[SOLVED] Finding strings in the text section

Issue

I have as example the following code:

Foo( "Test1" );

void Foo(const char* const i_Test )
{
     // Some logic
}

The i_Test pointer in Foo() hold a pointer to the string in the .rodata section.

Is there any way to search the i_Text pointer value in the binary file to find the related String? Or can I produce any debug info using the gcc that will hold that info?

Solution

If you are talking about the ELF file format, constant strings are stored in the .rodata (read-only-data) section. Basically, only instructions (code) of your program are stored in the .text section in that binary file. You can investigate these sections by using an object dump program (e.g. objdump) like the following:

objdump -drS program.o           // to see .text section of your program

objdump -s -j .rodata program.o  // to see .rodata section of your program

In your example code above, the "Test1" string that you are passing to your Foo function will be treated as a constant string by the compiler. Thus, you can find its relative memory address before the loading stage and the i_Test pointer will be pointing to this constant string. However, if you have compiled your code as position independent (by using the -fPIC option in gcc), you may also find that the compiler will add a writable attribute to that read-only .rodata section. Furthermore, you may also use the readelf binary utility to display detailed information about the sections of your ELF formatted object file.

More information about the ELF file format can be found here

Answered By - Unavailable