info > objdump(1)

man perldoc info pydoc3 ri search

📖 NAME

objdump - display information from object files

🚀 Quick Reference

Use Case	Command	Description
📋 View section headers	objdump -h file.o	Display summary info from section headers
🔧 Disassemble code sections	objdump -d file.o	Show assembler mnemonics for machine instructions
🔧 Disassemble all sections	objdump -D file.o	Disassemble all sections, including data
📄 Show full contents	objdump -s file.o	Display full contents of sections
📝 Intermix source	objdump -S file.o	Display source code with disassembly (-d implied)
🏷️ Symbol table	objdump -t file.o	Print symbol table entries
🔗 Relocations	objdump -r file.o	Print relocation entries
📦 Archive headers	objdump -a file.a	Show archive header info (like ar tv)
🧩 DWARF debug info	objdump -W file.o	Display DWARF debug sections
📋 All headers	objdump -x file.o	Equivalent to -a -f -h -p -r -t
🔍 Specific section	objdump -j .text file.o	Show info only for named section
📊 List architectures	objdump -i	Show all supported architectures and formats

📋 SYNOPSIS

objdump [-a|--archive-headers]
        [-b bfdname|--target=bfdname]
        [-C|--demangle[=style] ]
        [-d|--disassemble[=symbol]]
        [-D|--disassemble-all]
        [-z|--disassemble-zeroes]
        [-EB|-EL|--endian={big | little }]
        [-f|--file-headers]
        [-F|--file-offsets]
        [--file-start-context]
        [-g|--debugging]
        [-e|--debugging-tags]
        [-h|--section-headers|--headers]
        [-i|--info]
        [-j section|--section=section]
        [-l|--line-numbers]
        [-S|--source]
        [--source-comment[=text]]
        [-m machine|--architecture=machine]
        [-M options|--disassembler-options=options]
        [-p|--private-headers]
        [-P options|--private=options]
        [-r|--reloc]
        [-R|--dynamic-reloc]
        [-s|--full-contents]
        [-W[lLiaprmfFsoORtUuTgAck]|
         --dwarf[=rawline,=decodedline,=info,=abbrev,=pubnames,=aranges,=macro,=frames,=frames-interp,=str,=str-offsets,=loc,=Ranges,=pubtypes,=trace_info,=trace_abbrev,=trace_aranges,=gdb_index,=addr,=cu_index,=links]]
        [-WK|--dwarf=follow-links]
        [-WN|--dwarf=no-follow-links]
        [-L|--process-links]
        [--ctf=section]
        [-G|--stabs]
        [-t|--syms]
        [-T|--dynamic-syms]
        [-x|--all-headers]
        [-w|--wide]
        [--start-address=address]
        [--stop-address=address]
        [--no-addresses]
        [--prefix-addresses]
        [--[no-]show-raw-insn]
        [--adjust-vma=offset]
        [--dwarf-depth=n]
        [--dwarf-start=n]
        [--ctf-parent=section]
        [--no-recurse-limit|--recurse-limit]
        [--special-syms]
        [--prefix=prefix]
        [--prefix-strip=level]
        [--insn-width=width]
        [--visualize-jumps[=color|=extended-color|=off]
        [-U method] [--unicode=method]
        [-V|--version]
        [-H|--help]
        objfile...

📝 DESCRIPTION

objdump displays information about one or more object files. The options control what particular information to display. This information is mostly useful to programmers who are working on the compilation tools, as opposed to programmers who just want their program to compile and work.

objfile... are the object files to be examined. When you specify archives, objdump shows information on each of the member object files.

⚙️ OPTIONS

The long and short forms of options, shown here as alternatives, are equivalent. At least one option from the list -a,-d,-D,-e,-f,-g,-G,-h,-H,-p,-P,-r,-R,-s,-S,-t,-T,-V,-x must be given.

🗂️ -a, --archive-header

If any of the objfile files are archives, display the archive header information (in a format similar to ls -l). Besides the information you could list with ar tv, objdump -a shows the object file format of each archive member.

📐 --adjust-vma=offset

When dumping information, first add offset to all the section addresses. This is useful if the section addresses do not correspond to the symbol table, which can happen when putting sections at particular addresses when using a format which can not represent section addresses, such as a.out.

🎯 -b bfdname, --target=bfdname

Specify that the object-code format for the object files is bfdname. This option may not be necessary; objdump can automatically recognize many formats.

For example,

objdump -b oasys -m vax -h fu.o

displays summary information from the section headers (-h) of fu.o, which is explicitly identified (-m) as a VAX object file in the format produced by Oasys compilers. You can list the formats available with the -i option.

🔤 -C, --demangle[=style]

Decode (demangle) low-level symbol names into user-level names. Besides removing any initial underscore prepended by the system, this makes C++ function names readable. Different compilers have different mangling styles. The optional demangling style argument can be used to choose an appropriate demangling style for your compiler.

♾️ --recurse-limit, --no-recurse-limit

Enables or disables a limit on the amount of recursion performed whilst demangling strings. Since the name mangling formats allow for an infinite level of recursion it is possible to create strings whose decoding will exhaust the amount of stack space available on the host machine, triggering a memory fault. The limit tries to prevent this from happening by restricting recursion to 2048 levels of nesting.

The default is for this limit to be enabled, but disabling it may be necessary in order to demangle truly complicated names. Note however that if the recursion limit is disabled then stack exhaustion is possible and any bug reports about such an event will be rejected.

🐛 -g, --debugging

Display debugging information. This attempts to parse STABS debugging format information stored in the file and print it out using a C like syntax. If no STABS debugging was found this option falls back on the -W option to print any DWARF information in the file.

🏷️ -e, --debugging-tags

Like -g, but the information is generated in a format compatible with ctags tool.

🔧 -d, --disassemble, --disassemble=symbol

Display the assembler mnemonics for the machine instructions from the input file. This option only disassembles those sections which are expected to contain instructions. If the optional symbol argument is given, then display the assembler mnemonics starting at symbol. If symbol is a function name then disassembly will stop at the end of the function, otherwise it will stop when the next symbol is encountered. If there are no matches for symbol then nothing will be displayed.

Note if the --dwarf=follow-links option is enabled then any symbol tables in linked debug info files will be read in and used when disassembling.

🔧 -D, --disassemble-all

Like -d, but disassemble the contents of all sections, not just those expected to contain instructions.

This option also has a subtle effect on the disassembly of instructions in code sections. When option -d is in effect objdump will assume that any symbols present in a code section occur on the boundary between instructions and it will refuse to disassemble across such a boundary. When option -D is in effect however this assumption is supressed. This means that it is possible for the output of -d and -D to differ if, for example, data is stored in code sections.

If the target is an ARM architecture this switch also has the effect of forcing the disassembler to decode pieces of data found in code sections as if they were instructions.

Note if the --dwarf=follow-links option is enabled then any symbol tables in linked debug info files will be read in and used when disassembling.

🚫 --no-addresses

When disassembling, don't print addresses on each line or for symbols and relocation offsets. In combination with --no-show-raw-insn this may be useful for comparing compiler output.

📍 --prefix-addresses

When disassembling, print the complete address on each line. This is the older disassembly format.

🔀 -EB, -EL, --endian={big|little}

Specify the endianness of the object files. This only affects disassembly. This can be useful when disassembling a file format which does not describe endianness information, such as S-records.

📄 -f, --file-headers

Display summary information from the overall header of each of the objfile files.

📏 -F, --file-offsets

When disassembling sections, whenever a symbol is displayed, also display the file offset of the region of data that is about to be dumped. If zeroes are being skipped, then when disassembly resumes, tell the user how many zeroes were skipped and the file offset of the location from where the disassembly resumes. When dumping sections, display the file offset of the location from where the dump starts.

📄 --file-start-context

Specify that when displaying interlisted source code/disassembly (assumes -S) from a file that has not yet been displayed, extend the context to the start of the file.

📑 -h, --section-headers, --headers

Display summary information from the section headers of the object file.

File segments may be relocated to nonstandard addresses, for example by using the -Ttext, -Tdata, or -Tbss options to ld. However, some object file formats, such as a.out, do not store the starting address of the file segments. In those situations, although ld relocates the sections correctly, using objdump -h to list the file section headers cannot show the correct addresses. Instead, it shows the usual addresses, which are implicit for the target.

Note, in some cases it is possible for a section to have both the READONLY and the NOREAD attributes set. In such cases the NOREAD attribute takes precedence, but objdump will report both since the exact setting of the flag bits might be important.

❓ -H, --help

Print a summary of the options to objdump and exit.

ℹ️ -i, --info

Display a list showing all architectures and object formats available for specification with -b or -m.

🔍 -j name, --section=name

Display information only for section name.

🔗 -L, --process-links

Display the contents of non-debug sections found in separate debuginfo files that are linked to the main file. This option automatically implies the -WK option, and only sections requested by other command line options will be displayed.

📟 -l, --line-numbers

Label the display (using debugging information) with the filename and source line numbers corresponding to the object code or relocs shown. Only useful with -d, -D, or -r.

🏗️ -m machine, --architecture=machine

Specify the architecture to use when disassembling object files. This can be useful when disassembling object files which do not describe architecture information, such as S-records. You can list the available architectures with the -i option.

If the target is an ARM architecture then this switch has an additional effect. It restricts the disassembly to only those instructions supported by the architecture specified by machine. If it is necessary to use this switch because the input file does not contain any architecture information, but it is also desired to disassemble all the instructions use -marm.

🎛️ -M options, --disassembler-options=options

Pass target specific information to the disassembler. Only supported on some targets. If it is necessary to specify more than one disassembler option then multiple -M options can be used or can be placed together into a comma separated list.

For ARC: dsp controls DSP instructions, spfp/ dpfp for FPX single/double precision, quarkse_em, fpuda, fpus, fpud. hex prints immediates in hexadecimal. cpu=... enforces a particular ISA.

For ARM: reg-names-std (default), reg-names-apcs, reg-names-raw, reg-names-atpcs, reg-names-special-atpcs. Also force-thumb to interpret all instructions as Thumb.

For AArch64: no-aliases and notes.

For x86: x86-64, i386, i8086, intel, att, amd64, intel64, intel-mnemonic, att-mnemonic, addr64, addr32, addr16, data32, data16, suffix.

For PowerPC: raw selects hardware insns rather than aliases. Supported CPUs: 403, 405, 440, 464, 476, 601, 603, 604, 620, 7400, 7410, 7450, 7455, 750cl, 821, 850, 860, a2, booke, booke32, cell, com, e200z4, e300, e500, e500mc, e500mc64, e500x2, e5500, e6500, efs, power4, power5, power6, power7, power8, power9, power10, ppc, ppc32, ppc64, ppc64bridge, ppcps, pwr, pwr2, pwr4, pwr5, pwr5x, pwr6, pwr7, pwr8, pwr9, pwr10, pwrx, titan, vle. 32/64 modify default. altivec, any, htm, vsx, spe add capabilities.

For MIPS: no-aliases, msa, virt, xpa, gpr-names=ABI, fpr-names=ABI, cp0-names=ARCH, hwr-names=ARCH, reg-names=ABI, reg-names=ARCH. ABI/ARCH can be numeric.

For VAX: entry:0xf00ba to specify function entry addresses (use multiple times).

🔒 -p, --private-headers

Print information that is specific to the object file format. The exact information printed depends upon the object file format. For some object file formats, no additional information is printed.

🔒 -P options, --private=options

Print information that is specific to the object file format. The argument options is a comma separated list that depends on the format (the lists of options is displayed with the help).

For XCOFF, available options: header, aout, sections, syms, relocs, lineno, loader, except, typchk, traceback, toc, ldinfo.

Not all object formats support this option. In particular the ELF format does not use it.

🔗 -r, --reloc

Print the relocation entries of the file. If used with -d or -D, the relocations are printed interspersed with the disassembly.

🔗 -R, --dynamic-reloc

Print the dynamic relocation entries of the file. This is only meaningful for dynamic objects, such as certain types of shared libraries. As for -r, if used with -d or -D, the relocations are printed interspersed with the disassembly.

📄 -s, --full-contents

Display the full contents of any sections requested. By default all non-empty sections are displayed.

📝 -S, --source

Display source code intermixed with disassembly, if possible. Implies -d.

💬 --source-comment[=txt]

Like -S, but all source code lines are displayed with a prefix of txt. Typically txt will be a comment string which can be used to distinguish the assembler code from the source code. If txt is not provided then a default string of "# " (hash followed by a space), will be used.

📁 --prefix=prefix

Specify prefix to add to the absolute paths when used with -S.

📁 --prefix-strip=level

Indicate how many initial directory names to strip off the hardwired absolute paths. It has no effect without --prefix=prefix.

🔢 --show-raw-insn

When disassembling instructions, print the instruction in hex as well as in symbolic form. This is the default except when --prefix-addresses is used.

🔢 --no-show-raw-insn

When disassembling instructions, do not print the instruction bytes. This is the default when --prefix-addresses is used.

📏 --insn-width=width

Display width bytes on a single line when disassembling instructions.

🎨 --visualize-jumps[=color|=extended-color|=off]

Visualize jumps that stay inside a function by drawing ASCII art between the start and target addresses. The optional =color argument adds color to the output using simple terminal colors. Alternatively the =extended-color argument will add color using 8bit colors, but these might not work on all terminals.

If it is necessary to disable the visualize-jumps option after it has previously been enabled then use visualize-jumps=off.

🧩 -W[lLiaprmfFsoORtUuTgAckK], --dwarf[=rawline,=decodedline,=info,=abbrev,=pubnames,=aranges,=macro,=frames,=frames-interp,=str,=str-offsets,=loc,=Ranges,=pubtypes,=trace_info,=trace_abbrev,=trace_aranges,=gdb_index,=addr,=cu_index,=links,=follow-links]

Displays the contents of the DWARF debug sections in the file, if any are present. Compressed debug sections are automatically decompressed (temporarily) before they are displayed. If one or more of the optional letters or words follows the switch then only those type(s) of data will be dumped.

• a / =abbrev — 📄 .debug_abbrev
• A / =addr — 📄 .debug_addr
• c / =cu_index — 📄 .debug_cu_index / .debug_tu_index
• f / =frames — 📄 raw .debug_frame
• F / =frames-interp — 📄 interpreted .debug_frame
• g / =gdb_index — 📄 .gdb_index / .debug_names
• i / =info — 📄 .debug_info (restrictable with --dwarf-depth, --dwarf-start)
• k / =links — 📄 .gnu_debuglink, .gnu_debugaltlink, .debug_sup, and DWO links
• K / =follow-links — 📄 follow links to separate debug info files
• N / =no-follow-links — 🚫 disable following debug links
• l / =rawline — 📄 raw .debug_line
• L / =decodedline — 📄 interpreted .debug_line
• m / =macro — 📄 .debug_macro / .debug_macinfo
• o / =loc — 📄 .debug_loc / .debug_loclists
• O / =str-offsets — 📄 .debug_str_offsets
• p / =pubnames — 📄 .debug_pubnames / .debug_gnu_pubnames
• r / =aranges — 📄 .debug_aranges
• R / =Ranges — 📄 .debug_ranges / .debug_rnglists
• s / =str — 📄 .debug_str, .debug_line_str, .debug_str_offsets
• t / =pubtype — 📄 .debug_pubtypes / .debug_gnu_pubtypes
• T / =trace_aranges — 📄 .trace_aranges
• u / =trace_abbrev — 📄 .trace_abbrev
• U / =trace_info — 📄 .trace_info

Note: displaying the contents of .debug_static_funcs, .debug_static_vars and debug_weaknames sections is not currently supported.

📏 --dwarf-depth=n

Limit the dump of the ".debug_info" section to n children. This is only useful with --debug-dump=info. The default is to print all DIEs; the special value 0 for n will also have this effect. With a non-zero value for n, DIEs at or deeper than n levels will not be printed. The range for n is zero-based.

📏 --dwarf-start=n

Print only DIEs beginning with the DIE numbered n. This is only useful with --debug-dump=info. If specified, this option will suppress printing of any header information and all DIEs before the DIE numbered n. Only siblings and children of the specified DIE will be printed. This can be used in conjunction with --dwarf-depth.

✅ --dwarf-check

Enable additional checks for consistency of Dwarf information.

📦 --ctf[=section]

Display the contents of the specified CTF section. CTF sections themselves contain many subsections, all of which are displayed in order. By default, display the name of the section named .ctf, which is the name emitted by ld.

📦 --ctf-parent=member

If the CTF section contains ambiguously-defined types, it will consist of an archive of many CTF dictionaries, all inheriting from one dictionary containing unambiguous types. This member is by default named .ctf, like the section containing it, but it is possible to change this name using the ctf_link_set_memb_name_changer function at link time. When looking at CTF archives that have been created by a linker that uses the name changer to rename the parent archive member, --ctf-parent can be used to specify the name used for the parent.

🏷️ -G, --stabs

Display the full contents of any sections requested. Display the contents of the .stab and .stab.index and .stab.excl sections from an ELF file. This is only useful on systems (such as Solaris 2.0) in which ".stab" debugging symbol-table entries are carried in an ELF section. In most other file formats, debugging symbol-table entries are interleaved with linkage symbols, and are visible in the --syms output.

📍 --start-address=address

Start displaying data at the specified address. This affects the output of the -d, -r and -s options.

📍 --stop-address=address

Stop displaying data at the specified address. This affects the output of the -d, -r and -s options.

🏷️ -t, --syms

Print the symbol table entries of the file. This is similar to the information provided by the nm program, although the display format is different. The format of the output depends upon the format of the file being dumped, but there are two main types. One looks like this:

[  4](sec  3)(fl 0x00)(ty   0)(scl   3) (nx 1) 0x00000000 .bss
[  6](sec  1)(fl 0x00)(ty   0)(scl   2) (nx 0) 0x00000000 fred

where the number inside the square brackets is the number of the entry in the symbol table, the sec number is the section number, the fl value are the symbol's flag bits, the ty number is the symbol's type, the scl number is the symbol's storage class and the nx value is the number of auxiliary entries associated with the symbol. The last two fields are the symbol's value and its name.

The other common output format, usually seen with ELF based files, looks like this:

00000000 l    d  .bss   00000000 .bss
00000000 g       .text  00000000 fred

Here the first number is the symbol's value (sometimes referred to as its address). The next field is actually a set of characters and spaces indicating the flag bits that are set on the symbol. These characters are described below. Next is the section with which the symbol is associated or *ABS* if the section is absolute (ie not connected with any section), or *UND* if the section is referenced in the file being dumped, but not defined there. After the section name comes another field, a number, which for common symbols is the alignment and for other symbol is the size. Finally the symbol's name is displayed.

The flag characters are divided into 7 groups as follows:

• l, g, u, ! — The symbol is local (l), global (g), unique global (u), neither global nor local (a space) or both global and local (!). Unique global symbols are a GNU extension to the standard set of ELF symbol bindings.
• w — The symbol is weak (w) or strong (a space).
• C — The symbol denotes a constructor (C) or an ordinary symbol (a space).
• W — The symbol is a warning (W) or a normal symbol (a space).
• I, i — The symbol is an indirect reference to another symbol (I), a function to be evaluated during reloc processing (i) or a normal symbol (a space).
• d, D — The symbol is a debugging symbol (d) or a dynamic symbol (D) or a normal symbol (a space).
• F, f, O — The symbol is the name of a function (F) or a file (f) or an object (O) or just a normal symbol (a space).

🏷️ -T, --dynamic-syms

Print the dynamic symbol table entries of the file. This is only meaningful for dynamic objects, such as certain types of shared libraries. This is similar to the information provided by the nm program when given the -D (--dynamic) option.

The output format is similar to that produced by the --syms option, except that an extra field is inserted before the symbol's name, giving the version information associated with the symbol. If the version is the default version to be used when resolving unversioned references to the symbol then it's displayed as is, otherwise it's put into parentheses.

⭐ --special-syms

When displaying symbols include those which the target considers to be special in some way and which would not normally be of interest to the user.

🌐 -U [d|i|l|e|x|h], --unicode=[default|invalid|locale|escape|hex|highlight]

Controls the display of UTF-8 encoded multibyte characters in strings. The default (--unicode=default) is to give them no special treatment. --unicode=locale displays the sequence in the current locale. --unicode=hex and --unicode=invalid display them as hex byte sequences enclosed by angle brackets or curly braces. --unicode=escape displays them as escape sequences (\uxxxx). --unicode=highlight displays them as escape sequences highlighted in red (if supported by the output device).

ℹ️ -V, --version

Print the version number of objdump and exit.

📋 -x, --all-headers

Display all available header information, including the symbol table and relocation entries. Using -x is equivalent to specifying all of -a -f -h -p -r -t.

📐 -w, --wide

Format some lines for output devices that have more than 80 columns. Also do not truncate symbol names when they are displayed.

0️⃣ -z, --disassemble-zeroes

Normally the disassembly output will skip blocks of zeroes. This option directs the disassembler to disassemble those blocks, just like any other data.

📄 @file

Read command-line options from file. The options read are inserted in place of the original @file option. If file does not exist, or cannot be read, then the option will be treated literally, and not removed.

Options in file are separated by whitespace. A whitespace character may be included in an option by surrounding the entire option in either single or double quotes. Any character (including a backslash) may be included by prefixing the character to be included with a backslash. The file may itself contain additional @file options; any such options will be processed recursively.

📚 SEE ALSO

nm(1), readelf(1), and the Info entries for binutils.

©️ COPYRIGHT

Copyright (c) 1991-2022 Free Software Foundation, Inc.

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover Texts, and with no Back-Cover Texts. A copy of the license is included in the section entitled "GNU Free Documentation License".

📖 NAME 🚀 Quick Reference 📋 SYNOPSIS 📝 DESCRIPTION ⚙️ OPTIONS 📚 SEE ALSO ©️ COPYRIGHT