releases/17.01.0/targets/ixp4xx/harddisk/lede-17.01.0-r3205-59508e3-ixp4xx-harddisk-ap1000-zImage ``` [+] Kernel successfully decompressed in-memory (the offsets that follow will be given relative to the decompressed binary) [+] Version string: Linux version 4.4.50 ([email protected]) (gcc version 5.4.0...
`find_kallsyms_num_syms()` loops forever with `boot.img` in [this Pixel factory image](https://dl.google.com/dl/android/aosp/coral-qq3a.200805.001-factory-875379d2.zip). ``` ~/bin/vmlinux-to-elf/kallsyms-finder ./boot.img [+] Kernel successfully decompressed in-memory (the offsets that follow will be given relative to the decompressed binary)...
Hello, thanx for your great work! I convert with your tool a Qualcomm zImage to ELF its ( UNCOMPRESSED_IMG) with append DTB) you know how it is compresssed? I cant...
``` $ vmlinux-to-elf vmlinuz-3.13.11-1-amd64-vyos vyos.elf [+] Kernel successfully decompressed in-memory (the offsets that follow will be given relative to the decompressed binary) [+] Version string: Linux version 3.13.11-1-amd64-vyos (jenkins@squeeze64devel) (gcc...
Hello, there is unfortunately an issue with some android 10 kernels: ``` [+] Version string: Linux version 4.14.117-perf+ (OnePlus@rd-build-91) (clang version 8.0.8 for Android NDK) #1 SMP PREEMPT Mon Sep...
First of all great project 👍 I can imagine this project will help tons of firmware researchers out there. I've met a problem though. I'm currently doing research on a...
Without this change the code will always assume has_base_relative=True which will break kernels that are not built with CONFIG_KALLSYMS_BASE_RELATIVE.
I had the problem that for a batch task, I only needed the symbol printed to `stdout`. Therefore, I made the meta information optional.
