dwarf2json icon indicating copy to clipboard operation
dwarf2json copied to clipboard
verified publisher icon volatilityfoundation

dwarf2json: add FreeBSD kernel support

Open ant1 opened this issue 1 year ago • 1 comments

FreeBSD kernel ISF can be generated the same way as Linux FreeBSD kernel has a "version" string in the ".data" section

This is how I generate a FreeBSD ISF: dwarf2json linux --elf /usr/lib/debug/boot/kernel/kernel.debug --elf-symbols /boot/kernel/kernel > FreeBSD-14.0-RELEASE-p5-GENERIC-amd64.json

ant1 avatar Jun 25 '24 10:06 ant1

Tested it on several FreeBSD 14.0 and 14.1 kernels, works well. Will offer minor integration addition (freebsd subcommand) as PR to author's fork.

securechicken avatar Aug 31 '24 10:08 securechicken