Android SO 文件结构及readelf命令

   0x00 Android SO 文件结构

    so文件结构详细的分析，请看Android逆向之旅---SO(ELF)文件格式详解，这里就不重复造车轮子了。

    我们待分析的so已经上传到csdn，下载地址：http://download.csdn.net/detail/jltxgcy/9602803。

   0x01 readelf命令

   1.1 so文件整体图

   

    1.2 readelf文件位置

    Android下readelf位于android-ndk-r12/toolchains/arm-linux-androideabi-4.9/prebuilt/darwin-x86_64/bin中，文件名称为arm-linux-androideabi-readelf。

    1.3 read ELF Header    

    arm-linux-androideabi-readelf -h ~/Public/libPLTUtils.so

ELF Header:
  Magic:   7f 45 4c 46 01 01 01 00 00 00 00 00 00 00 00 00 
  Class:                             ELF32
  Data:                              2's complement, little endian
  Version:                           1 (current)
  OS/ABI:                            UNIX - System V
  ABI Version:                       0
  Type:                              DYN (Shared object file)
  Machine:                           ARM
  Version:                           0x1
  Entry point address:               0x0
  Start of program headers:          52 (bytes into file)
  Start of section headers:          12664 (bytes into file)
  Flags:                             0x5000200, Version5 EABI, soft-float ABI
  Size of this header:               52 (bytes)
  Size of program headers:           32 (bytes)
  Number of program headers:         9
  Size of section headers:           40 (bytes)
  Number of section headers:         26
  Section header string table index: 25

    

    1.4 read Program Header

    arm-linux-androideabi-readelf -l ~/Public/libPLTUtils.so 

Elf file type is DYN (Shared object file)
Entry point 0x0
There are 9 program headers, starting at offset 52

Program Headers:
  Type           Offset   VirtAddr   PhysAddr   FileSiz MemSiz  Flg Align
  PHDR           0x000034 0x00000034 0x00000034 0x00120