2 * pedump.c: Dumps the contents of an extended PE/COFF file
5 * Miguel de Icaza (miguel@ximian.com)
7 * Copyright 2001-2003 Ximian, Inc (http://www.ximian.com)
8 * Copyright 2004-2009 Novell, Inc (http://www.novell.com)
17 #include "mono-endian.h"
19 #include <mono/metadata/class.h>
20 #include <mono/metadata/debug-helpers.h>
21 #include <mono/metadata/tokentype.h>
22 #include <mono/metadata/appdomain.h>
23 #include <mono/metadata/assembly.h>
24 #include <mono/metadata/metadata-internals.h>
25 #include <mono/metadata/class-internals.h>
26 #include <mono/metadata/verify-internals.h>
27 #include <mono/metadata/marshal.h>
28 #include "mono/utils/mono-digest.h"
29 #include <mono/utils/mono-mmap.h>
30 #include <sys/types.h>
36 gboolean dump_data = TRUE;
37 gboolean verify_pe = FALSE;
38 gboolean verify_metadata = FALSE;
39 gboolean verify_code = FALSE;
43 hex_dump (const char *buffer, int base, int count)
47 for (i = 0; i < count; i++){
49 printf ("\n0x%08x: ", (unsigned char) base + i);
51 printf ("%02x ", (unsigned char) (buffer [i]));
57 hex8 (const char *label, unsigned char x)
59 printf ("\t%s: 0x%02x\n", label, (unsigned char) x);
63 hex16 (const char *label, guint16 x)
65 printf ("\t%s: 0x%04x\n", label, x);
69 hex32 (const char *label, guint32 x)
71 printf ("\t%s: 0x%08x\n", label, x);
75 dump_coff_header (MonoCOFFHeader *coff)
77 printf ("\nCOFF Header:\n");
78 hex16 (" Machine", coff->coff_machine);
79 hex16 (" Sections", coff->coff_sections);
80 hex32 (" Time stamp", coff->coff_time);
81 hex32 ("Pointer to Symbol Table", coff->coff_symptr);
82 hex32 (" Symbol Count", coff->coff_symcount);
83 hex16 (" Optional Header Size", coff->coff_opt_header_size);
84 hex16 (" Characteristics", coff->coff_attributes);
89 dump_pe_header (MonoPEHeader *pe)
91 printf ("\nPE Header:\n");
92 hex16 (" Magic (0x010b)", pe->pe_magic);
93 hex8 (" LMajor (6)", pe->pe_major);
94 hex8 (" LMinor (0)", pe->pe_minor);
95 hex32 (" Code Size", pe->pe_code_size);
96 hex32 (" Initialized Data Size", pe->pe_data_size);
97 hex32 ("Uninitialized Data Size", pe->pe_uninit_data_size);
98 hex32 (" Entry Point RVA", pe->pe_rva_entry_point);
99 hex32 (" Code Base RVA", pe->pe_rva_code_base);
100 hex32 (" Data Base RVA", pe->pe_rva_data_base);
105 dump_nt_header (MonoPEHeaderNT *nt)
107 printf ("\nNT Header:\n");
109 hex32 (" Image Base (0x400000)", nt->pe_image_base);
110 hex32 ("Section Alignment (8192)", nt->pe_section_align);
111 hex32 (" File Align (512/4096)", nt->pe_file_alignment);
112 hex16 (" OS Major (4)", nt->pe_os_major);
113 hex16 (" OS Minor (0)", nt->pe_os_minor);
114 hex16 (" User Major (0)", nt->pe_user_major);
115 hex16 (" User Minor (0)", nt->pe_user_minor);
116 hex16 (" Subsys major (4)", nt->pe_subsys_major);
117 hex16 (" Subsys minor (0)", nt->pe_subsys_minor);
118 hex32 (" Reserverd", nt->pe_reserved_1);
119 hex32 (" Image Size", nt->pe_image_size);
120 hex32 (" Header Size", nt->pe_header_size);
121 hex32 (" Checksum (0)", nt->pe_checksum);
122 hex16 (" Subsystem", nt->pe_subsys_required);
123 hex16 (" DLL Flags (0)", nt->pe_dll_flags);
124 hex32 (" Stack Reserve Size (1M)", nt->pe_stack_reserve);
125 hex32 ("Stack commit Size (4096)", nt->pe_stack_commit);
126 hex32 (" Heap Reserve Size (1M)", nt->pe_heap_reserve);
127 hex32 (" Heap Commit Size (4096)", nt->pe_heap_commit);
128 hex32 (" Loader flags (0x1)", nt->pe_loader_flags);
129 hex32 (" Data Directories (16)", nt->pe_data_dir_count);
133 dent (const char *label, MonoPEDirEntry de)
135 printf ("\t%s: 0x%08x [0x%08x]\n", label, de.rva, de.size);
139 dump_blob (const char *desc, const char* p, guint32 size)
149 for (i = 0; i < size; ++i) {
152 printf (" %02X", p [i] & 0xFF);
158 dump_public_key (MonoImage *m)
163 p = mono_image_get_public_key (m, &size);
164 dump_blob ("\nPublic key:", p, size);
168 dump_strong_name (MonoImage *m)
173 p = mono_image_get_strong_name (m, &size);
174 dump_blob ("\nStrong name:", p, size);
178 dump_datadir (MonoPEDatadir *dd)
180 printf ("\nData directories:\n");
181 dent (" Export Table", dd->pe_export_table);
182 dent (" Import Table", dd->pe_import_table);
183 dent (" Resource Table", dd->pe_resource_table);
184 dent (" Exception Table", dd->pe_exception_table);
185 dent ("Certificate Table", dd->pe_certificate_table);
186 dent (" Reloc Table", dd->pe_reloc_table);
187 dent (" Debug", dd->pe_debug);
188 dent (" Copyright", dd->pe_copyright);
189 dent (" Global Ptr", dd->pe_global_ptr);
190 dent (" TLS Table", dd->pe_tls_table);
191 dent ("Load Config Table", dd->pe_load_config_table);
192 dent (" Bound Import", dd->pe_bound_import);
193 dent (" IAT", dd->pe_iat);
194 dent ("Delay Import Desc", dd->pe_delay_import_desc);
195 dent (" CLI Header", dd->pe_cli_header);
199 dump_dotnet_header (MonoDotNetHeader *header)
201 dump_coff_header (&header->coff);
202 dump_pe_header (&header->pe);
203 dump_nt_header (&header->nt);
204 dump_datadir (&header->datadir);
208 dump_section_table (MonoSectionTable *st)
210 guint32 flags = st->st_flags;
212 printf ("\n\tName: %s\n", st->st_name);
213 hex32 (" Virtual Size", st->st_virtual_size);
214 hex32 ("Virtual Address", st->st_virtual_address);
215 hex32 (" Raw Data Size", st->st_raw_data_size);
216 hex32 (" Raw Data Ptr", st->st_raw_data_ptr);
217 hex32 (" Reloc Ptr", st->st_reloc_ptr);
218 hex32 (" LineNo Ptr", st->st_lineno_ptr);
219 hex16 (" Reloc Count", st->st_reloc_count);
220 hex16 (" Line Count", st->st_line_count);
222 printf ("\tFlags: %s%s%s%s%s%s%s%s%s%s\n",
223 (flags & SECT_FLAGS_HAS_CODE) ? "code, " : "",
224 (flags & SECT_FLAGS_HAS_INITIALIZED_DATA) ? "data, " : "",
225 (flags & SECT_FLAGS_HAS_UNINITIALIZED_DATA) ? "bss, " : "",
226 (flags & SECT_FLAGS_MEM_DISCARDABLE) ? "discard, " : "",
227 (flags & SECT_FLAGS_MEM_NOT_CACHED) ? "nocache, " : "",
228 (flags & SECT_FLAGS_MEM_NOT_PAGED) ? "nopage, " : "",
229 (flags & SECT_FLAGS_MEM_SHARED) ? "shared, " : "",
230 (flags & SECT_FLAGS_MEM_EXECUTE) ? "exec, " : "",
231 (flags & SECT_FLAGS_MEM_READ) ? "read, " : "",
232 (flags & SECT_FLAGS_MEM_WRITE) ? "write" : "");
236 dump_sections (MonoCLIImageInfo *iinfo)
238 const int top = iinfo->cli_header.coff.coff_sections;
241 for (i = 0; i < top; i++)
242 dump_section_table (&iinfo->cli_section_tables [i]);
246 dump_cli_header (MonoCLIHeader *ch)
249 printf (" CLI header size: %d\n", ch->ch_size);
250 printf (" Runtime required: %d.%d\n", ch->ch_runtime_major, ch->ch_runtime_minor);
251 printf (" Flags: %s, %s, %s, %s\n",
252 (ch->ch_flags & CLI_FLAGS_ILONLY ? "ilonly" : "contains native"),
253 (ch->ch_flags & CLI_FLAGS_32BITREQUIRED ? "32bits" : "32/64"),
254 (ch->ch_flags & CLI_FLAGS_TRACKDEBUGDATA ? "trackdebug" : "no-trackdebug"),
255 (ch->ch_flags & CLI_FLAGS_STRONGNAMESIGNED ? "strongnamesigned" : "notsigned"));
256 dent (" Metadata", ch->ch_metadata);
257 hex32 ("Entry Point Token", ch->ch_entry_point);
258 dent (" Resources at", ch->ch_resources);
259 dent (" Strong Name at", ch->ch_strong_name);
260 dent (" Code Manager at", ch->ch_code_manager_table);
261 dent (" VTableFixups at", ch->ch_vtable_fixups);
262 dent (" EAT jumps at", ch->ch_export_address_table_jumps);
266 dsh (const char *label, MonoImage *meta, MonoStreamHeader *sh)
268 printf ("%s: 0x%08x - 0x%08x [%d == 0x%08x]\n",
270 (int)(sh->data - meta->raw_metadata), (int)(sh->data + sh->size - meta->raw_metadata),
275 dump_metadata_header (MonoImage *meta)
277 printf ("\nMetadata header:\n");
278 printf (" Version: %d.%d\n", meta->md_version_major, meta->md_version_minor);
279 printf (" Version string: %s\n", meta->version);
283 dump_metadata_ptrs (MonoImage *meta)
285 printf ("\nMetadata pointers:\n");
286 dsh ("\tTables (#~)", meta, &meta->heap_tables);
287 dsh ("\t Strings", meta, &meta->heap_strings);
288 dsh ("\t Blob", meta, &meta->heap_blob);
289 dsh ("\tUser string", meta, &meta->heap_us);
290 dsh ("\t GUID", meta, &meta->heap_guid);
294 dump_metadata (MonoImage *meta)
298 dump_metadata_header (meta);
300 dump_metadata_ptrs (meta);
303 for (table = 0; table < MONO_TABLE_NUM; table++){
304 if (meta->tables [table].rows == 0)
306 printf ("Table %s: %d records (%d bytes, at %x)\n",
307 mono_meta_table_name (table),
308 meta->tables [table].rows,
309 meta->tables [table].row_size,
310 (unsigned int)(meta->tables [table].base - meta->raw_data)
316 dump_methoddef (MonoImage *metadata, guint32 token)
322 loc = mono_metadata_locate_token (metadata, token);
324 printf ("RVA for Entry Point: 0x%08x\n", read32 (loc));
328 dump_dotnet_iinfo (MonoImage *image)
330 MonoCLIImageInfo *iinfo = image->image_info;
332 dump_dotnet_header (&iinfo->cli_header);
333 dump_sections (iinfo);
334 dump_cli_header (&iinfo->cli_cli_header);
335 dump_strong_name (image);
336 dump_public_key (image);
337 dump_metadata (image);
339 dump_methoddef (image, iinfo->cli_cli_header.ch_entry_point);
343 dump_verify_info (MonoImage *image, int flags)
345 GSList *errors, *tmp;
346 int count = 0, verifiable = 0;
347 const char* desc [] = {
348 "Ok", "Error", "Warning", NULL, "CLS", NULL, NULL, NULL, "Not Verifiable"
351 if (verify_metadata) {
352 errors = mono_image_verify_tables (image, flags);
354 for (tmp = errors; tmp; tmp = tmp->next) {
355 MonoVerifyInfo *info = tmp->data;
356 g_print ("%s: %s\n", desc [info->status], info->message);
357 if (info->status == MONO_VERIFY_ERROR)
360 mono_free_verify_list (errors);
363 if (verify_code) { /* verify code */
365 MonoTableInfo *m = &image->tables [MONO_TABLE_METHOD];
367 for (i = 0; i < m->rows; ++i) {
369 method = mono_get_method (image, MONO_TOKEN_METHOD_DEF | (i+1), NULL);
371 g_print ("Warning: Cannot lookup method with token 0x%08x\n", i + 1);
374 errors = mono_method_verify (method, flags);
376 MonoClass *klass = mono_method_get_class (method);
377 char *name = mono_type_full_name (&klass->byval_arg);
378 if (mono_method_signature (method) == NULL) {
379 g_print ("In method: %s::%s(ERROR)\n", name, mono_method_get_name (method));
382 sig = mono_signature_get_desc (mono_method_signature (method), FALSE);
383 g_print ("In method: %s::%s(%s)\n", name, mono_method_get_name (method), sig);
389 for (tmp = errors; tmp; tmp = tmp->next) {
390 MonoVerifyInfo *info = tmp->data;
391 g_print ("%s: %s\n", desc [info->status], info->message);
392 if (info->status == MONO_VERIFY_ERROR) {
396 if(info->status == MONO_VERIFY_NOT_VERIFIABLE) {
401 mono_free_verify_list (errors);
406 g_print ("Error count: %d\n", count);
413 printf ("Usage is: pedump [--verify error,warn,cls,all,code,fail-on-verifiable,non-strict,valid-only,metadata] file.exe\n");
418 verify_image_file (const char *fname)
420 GSList *errors = NULL, *tmp;
422 MonoImageOpenStatus status;
424 const char* desc [] = {
425 "Ok", "Error", "Warning", NULL, "CLS", NULL, NULL, NULL, "Not Verifiable"
428 image = mono_image_open_raw (fname, &status);
430 printf ("Could not open %s\n", fname);
434 if (!mono_verifier_verify_pe_data (image, &errors))
437 if (!mono_image_load_pe_data (image)) {
438 printf ("Could not load pe data for assembly %s\n", fname);
442 if (!mono_verifier_verify_cli_data (image, &errors))
445 if (!mono_image_load_cli_data (image)) {
446 printf ("Could not load cli data for assembly %s\n", fname);
450 if (!mono_verifier_verify_table_data (image, &errors))
456 for (tmp = errors; tmp; tmp = tmp->next) {
457 MonoVerifyInfo *info = tmp->data;
458 g_print ("%s: %s\n", desc [info->status], info->message);
459 if (info->status == MONO_VERIFY_ERROR)
462 mono_free_verify_list (errors);
464 g_print ("Error count: %d\n", count);
469 try_load_from (MonoAssembly **assembly, const gchar *path1, const gchar *path2,
470 const gchar *path3, const gchar *path4, gboolean refonly)
475 fullpath = g_build_filename (path1, path2, path3, path4, NULL);
476 if (g_file_test (fullpath, G_FILE_TEST_IS_REGULAR))
477 *assembly = mono_assembly_open_full (fullpath, NULL, refonly);
480 return (*assembly != NULL);
483 static MonoAssembly *
484 real_load (gchar **search_path, const gchar *culture, const gchar *name, gboolean refonly)
486 MonoAssembly *result = NULL;
489 const gchar *local_culture;
492 if (!culture || *culture == '\0') {
495 local_culture = culture;
498 filename = g_strconcat (name, ".dll", NULL);
499 len = strlen (filename);
501 for (path = search_path; *path; path++) {
503 continue; /* Ignore empty ApplicationBase */
505 /* See test cases in bug #58992 and bug #57710 */
506 /* 1st try: [culture]/[name].dll (culture may be empty) */
507 strcpy (filename + len - 4, ".dll");
508 if (try_load_from (&result, *path, local_culture, "", filename, refonly))
511 /* 2nd try: [culture]/[name].exe (culture may be empty) */
512 strcpy (filename + len - 4, ".exe");
513 if (try_load_from (&result, *path, local_culture, "", filename, refonly))
516 /* 3rd try: [culture]/[name]/[name].dll (culture may be empty) */
517 strcpy (filename + len - 4, ".dll");
518 if (try_load_from (&result, *path, local_culture, name, filename, refonly))
521 /* 4th try: [culture]/[name]/[name].exe (culture may be empty) */
522 strcpy (filename + len - 4, ".exe");
523 if (try_load_from (&result, *path, local_culture, name, filename, refonly))
532 * Try to load referenced assemblies from assemblies_path.
534 static MonoAssembly *
535 pedump_preload (MonoAssemblyName *aname,
536 gchar **assemblies_path,
539 MonoAssembly *result = NULL;
540 gboolean refonly = GPOINTER_TO_UINT (user_data);
542 if (assemblies_path && assemblies_path [0] != NULL) {
543 result = real_load (assemblies_path, aname->culture, aname->name, refonly);
549 static GList *loaded_assemblies = NULL;
552 pedump_assembly_load_hook (MonoAssembly *assembly, gpointer user_data)
554 loaded_assemblies = g_list_prepend (loaded_assemblies, assembly);
557 static MonoAssembly *
558 pedump_assembly_search_hook (MonoAssemblyName *aname, gpointer user_data)
562 for (tmp = loaded_assemblies; tmp; tmp = tmp->next) {
563 MonoAssembly *ass = tmp->data;
564 if (mono_assembly_names_equal (aname, &ass->aname))
570 #define VALID_ONLY_FLAG 0x08000000
571 #define VERIFY_CODE_ONLY MONO_VERIFY_ALL + 1
572 #define VERIFY_METADATA_ONLY VERIFY_CODE_ONLY + 1
575 main (int argc, char *argv [])
580 MiniVerifierMode verifier_mode = MONO_VERIFIER_MODE_VERIFIABLE;
581 const char *flag_desc [] = {"error", "warn", "cls", "all", "code", "fail-on-verifiable", "non-strict", "valid-only", "metadata", NULL};
582 guint flag_vals [] = {MONO_VERIFY_ERROR, MONO_VERIFY_WARNING, MONO_VERIFY_CLS, MONO_VERIFY_ALL, VERIFY_CODE_ONLY, MONO_VERIFY_FAIL_FAST, MONO_VERIFY_NON_STRICT, VALID_ONLY_FLAG, VERIFY_METADATA_ONLY, 0};
583 int i, verify_flags = MONO_VERIFY_REPORT_ALL_ERRORS, run_new_metadata_verifier = 0;
585 for (i = 1; i < argc; i++){
586 if (argv [i][0] != '-'){
591 if (strcmp (argv [i], "--help") == 0)
593 else if (strcmp (argv [i], "--verify") == 0) {
606 mono_perfcounters_init ();
607 mono_metadata_init ();
609 mono_assemblies_init ();
613 char *tok = strtok (flags, ",");
618 for (i = 0; flag_desc [i]; ++i) {
619 if (strcmp (tok, flag_desc [i]) == 0) {
620 if (flag_vals [i] == VERIFY_CODE_ONLY) {
623 } else if(flag_vals [i] == MONO_VERIFY_ALL) {
625 } else if(flag_vals [i] == VERIFY_METADATA_ONLY) {
627 run_new_metadata_verifier = 1;
629 if (flag_vals [i] == VALID_ONLY_FLAG)
630 verifier_mode = MONO_VERIFIER_MODE_VALID;
632 verify_flags |= flag_vals [i];
637 g_print ("Unknown verify flag %s\n", tok);
638 tok = strtok (NULL, ",");
641 mono_verifier_set_mode (verifier_mode);
645 if (verify_pe || run_new_metadata_verifier) {
646 mono_install_assembly_load_hook (pedump_assembly_load_hook, NULL);
647 mono_install_assembly_search_hook (pedump_assembly_search_hook, NULL);
649 mono_init_version ("pedump", "v2.0.50727");
651 mono_install_assembly_preload_hook (pedump_preload, GUINT_TO_POINTER (FALSE));
653 mono_marshal_init ();
654 run_new_metadata_verifier = 1;
657 if (run_new_metadata_verifier) {
659 mono_verifier_set_mode (MONO_VERIFIER_MODE_VERIFIABLE);
661 res = verify_image_file (file);
662 if (res || !verify_code)
666 image = mono_image_open (file, NULL);
668 fprintf (stderr, "Cannot open image %s\n", file);
673 dump_dotnet_iinfo (image);
675 MonoAssembly *assembly;
677 MonoImageOpenStatus status;
679 mono_verifier_set_mode (verifier_mode);
681 assembly = mono_assembly_open (file, NULL);
682 /*fake an assembly for netmodules so the verifier works*/
683 if (!assembly && (image = mono_image_open (file, &status)) && image->tables [MONO_TABLE_ASSEMBLY].rows == 0) {
684 assembly = g_new0 (MonoAssembly, 1);
685 assembly->in_gac = FALSE;
686 assembly->image = image;
687 image->assembly = assembly;
691 g_print ("Could not open assembly %s\n", file);
695 return dump_verify_info (assembly->image, verify_flags);
697 mono_image_close (image);