1 #source: tlsbinpic.s 2 #source: tlsbin.s 3 #as: --64 4 #ld: -shared -melf_x86_64 --no-ld-generated-unwind-info 5 #objdump: -drj.text 6 #target: x86_64-*-* 7 8 # PT_TLS layout is: 9 # Offset from Offset from Name 10 # TCB base TCB end 11 # 0x00 -0xa0 sg1..sg8 12 # 0x20 -0x80 sl1..sl8 13 # 0x40 -0x60 sh1..sh8 14 # 0x60 -0x40 bg1..bg8 15 # 0x80 -0x20 bl1..bl8 16 17 .*: +file format elf64-x86-64.* 18 19 Disassembly of section .text: 20 21 [0-9a-f]+ <fn2>: 22 +[0-9a-f]+: 55[ ]+push %rbp 23 +[0-9a-f]+: 48 89 e5[ ]+mov %rsp,%rbp 24 # GD -> IE because variable is not defined in executable 25 +[0-9a-f]+: 64 48 8b 04 25 00 00[ ]+mov %fs:0x0,%rax 26 +[0-9a-f]+: 00 00 * 27 +[0-9a-f]+: 48 03 05 ([0-9a-f]{2} ){4}[ ]+add 0x[0-9a-f]+\(%rip\),%rax +# [0-9a-f]+ <_DYNAMIC\+0x158> 28 # -> R_X86_64_TPOFF64 sG1 29 +[0-9a-f]+: 90[ ]+nop * 30 +[0-9a-f]+: 90[ ]+nop * 31 +[0-9a-f]+: 90[ ]+nop * 32 +[0-9a-f]+: 90[ ]+nop * 33 # GD -> IE because variable is not defined in executable where 34 # the variable is referenced through IE too 35 +[0-9a-f]+: 64 48 8b 04 25 00 00[ ]+mov %fs:0x0,%rax 36 +[0-9a-f]+: 00 00 * 37 +[0-9a-f]+: 48 03 05 ([0-9a-f]{2} ){4}[ ]+add 0x[0-9a-f]+\(%rip\),%rax +# [0-9a-f]+ <_DYNAMIC\+0x148> 38 # -> R_X86_64_TPOFF64 sG2 39 +[0-9a-f]+: 90[ ]+nop * 40 +[0-9a-f]+: 90[ ]+nop * 41 +[0-9a-f]+: 90[ ]+nop * 42 +[0-9a-f]+: 90[ ]+nop * 43 # GD -> LE with global variable defined in executable 44 +[0-9a-f]+: 64 48 8b 04 25 00 00[ ]+mov %fs:0x0,%rax 45 +[0-9a-f]+: 00 00 * 46 +[0-9a-f]+: 48 8d 80 60 ff ff ff[ ]+lea -0xa0\(%rax\),%rax 47 # sg1 48 +[0-9a-f]+: 90[ ]+nop * 49 +[0-9a-f]+: 90[ ]+nop * 50 +[0-9a-f]+: 90[ ]+nop * 51 +[0-9a-f]+: 90[ ]+nop * 52 # GD -> LE with local variable defined in executable 53 +[0-9a-f]+: 64 48 8b 04 25 00 00[ ]+mov %fs:0x0,%rax 54 +[0-9a-f]+: 00 00 * 55 +[0-9a-f]+: 48 8d 80 80 ff ff ff[ ]+lea -0x80\(%rax\),%rax 56 # sl1 57 +[0-9a-f]+: 90[ ]+nop * 58 +[0-9a-f]+: 90[ ]+nop * 59 +[0-9a-f]+: 90[ ]+nop * 60 +[0-9a-f]+: 90[ ]+nop * 61 # GD -> LE with hidden variable defined in executable 62 +[0-9a-f]+: 64 48 8b 04 25 00 00[ ]+mov %fs:0x0,%rax 63 +[0-9a-f]+: 00 00 * 64 +[0-9a-f]+: 48 8d 80 a0 ff ff ff[ ]+lea -0x60\(%rax\),%rax 65 # sh1 66 +[0-9a-f]+: 90[ ]+nop * 67 +[0-9a-f]+: 90[ ]+nop * 68 +[0-9a-f]+: 90[ ]+nop * 69 +[0-9a-f]+: 90[ ]+nop * 70 # LD -> LE 71 +[0-9a-f]+: 66 66 66 64 48 8b 04[ ]+data16 data16 data16 mov %fs:0x0,%rax 72 +[0-9a-f]+: 25 00 00 00 00 * 73 +[0-9a-f]+: 90[ ]+nop * 74 +[0-9a-f]+: 90[ ]+nop * 75 +[0-9a-f]+: 48 8d 90 81 ff ff ff[ ]+lea -0x7f\(%rax\),%rdx 76 # sl1+1 77 +[0-9a-f]+: 90[ ]+nop * 78 +[0-9a-f]+: 90[ ]+nop * 79 +[0-9a-f]+: 4c 8d 88 86 ff ff ff[ ]+lea -0x7a\(%rax\),%r9 80 # sl2+2 81 +[0-9a-f]+: 90[ ]+nop * 82 +[0-9a-f]+: 90[ ]+nop * 83 +[0-9a-f]+: 90[ ]+nop * 84 +[0-9a-f]+: 90[ ]+nop * 85 # LD -> LE against hidden variables 86 +[0-9a-f]+: 66 66 66 64 48 8b 04[ ]+data16 data16 data16 mov %fs:0x0,%rax 87 +[0-9a-f]+: 25 00 00 00 00 * 88 +[0-9a-f]+: 90[ ]+nop * 89 +[0-9a-f]+: 90[ ]+nop * 90 +[0-9a-f]+: 48 8d 90 a0 ff ff ff[ ]+lea -0x60\(%rax\),%rdx 91 # sh1 92 +[0-9a-f]+: 90[ ]+nop * 93 +[0-9a-f]+: 90[ ]+nop * 94 +[0-9a-f]+: 48 8d 88 a7 ff ff ff[ ]+lea -0x59\(%rax\),%rcx 95 # sh2+3 96 +[0-9a-f]+: 90[ ]+nop * 97 +[0-9a-f]+: 90[ ]+nop * 98 +[0-9a-f]+: 90[ ]+nop * 99 +[0-9a-f]+: 90[ ]+nop * 100 # IE against global var 101 +[0-9a-f]+: 64 4c 8b 0c 25 00 00[ ]+mov %fs:0x0,%r9 102 +[0-9a-f]+: 00 00 * 103 +[0-9a-f]+: 90[ ]+nop * 104 +[0-9a-f]+: 90[ ]+nop * 105 +[0-9a-f]+: 4c 03 0d ([0-9a-f]{2} ){4}[ ]+add 0x[0-9a-f]+\(%rip\),%r9 +# [0-9a-f]+ <_DYNAMIC\+0x148> 106 # -> R_X86_64_TPOFF64 sG2 107 +[0-9a-f]+: 90[ ]+nop * 108 +[0-9a-f]+: 90[ ]+nop * 109 +[0-9a-f]+: 90[ ]+nop * 110 +[0-9a-f]+: 90[ ]+nop * 111 # IE -> LE against global var defined in exec 112 +[0-9a-f]+: 64 4c 8b 14 25 00 00[ ]+mov %fs:0x0,%r10 113 +[0-9a-f]+: 00 00 * 114 +[0-9a-f]+: 90[ ]+nop * 115 +[0-9a-f]+: 90[ ]+nop * 116 +[0-9a-f]+: 4d 8d 92 60 ff ff ff[ ]+lea -0xa0\(%r10\),%r10 117 # sg1 118 +[0-9a-f]+: 90[ ]+nop * 119 +[0-9a-f]+: 90[ ]+nop * 120 +[0-9a-f]+: 90[ ]+nop * 121 +[0-9a-f]+: 90[ ]+nop * 122 # IE -> LE against local var 123 +[0-9a-f]+: 64 48 8b 04 25 00 00[ ]+mov %fs:0x0,%rax 124 +[0-9a-f]+: 00 00 * 125 +[0-9a-f]+: 90[ ]+nop * 126 +[0-9a-f]+: 90[ ]+nop * 127 +[0-9a-f]+: 48 8d 80 80 ff ff ff[ ]+lea -0x80\(%rax\),%rax 128 # sl1 129 +[0-9a-f]+: 90[ ]+nop * 130 +[0-9a-f]+: 90[ ]+nop * 131 +[0-9a-f]+: 90[ ]+nop * 132 +[0-9a-f]+: 90[ ]+nop * 133 # IE -> LE against hidden var 134 +[0-9a-f]+: 64 48 8b 0c 25 00 00[ ]+mov %fs:0x0,%rcx 135 +[0-9a-f]+: 00 00 * 136 +[0-9a-f]+: 90[ ]+nop * 137 +[0-9a-f]+: 90[ ]+nop * 138 +[0-9a-f]+: 48 8d 89 a0 ff ff ff[ ]+lea -0x60\(%rcx\),%rcx 139 # sh1 140 +[0-9a-f]+: 90[ ]+nop * 141 +[0-9a-f]+: 90[ ]+nop * 142 +[0-9a-f]+: 90[ ]+nop * 143 +[0-9a-f]+: 90[ ]+nop * 144 # Direct access through %fs 145 # IE against global var 146 +[0-9a-f]+: 48 8b 0d ([0-9a-f]{2} ){4}[ ]+mov 0x[0-9a-f]+\(%rip\),%rcx +# [0-9a-f]+ <_DYNAMIC\+0x140> 147 # -> R_X86_64_TPOFF64 sG5 148 +[0-9a-f]+: 90[ ]+nop * 149 +[0-9a-f]+: 90[ ]+nop * 150 +[0-9a-f]+: 64 48 8b 11[ ]+mov %fs:\(%rcx\),%rdx 151 +[0-9a-f]+: 90[ ]+nop * 152 +[0-9a-f]+: 90[ ]+nop * 153 +[0-9a-f]+: 90[ ]+nop * 154 +[0-9a-f]+: 90[ ]+nop * 155 # IE->LE against local var 156 +[0-9a-f]+: 49 c7 c3 90 ff ff ff[ ]+mov \$0xf+90,%r11 157 # sl5 158 +[0-9a-f]+: 90[ ]+nop * 159 +[0-9a-f]+: 90[ ]+nop * 160 +[0-9a-f]+: 64 4d 8b 23[ ]+mov %fs:\(%r11\),%r12 161 +[0-9a-f]+: 90[ ]+nop * 162 +[0-9a-f]+: 90[ ]+nop * 163 +[0-9a-f]+: 90[ ]+nop * 164 +[0-9a-f]+: 90[ ]+nop * 165 # IE->LE against hidden var 166 +[0-9a-f]+: 48 c7 c2 b0 ff ff ff[ ]+mov \$0xf+b0,%rdx 167 +[0-9a-f]+: 90[ ]+nop * 168 +[0-9a-f]+: 90[ ]+nop * 169 +[0-9a-f]+: 64 48 8b 12[ ]+mov %fs:\(%rdx\),%rdx 170 # sh5 171 +[0-9a-f]+: 90[ ]+nop * 172 +[0-9a-f]+: 90[ ]+nop * 173 +[0-9a-f]+: 90[ ]+nop * 174 +[0-9a-f]+: 90[ ]+nop * 175 +[0-9a-f]+: c9[ ]+leaveq * 176 +[0-9a-f]+: c3[ ]+retq * 177 178 [0-9a-f]+ <_start>: 179 +[0-9a-f]+: 55[ ]+push %rbp 180 +[0-9a-f]+: 48 89 e5[ ]+mov %rsp,%rbp 181 # IE against global var 182 +[0-9a-f]+: 64 4c 8b 1c 25 00 00[ ]+mov %fs:0x0,%r11 183 +[0-9a-f]+: 00 00 * 184 +[0-9a-f]+: 90[ ]+nop * 185 +[0-9a-f]+: 90[ ]+nop * 186 +[0-9a-f]+: 4c 03 1d ([0-9a-f]{2} ){4}[ ]+add 0x[0-9a-f]+\(%rip\),%r11 +# [0-9a-f]+ <_DYNAMIC\+0x150> 187 # -> R_X86_64_TPOFF64 sG6 188 +[0-9a-f]+: 90[ ]+nop * 189 +[0-9a-f]+: 90[ ]+nop * 190 +[0-9a-f]+: 90[ ]+nop * 191 +[0-9a-f]+: 90[ ]+nop * 192 # IE -> LE against global var defined in exec 193 +[0-9a-f]+: 64 48 8b 14 25 00 00[ ]+mov %fs:0x0,%rdx 194 +[0-9a-f]+: 00 00 * 195 +[0-9a-f]+: 90[ ]+nop * 196 +[0-9a-f]+: 90[ ]+nop * 197 +[0-9a-f]+: 48 8d 92 d4 ff ff ff[ ]+lea -0x2c\(%rdx\),%rdx 198 # bg6 199 +[0-9a-f]+: 90[ ]+nop * 200 +[0-9a-f]+: 90[ ]+nop * 201 +[0-9a-f]+: 90[ ]+nop * 202 +[0-9a-f]+: 90[ ]+nop * 203 # IE -> LE against local var 204 +[0-9a-f]+: 64 4c 8b 24 25 00 00[ ]+mov %fs:0x0,%r12 205 +[0-9a-f]+: 00 00 * 206 +[0-9a-f]+: 90[ ]+nop * 207 +[0-9a-f]+: 90[ ]+nop * 208 +[0-9a-f]+: 49 81 c4 f4 ff ff ff[ ]+add \$0xf+f4,%r12 209 # bl6 210 +[0-9a-f]+: 90[ ]+nop * 211 +[0-9a-f]+: 90[ ]+nop * 212 +[0-9a-f]+: 90[ ]+nop * 213 +[0-9a-f]+: 90[ ]+nop * 214 # direct %fs access IE -> LE against local var 215 +[0-9a-f]+: 48 c7 c2 fc ff ff ff[ ]+mov \$0xf+fc,%rdx 216 # bl8 217 +[0-9a-f]+: 90[ ]+nop * 218 +[0-9a-f]+: 90[ ]+nop * 219 +[0-9a-f]+: 64 48 8b 02[ ]+mov %fs:\(%rdx\),%rax 220 +[0-9a-f]+: 90[ ]+nop * 221 +[0-9a-f]+: 90[ ]+nop * 222 +[0-9a-f]+: 90[ ]+nop * 223 +[0-9a-f]+: 90[ ]+nop * 224 # IE -> LE against hidden but not local var 225 +[0-9a-f]+: 64 48 8b 14 25 00 00[ ]+mov %fs:0x0,%rdx 226 +[0-9a-f]+: 00 00 * 227 +[0-9a-f]+: 90[ ]+nop * 228 +[0-9a-f]+: 90[ ]+nop * 229 +[0-9a-f]+: 48 8d 92 b4 ff ff ff[ ]+lea -0x4c\(%rdx\),%rdx 230 # sh6 231 +[0-9a-f]+: 90[ ]+nop * 232 +[0-9a-f]+: 90[ ]+nop * 233 +[0-9a-f]+: 90[ ]+nop * 234 +[0-9a-f]+: 90[ ]+nop * 235 # direct %fs access IE -> LE against hidden but not local var 236 +[0-9a-f]+: 48 c7 c2 bc ff ff ff[ ]+mov \$0xf+bc,%rdx 237 # sh8 238 +[0-9a-f]+: 90[ ]+nop * 239 +[0-9a-f]+: 90[ ]+nop * 240 +[0-9a-f]+: 64 48 8b 02[ ]+mov %fs:\(%rdx\),%rax 241 +[0-9a-f]+: 90[ ]+nop * 242 +[0-9a-f]+: 90[ ]+nop * 243 +[0-9a-f]+: 90[ ]+nop * 244 +[0-9a-f]+: 90[ ]+nop * 245 # LE, global var defined in exec 246 +[0-9a-f]+: 64 48 8b 04 25 00 00[ ]+mov %fs:0x0,%rax 247 +[0-9a-f]+: 00 00 * 248 +[0-9a-f]+: 90[ ]+nop * 249 +[0-9a-f]+: 90[ ]+nop * 250 +[0-9a-f]+: 48 8d 90 64 ff ff ff[ ]+lea -0x9c\(%rax\),%rdx 251 # sg2 252 +[0-9a-f]+: 90[ ]+nop * 253 +[0-9a-f]+: 90[ ]+nop * 254 +[0-9a-f]+: 90[ ]+nop * 255 +[0-9a-f]+: 90[ ]+nop * 256 # LE, local var, non-canonical sequence 257 +[0-9a-f]+: 49 c7 c1 e6 ff ff ff[ ]+mov \$0xf+e6,%r9 258 # bl2+2 259 +[0-9a-f]+: 90[ ]+nop * 260 +[0-9a-f]+: 90[ ]+nop * 261 +[0-9a-f]+: 64 48 8b 14 25 00 00[ ]+mov %fs:0x0,%rdx 262 +[0-9a-f]+: 00 00 * 263 +[0-9a-f]+: 90[ ]+nop * 264 +[0-9a-f]+: 90[ ]+nop * 265 +[0-9a-f]+: 4c 01 ca[ ]+add %r9,%rdx 266 +[0-9a-f]+: 90[ ]+nop * 267 +[0-9a-f]+: 90[ ]+nop * 268 +[0-9a-f]+: 90[ ]+nop * 269 +[0-9a-f]+: 90[ ]+nop * 270 # LE, hidden var defined in exec, non-canonical sequence 271 +[0-9a-f]+: 64 48 8b 14 25 00 00[ ]+mov %fs:0x0,%rdx 272 +[0-9a-f]+: 00 00 * 273 +[0-9a-f]+: 90[ ]+nop * 274 +[0-9a-f]+: 90[ ]+nop * 275 +[0-9a-f]+: 48 81 c2 a5 ff ff ff[ ]+add \$0xf+a5,%rdx 276 # sh2+1 277 +[0-9a-f]+: 90[ ]+nop * 278 +[0-9a-f]+: 90[ ]+nop * 279 +[0-9a-f]+: 90[ ]+nop * 280 +[0-9a-f]+: 90[ ]+nop * 281 # Direct %fs access 282 # LE, global var defined in exec 283 +[0-9a-f]+: 64 48 8b 04 25 68 ff[ ]+mov %fs:0xf+68,%rax 284 +[0-9a-f]+: ff ff * 285 # sg3 286 +[0-9a-f]+: 90[ ]+nop * 287 +[0-9a-f]+: 90[ ]+nop * 288 +[0-9a-f]+: 90[ ]+nop * 289 +[0-9a-f]+: 90[ ]+nop * 290 # LE, local var 291 +[0-9a-f]+: 64 4c 8b 14 25 eb ff[ ]+mov %fs:0xf+eb,%r10 292 +[0-9a-f]+: ff ff * 293 # bl3+3 294 +[0-9a-f]+: 90[ ]+nop * 295 +[0-9a-f]+: 90[ ]+nop * 296 +[0-9a-f]+: 90[ ]+nop * 297 +[0-9a-f]+: 90[ ]+nop * 298 # LE, hidden var defined in exec 299 +[0-9a-f]+: 64 48 8b 14 25 a9 ff[ ]+mov %fs:0xf+a9,%rdx 300 +[0-9a-f]+: ff ff * 301 # sh3+1 302 +[0-9a-f]+: 90[ ]+nop * 303 +[0-9a-f]+: 90[ ]+nop * 304 +[0-9a-f]+: 90[ ]+nop * 305 +[0-9a-f]+: 90[ ]+nop * 306 # LE, large model 307 +[0-9a-f]+: 48 ba a5 ff ff ff ff[ ]+movabs \$0xffffffffffffffa5,%rdx 308 +[0-9a-f]+: ff ff ff * 309 +[0-9a-f]+: c9[ ]+leaveq * 310 +[0-9a-f]+: c3[ ]+retq * 311
