wcc.c

Go to the documentation of this file.

#define __USE_GNU
#define _GNU_SOURCE
#include <bfd.h>
#include <dlfcn.h>
#include <elf.h>
#include <errno.h>
#include <fcntl.h>
#include <getopt.h>
#include <limits.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/mman.h>
#include <sys/procfs.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <sys/ucontext.h>
#include <unistd.h>
#include <utlist.h>
#include <ctype.h>
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>

#include <libelf.h>
#include <gelf.h>

#include <nametotype.h>
#include <nametoalign.h>
#include <nametoentsz.h>
#include <nametolink.h>
#include <nametoinfo.h>
#include <arch.h>
#include <inttypes.h>

#include <config.h>

#define DEFAULT_STRNDX_SIZE 4096

// Valid flags for msec_t->flags
#define FLAG_BSS        1
#define FLAG_NOBIT      2
#define FLAG_NOWRITE    4
#define FLAG_TEXT       8

#define ifis(x) if(!strncmp(name, x, strlen(x)))
#define elis(x) else if(!strncmp(name, x, strlen(x)))

#define MAXPADLEN 20

#define EXTRA_CREATED_SECTIONS 4


#define RELOC_X86_64 1
#define RELOC_X86_32 2

//#ifdef __x86_64__
#ifdef __LP64__                 // Generic 64b
#define Elf_Ehdr    Elf64_Ehdr
#define Elf_Shdr    Elf64_Shdr
#define Elf_Sym     Elf64_Sym
#define Elf_Addr    Elf64_Addr
#define Elf_Sword   Elf64_Sxword
#define Elf_Section Elf64_Half
#define ELF_ST_BIND ELF64_ST_BIND
#define ELF_ST_TYPE ELF64_ST_TYPE
#define Elf_Rel     Elf64_Rel
#define Elf_Rela    Elf64_Rela
#define ELF_R_SYM   ELF64_R_SYM
#define ELF_R_TYPE  ELF64_R_TYPE
#define ELF_R_INFO  ELF64_R_INFO
#define Elf_Phdr    Elf64_Phdr
#define Elf_Xword   Elf64_Xword
#define Elf_Word    Elf64_Word
#define Elf_Off     Elf64_Off
#define ELFCLASS    ELFCLASS64
#define ELFMACHINE  EM_X86_64
#define CS_MODE     CS_MODE_64
#define RELOC_MODE  RELOC_X86_64
#else                           // Generic 32b
#define Elf_Ehdr    Elf32_Ehdr
#define Elf_Shdr    Elf32_Shdr
#define Elf_Sym     Elf32_Sym
#define Elf_Addr    Elf32_Addr
#define Elf_Sword   Elf64_Sword
#define Elf_Section Elf32_Half
#define ELF_ST_BIND ELF32_ST_BIND
#define ELF_ST_TYPE ELF32_ST_TYPE
#define Elf_Rel     Elf32_Rel
#define Elf_Rela    Elf32_Rela
#define ELF_R_SYM   ELF32_R_SYM
#define ELF_R_TYPE  ELF32_R_TYPE
#define ELF_R_INFO  ELF32_R_INFO
#define Elf_Phdr    Elf32_Phdr
#define Elf_Xword   Elf32_Xword
#define Elf_Word    Elf32_Word
#define Elf_Off     Elf32_Off
#define ELFCLASS    ELFCLASS32
#define ELFMACHINE  EM_386
#define CS_MODE     CS_MODE_32
#define RELOC_MODE  RELOC_X86_32
#endif


#define nullstr "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
unsigned int maxoldsec = 0, maxnewsec = 0;
unsigned int deltastrtab = 0;

char *allowed_sections[] = {
  ".rodata",
  ".data",
  ".text",
  ".load",
  ".strtab",
  ".symtab",
  ".comment",
  ".note.GNU-stack",
  ".rsrc",
  ".bss",
//      ".rela.plt",
//      ".rela.dyn"
};

char *blnames[] = {
  "__init_array_start",
  "__init_array_end",
  "__libc_csu_init",
  "__libc_csu_fini",
  "__x86.get_pc_thunk.bx",      // this is 32b only
  ".bss",
  ".comment",
  ".data",
  ".dynamic",
  ".fini",
  ".fini_array",
  ".got",
  ".got.plt",
  ".init",
  ".init_array",
  ".jcr",
  ".plt",
  ".plt.got",
  ".text",
  "__GNU_EH_FRAME_HDR",
  "__FRAME_END__",
  ".interp",
  ".note.ABI-tag",
  ".note.gnu.build-id",
  ".gnu.hash",
  ".dynsym",
  ".dynstr",
  ".gnu.version",
  ".gnu.version_r",
  ".rela.dyn",
  ".rela.plt",
  ".rodata",
  ".eh_frame_hdr",
  ".eh_frame",
  "_ITM_registerTMCloneTable",
  "_ITM_deregisterTMClone",
  "_ITM_deregisterTMCloneTab",
  "_Jv_RegisterClasses",
  "_ITM_registerTMCloneTa",
  "__cxa_finalize",
  "_DYNAMIC",
  "_GLOBAL_OFFSET_TABLE_",
  "__JCR_END__",
  "__JCR_LIST__",
  "__TMC_END__",
  "__bss_start",
  "__data_start",
  "_IO_stdin_used",
  "__do_global_dtors_aux",
  "__do_global_dtors_aux_fini_array_entry",
  "__dso_handle",
  "__frame_dummy_init_array_entry",
  "__libc_csu_fini",
  "_edata",
  "_end",
  "_fini",
  "__fini",
  "_init",
  "_start",
  "data_start",
  "deregister_tm_clones",
  "frame_dummy",
  "register_tm_clones",
//"__libc_start_main",
  "__gmon_start__"
};

typedef struct msec_t {
  char *name;
  unsigned long int len;
  unsigned char *data;
  char *outoffset;
  unsigned int flags;           // See above

  asection *s_bfd;
  Elf_Shdr *s_elf;

  struct msec_t *prev;          // utlist.h
  struct msec_t *next;          // utlist.h

} msec_t;


typedef struct mseg_t {
  Elf_Word p_type;
  Elf_Word p_flags;
  Elf_Off p_offset;             // Segment file offset 
  Elf_Addr p_vaddr;             // Segment virtual address 
  Elf_Addr p_paddr;             // Segment physical address 
  Elf_Xword p_filesz;           // Segment size in file 
  Elf_Xword p_memsz;            // Segment size in memory 
  Elf_Xword p_align;            // Segment alignment, file & memory 

  struct msec_t *prev;          // utlist.h
  struct msec_t *next;          // utlist.h

} mseg_t;


typedef struct ctx_t {

  char *binname;
  unsigned int archsz;          // Architecture size (64 or 32)
  unsigned int shnum;
  unsigned int phnum;           // Number of program headers
  char *strndx;                 // pointer to section string table in memory
  unsigned int strndx_len;      // length of section string table in bytes
  unsigned int strndx_index;    // offset of sections string table in binary
  unsigned int start_shdrs;     // Offset of section headers in output binary
  unsigned int start_phdrs;     // Offset of Program headers in output binary
  int fdout;
  bfd *abfd;
  unsigned int corefile;        // 1 if file is a core file


  unsigned int base_address;    // VMA Address of first PT_LOAD segment in memory

  // Meta section headers (double linked list)
  msec_t *mshdrs;
  unsigned int mshnum;

  // Meta segment headers (double linked list)
  mseg_t *mphdrs;
  unsigned int mphnum;

  unsigned int has_relativerelocations; // 1 if binary has relative relocations (R_X86_64_RELATIVE)
  char *opt_binname;
  char *opt_interp;
  unsigned int opt_arch;
  unsigned int opt_static;
  unsigned int opt_reloc;
  unsigned int opt_strip;
  unsigned int opt_sstrip;
  unsigned int opt_exec;
  unsigned int opt_core;
  unsigned int opt_shared;
  unsigned int opt_verbose;
  unsigned long int opt_entrypoint;
  unsigned char opt_poison;
  unsigned int opt_original;
  unsigned int opt_debug;
  unsigned int opt_asmdebug;
  unsigned int opt_flags;       // used in setting eabi

} ctx_t;



int craft_section(ctx_t * ctx, msec_t * m);
unsigned int secindex_from_name(ctx_t * ctx, const char *name);
msec_t *section_from_name(ctx_t * ctx, char *name);
msec_t *section_from_addr(ctx_t * ctx, unsigned long int addr);
int print_bfd_sections(ctx_t * ctx);
unsigned int secindex_from_name(ctx_t * ctx, const char *name);
msec_t *section_from_index(ctx_t * ctx, unsigned int index);
unsigned int secindex_from_name_after_strip(ctx_t * ctx, const char *name);
int analyze_text(ctx_t * ctx, char *data, unsigned int datalen,
                 unsigned long int addr);
int save_reloc(ctx_t * ctx, Elf_Rela * r, unsigned int sindex, int has_addend);


char *globalsymtab = 0;
int globalsymtablen = 0;
unsigned int globalsymtableoffset = 0;

char *globalstrtab = 0;
unsigned int globalstrtablen = 0;
unsigned int globalstrtableoffset = 0;

unsigned int globalsymindex = 0;

char *globalreloc = 0;
unsigned int globalreloclen = 0;
unsigned int globalrelocoffset = 0;

unsigned long int mintext = -1;
unsigned long int maxtext = 0;
unsigned long int textvma = 0;

unsigned long int mindata = -1;
unsigned long int maxdata = 0;
unsigned long int datavma = 0;

unsigned long int orig_text = 0;
unsigned long int orig_sz = 0;

static int parse_bfd_perm(int perm)
{
  int heal_perm = 0;

  heal_perm |= (perm & SEC_CODE ? 1 : 0);
  heal_perm |= (perm & SEC_DATA ? 2 : 0);
  heal_perm |= (perm & SEC_ALLOC ? 4 : 0);
  heal_perm = (perm & SEC_READONLY ? heal_perm : 4);

  return heal_perm;
}

unsigned int protect_perms(unsigned int perms)
{
  unsigned int memperms = 0;

  switch (perms) {
  case 7:
    memperms = PROT_READ | PROT_WRITE | PROT_EXEC;
    break;
  case 6:
    memperms = PROT_READ;
    break;
  case 5:
    memperms = PROT_READ | PROT_EXEC;
    break;
  case 4:
    memperms = PROT_READ | PROT_WRITE;
    break;
  default:
    memperms = 0;
    break;
  }
  return memperms;
}

struct symaddr {
  struct symaddr *next;
  char *name;
  int addr;
} *symaddrs;


/*
typedef struct {
        Elf_Word        st_name;
        unsigned char   st_info;
        unsigned char   st_other;
        Elf_Half        st_shndx;
        Elf_Addr        st_value;
        Elf_Xword       st_size;
} Elf_Sym;
*/

void add_symaddr(ctx_t * ctx, const char *name, int addr, char symclass)
{

  struct symaddr *sa;
  Elf_Sym *s = 0;
  unsigned long int nameptr = 0;
  unsigned int i;

  if (*name == '\0')
    return;

  // search this address in symbol table : duplicates here trigger a NULL ptr dereference in ld
  for (i = 0; i < globalsymtablen / sizeof(Elf_Sym); i++) {
    s = (Elf_Sym *) (globalsymtab + i * sizeof(Elf_Sym));
    //
    if ((s->st_value == addr - textvma) && (s->st_value != 0)) {
      return;                   // already in symtab
    }
  }

  // check if name is in blacklist
  for (i = 0; i < sizeof(blnames) / sizeof(char *); i++) {
    if ((strlen(name) == strlen(blnames[i]))
        && (!strncmp(name, blnames[i], strlen(blnames[i])))) {
      return;
    }
  }
  sa = (struct symaddr *) malloc(sizeof(struct symaddr));
  memset(sa, 0, sizeof(struct symaddr));
  sa->name = strdup(name);
  sa->addr = addr;
  sa->next = symaddrs;
  symaddrs = sa;

  if (ctx->opt_verbose) {
    int pad;
    pad = MAXPADLEN - strlen(sa->name);
    if (pad < 0) {
      pad = 0;
    }

    printf("%s% *s\t\t%x\t\t%c\n", sa->name, pad, "", sa->addr, symclass);
  }

  if (globalstrtab == 0) {
    globalstrtab = calloc(1, strlen(sa->name) + 3);
    globalstrtablen++;          // Start with a null byte
  } else {
    globalstrtab =
        realloc(globalstrtab, globalstrtablen + strlen(sa->name) + 2);
  }
  memcpy(globalstrtab + globalstrtablen, sa->name, strlen(sa->name) + 1);
  nameptr = globalstrtablen;
  globalstrtablen += strlen(sa->name) + 1;

  if (globalsymtab == 0) {
    globalsymtab = calloc(1, sizeof(Elf_Sym) * 2);
    globalsymtablen += sizeof(Elf_Sym); // Skip 1 NULL entry
  } else {
    globalsymtab = realloc(globalsymtab, sizeof(Elf_Sym) + globalsymtablen);
  }

  s = (Elf_Sym *) (globalsymtab + globalsymtablen);
  s->st_name = nameptr;
  s->st_size = 100;             // default function size... (in bytes)
  s->st_value = addr;
  s->st_info = 0;
  s->st_other = 0;
  s->st_shndx = 0;

  switch (symclass) {
  case 'T':
  case 't':

  case 'C':
  case 'c':
//      s->st_value = addr;
    ;
    // adjust value from vma
    msec_t *t = section_from_name(ctx, ".text");
//              s->st_value -= t->s_elf->sh_addr;
    if (ctx->opt_reloc) {
      s->st_value -= t->s_bfd->vma;
//s->st_value -= orig_text;
      s->st_shndx = 1;          // index to .text
    }
    s->st_info = STT_FUNC;
    break;

  case 'D':
  case 'd':
  case 'B':
  case 'b':
  case 'V':
  case 'v':
    ;
// adjust value from vma
//  msec_t *t2 = section_from_addr(ctx, s->st_value);
//  s->st_value -= t2->s_bfd->vma;

    s->st_info = STT_OBJECT;
    break;

  case 'A':
  case 'a':
    s->st_info = STT_FILE;
    break;

  case 'R':
  case 'r':
    s->st_size = 0;
    s->st_info = STT_SECTION;
    break;

  default:
    break;
  }


  if (isupper(symclass)) {
    s->st_info += 0x10;
  }


  globalsymtablen += sizeof(Elf_Sym);
  return;
}

int add_extra_symbols(ctx_t * ctx)
{
  add_symaddr(ctx, "old_plt", textvma, 0x54);
  add_symaddr(ctx, "old_text", orig_text, 0x54);
  add_symaddr(ctx, "old_text_end", orig_text + maxtext - mintext, 0x54);

  return 0;
}

int rd_symbols(ctx_t * ctx)
{
  long storage_needed;
  asymbol **symbol_table = NULL;
  long number_of_symbols;
  long i;
  int ret = 0;

  const char *sym_name;
  int symclass;
  int sym_value;

  if (ctx->opt_verbose) {
    printf("\n\n -- Reading symbols\n\n");
    printf(" Symbol\t\t\t\taddress\t\tclass\n");
    printf(" -----------------------------------------------------\n");
  }

  storage_needed = bfd_get_symtab_upper_bound(ctx->abfd);
  if (storage_needed < 0) {
    bfd_perror("warning: bfd_get_symtab_upper_bound");
    ret = 0;
    goto dynsym;
  }
  if (storage_needed == 0) {
    fprintf(stderr, "warning: no symbols\n");
    goto dynsym;
  }
  symbol_table = (asymbol **) malloc(storage_needed);
  number_of_symbols = bfd_canonicalize_symtab(ctx->abfd, symbol_table);
  if (number_of_symbols < 0) {
    bfd_perror("warning: bfd_canonicalize_symtab");
    ret = 0;
    goto dynsym;
  }
  for (i = 0; i < number_of_symbols; i++) {
    asymbol *asym = symbol_table[i];
    sym_name = bfd_asymbol_name(asym);
    symclass = bfd_decode_symclass(asym);
    sym_value = bfd_asymbol_value(asym);
    if (*sym_name == '\0') {
      continue;
    }
    if (bfd_is_undefined_symclass(symclass)) {
      continue;
    }

    if (!ctx->opt_strip) {      // process additional symbols from symbol table
      add_symaddr(ctx, sym_name, sym_value, symclass);
    }
  }

dynsym:
  if (symbol_table) {
    free(symbol_table);
  }
  symbol_table = NULL;

  storage_needed = bfd_get_dynamic_symtab_upper_bound(ctx->abfd);
  if (storage_needed < 0) {
    bfd_perror("warning: bfd_get_dynamic_symtab_upper_bound");
    ret = 0;
    goto out;
  }
  if (storage_needed == 0) {
    fprintf(stderr, "warning: no symbols\n");
    goto out;
  }
  symbol_table = (asymbol **) malloc(storage_needed);
  number_of_symbols = bfd_canonicalize_dynamic_symtab(ctx->abfd, symbol_table);
  if (number_of_symbols < 0) {
    bfd_perror("warning: bfd_canonicalize_symtab");
    ret = 0;
    goto dynsym;
  }
  for (i = 0; i < number_of_symbols; i++) {
    asymbol *asym = symbol_table[i];
    sym_name = bfd_asymbol_name(asym);
    symclass = bfd_decode_symclass(asym);
    sym_value = bfd_asymbol_value(asym);
    if (*sym_name == '\0') {
      continue;
    }
    if (bfd_is_undefined_symclass(symclass)) {
      continue;
    }
  }
out:
  if (symbol_table) {
    free(symbol_table);
  }

  if (ctx->opt_verbose) {
    printf("\n");
  }

  return ret;
}

int entszfromname(const char *name)
{
  unsigned int i = 0;

  for (i = 0; i < sizeof(nametosize) / sizeof(assoc_nametosz_t); i++) {
    if (!strncmp(nametosize[i].name, name, strlen(name))) {
      return nametosize[i].sz;
    }
  }
  return 0;
}

unsigned int max(unsigned int a, unsigned int b)
{
  return a < b ? b : a;
}

msec_t *section_from_name(ctx_t * ctx, char *name)
{
  msec_t *s;

  DL_FOREACH(ctx->mshdrs, s) {
    if (!strncmp(s->name, name, max(strlen(name), strlen(s->name)))) {
      return s;
    }
  }
  return 0;
}

msec_t *section_from_addr(ctx_t * ctx, unsigned long int addr)
{
  msec_t *s;

  DL_FOREACH(ctx->mshdrs, s) {
    if ((s->s_bfd->vma) && (s->s_bfd->vma <= addr)
        && (s->s_bfd->vma + s->s_bfd->size > addr)) {
      return s;
    }
  }
  return 0;
}

msec_t *section_from_index(ctx_t * ctx, unsigned int index)
{
  msec_t *s;
  unsigned int i = 1;           // We count from 1
  DL_FOREACH(ctx->mshdrs, s) {
    if (index == i) {
      return s;
    }
    i++;
  }
  return 0;
}


unsigned int secindex_from_name(ctx_t * ctx, const char *name)
{
  msec_t *s;
  unsigned int i = 1;           // We count from 1

  DL_FOREACH(ctx->mshdrs, s) {
    if (!strncmp(s->name, name, max(strlen(name), strlen(s->name)))) {
      return i;
    }
    i++;
  }
  return 0;
}

unsigned int secindex_from_name_after_strip(ctx_t * ctx, const char *name)
{
  msec_t *s;
  unsigned int i = 1;           // We count from 1
  unsigned int j;

  DL_FOREACH(ctx->mshdrs, s) {
    if (!strncmp(s->name, name, max(strlen(name), strlen(s->name)))) {
      return i;
    }

    for (j = 0; j < sizeof(allowed_sections) / sizeof(char *); j++) {
      if (!strncmp(s->name, allowed_sections[j], strlen(allowed_sections[j]))) {
        i++;                    // Ok, this section is allowed
        break;
      }
    }
  }
  return 0;
}

char *sec_name_from_index_after_strip(ctx_t * ctx, unsigned int index)
{

  msec_t *s;
  unsigned int i = 0;
  unsigned int j;

  DL_FOREACH(ctx->mshdrs, s) {

    for (j = 0; j < sizeof(allowed_sections) / sizeof(char *); j++) {
      if (!strncmp(s->name, allowed_sections[j], strlen(allowed_sections[j]))) {
        i++;                    // Ok, this section is allowed
        break;
      }
    }

    if (i == index) {
      return s->name;
    }

  }

  return NULL;
}


int link_from_name(ctx_t * ctx, const char *name)
{
  unsigned int i = 0;
  char *destsec = 0;
  unsigned int d = 0;

  for (i = 0; i < sizeof(nametolink) / sizeof(assoc_nametolink_t); i++) {
    if (!strncmp(nametolink[i].name, name, strlen(name))) {
      destsec = nametolink[i].dst;
    }
  }

  if (!destsec) {
    return 0;
  }

  d = secindex_from_name(ctx, destsec);
  return d;
}

int info_from_name(ctx_t * ctx, const char *name)
{
  unsigned int i = 0;
  char *destsec = 0;
  unsigned int d = 0;

  for (i = 0; i < sizeof(nametoinfo) / sizeof(assoc_nametoinfo_t); i++) {
    if (!strncmp(nametoinfo[i].name, name, strlen(name))) {
      destsec = nametoinfo[i].dst;
    }
  }

  if (!destsec) {
    return 0;
  }

  d = secindex_from_name(ctx, destsec);
  return d;
}

int typefromname(const char *name)
{
  unsigned int i = 0;

  for (i = 0; i < sizeof(nametotype) / sizeof(assoc_nametotype_t); i++) {
    if (!strncmp(nametotype[i].name, name, strlen(name))) {
      return nametotype[i].type;
    }
  }
  return SHT_PROGBITS;
}

unsigned int alignfromname(const char *name)
{
  unsigned int i = 0;

  for (i = 0; i < sizeof(nametoalign) / sizeof(assoc_nametoalign_t); i++) {
    if (!strncmp(nametoalign[i].name, name, strlen(name))) {
      return nametoalign[i].alignment;
    }
  }
  return 8;
}

unsigned int ptype_from_section(msec_t * ms)
{
  // Return type based on section name

  if (!strncmp(ms->name, ".interp", 7)) {
    return PT_INTERP;
  }

  if (!strncmp(ms->name, ".dynamic", 8)) {
    return PT_DYNAMIC;
  }

  if (!strncmp(ms->name, ".eh_frame_hdr", 13)) {
    return PT_GNU_EH_FRAME;
  }

  switch (ms->s_elf->sh_type) {
  case SHT_NULL:
    return PT_NULL;
  case SHT_PROGBITS:
    return PT_LOAD;
  case SHT_NOTE:
    return PT_NOTE;
  case SHT_DYNAMIC:
    return PT_DYNAMIC;
  case SHT_SYMTAB:
  case SHT_STRTAB:
  case SHT_RELA:
  case SHT_HASH:
  case SHT_NOBITS:
  case SHT_REL:
  case SHT_SHLIB:
  case SHT_DYNSYM:
  case SHT_NUM:
  case SHT_LOSUNW:
  case SHT_GNU_verdef:
  case SHT_GNU_verneed:
  case SHT_GNU_versym:
  default:
    break;
  }
  return PT_LOAD;
}

unsigned int pflag_from_section(msec_t * ms)
{
  unsigned int dperms = 0;
  dperms = 0;

  switch (ms->s_elf->sh_flags) {
  case SHF_ALLOC | SHF_WRITE | SHF_EXECINSTR:
    dperms = PF_R | PF_W | PF_X;        // "rwx";
    break;
  case SHF_ALLOC:
    dperms = PF_R;              //"r--";
    break;
  case SHF_ALLOC | SHF_EXECINSTR:
    dperms = PF_R | PF_X;       // "r-x";
    break;
  case SHF_ALLOC | SHF_WRITE:
    dperms = PF_R | PF_W;       // "rw-"
    break;
  default:
    dperms = 0;                 // "---"
    break;
  }
  return dperms;
}

int phdr_cmp_premerge(mseg_t * a, mseg_t * b)
{
  if (a->p_type != b->p_type) {
    return a->p_type - b->p_type;
  }                             // Sort by type
  return a->p_vaddr - b->p_vaddr;       // else by vma
}

int phdr_cmp(mseg_t * a, mseg_t * b)
{
  return a->p_vaddr - b->p_vaddr;       // This is correct, see elf.pdf
}

int sort_phdrs(ctx_t * ctx)
{
  DL_SORT(ctx->mphdrs, phdr_cmp);
  return 0;
}

int sort_phdrs_premerge(ctx_t * ctx)
{
  DL_SORT(ctx->mphdrs, phdr_cmp_premerge);
  return 0;
}

mseg_t *alloc_phdr(msec_t * ms)
{
  mseg_t *p;
  Elf_Shdr *s;

  s = ms->s_elf;
  p = calloc(1, sizeof(mseg_t));

  p->p_type = ptype_from_section(ms);
  p->p_flags = pflag_from_section(ms);
  p->p_offset = s->sh_offset;
  p->p_vaddr = s->sh_addr;
  p->p_paddr = s->sh_addr;
  p->p_filesz = s->sh_size;
  p->p_memsz = s->sh_size;
  p->p_align = s->sh_addralign;

  return p;
}

int create_phdrs(ctx_t * ctx)
{
  msec_t *ms, *tmp;
  mseg_t *p = 0;

  DL_FOREACH_SAFE(ctx->mshdrs, ms, tmp) {

    p = alloc_phdr(ms);

    if (p->p_type == PT_LOAD) {
      unsigned int r = 0;       // reminder
      p->p_align = 0x200000;
      // We need to align segment p_vaddr - p_offset on page boundaries
      r = (p->p_vaddr - p->p_offset) % 4096;
      p->p_vaddr -= r;          // Adjust initial address
      p->p_paddr -= r;          // Adjust initial address
      p->p_filesz += r;         // Adjust size
      p->p_memsz += r;          // Adjust size
    }

    if (p->p_flags) {
      // Add to linked list of segments
      DL_APPEND(ctx->mphdrs, p);
      ctx->mphnum++;
      ctx->phnum++;
    } else {
      // Sections not mapped have no segment
      free(p);
    }
  }
  return 0;
}

int merge_phdrs(ctx_t * ctx)
{
  mseg_t *ms, *n;
retry:
  ms = ctx->mphdrs;
  while (ms) {
    if (ms->next) {
      n = (mseg_t *) ms->next;
      if (ms->p_flags != n->p_flags) {
        goto skipseg;
      }
      if (ms->p_type != n->p_type) {
        goto skipseg;
      }
      // merge sections into the first one :
      // extend section
      ms->p_filesz = n->p_filesz + (n->p_offset - ms->p_offset);
      ms->p_memsz = ms->p_memsz + (n->p_offset - ms->p_offset);
      // unlink deleted section from double linked list
      if (n->next) {
        n->next->prev = (void *) ms;
      }
      ms->next = n->next;
      free(n);
      ctx->mphnum--;
      ctx->phnum--;
      goto retry;

    }
  skipseg:
    ms = (mseg_t *) ms->next;
  }
  return 0;
}

int adjust_baseaddress(ctx_t * ctx)
{
  mseg_t *ms;

  // find base address (first allocated PT_LOAD chunk)
  ms = ctx->mphdrs;
  while (ms) {
    if ((ms->p_type == PT_LOAD) && (ms->p_flags == (PF_R))) {
      if (ctx->base_address > (ms->p_vaddr & ~0xfff)) {
        ctx->base_address = ms->p_vaddr & ~0xfff;
      }
    }
    ms = (mseg_t *) ms->next;
  }

  if (ctx->base_address == 0) {
    ctx->base_address = ctx->mphdrs->p_vaddr & ~0xfff;
  }

  if (ctx->opt_debug) {
    printf("\n * first loadable segment at: 0x%x\n", ctx->base_address);
  }
  // patch load address of first chunk PT_LOAD allocated RX
  ms = ctx->mphdrs;
  while (ms) {
    if ((ms->p_type == PT_LOAD) && (ms->p_flags == (PF_R | PF_X))) {
      if (ctx->opt_debug) {
        printf
            (" -- patching base load address of first PT_LOAD Segment: %lu   -->>   %u\n",
             ms->p_vaddr, ctx->base_address);
      }
      ms->p_vaddr = ctx->base_address;
      ms->p_paddr = ctx->base_address;
      ms->p_memsz += ms->p_offset;
      ms->p_filesz += ms->p_offset;
      ms->p_offset = 0;
      break;
    }
    ms = (void *) ms->next;
  }
  return 0;
}

static unsigned int rd_phdrs(ctx_t * ctx)
{
  struct stat sb;
  char *p;
  int fdin;
  Elf_Ehdr *e = 0;
  unsigned int i = 0;
  int nread;
  Elf_Phdr *phdr, *eph;

  if (stat(ctx->binname, &sb) == -1) {
    perror("stat");
    exit(EXIT_FAILURE);
  }

  p = calloc(1, sb.st_size);
  fdin = open(ctx->binname, O_RDONLY);
  if (fdin <= 0) {
    perror("open");
    exit(-1);
  }
  nread = read(fdin, p, sb.st_size);
  if (nread != sb.st_size) {
    perror("read");
    exit(EXIT_FAILURE);
  }
  close(fdin);

  printf(" -- read: %u bytes\n", nread);

  e = (Elf_Ehdr *) p;
  phdr = (Elf_Phdr *) (p + e->e_phoff);
  eph = phdr + e->e_phnum;
  for (; phdr < eph; phdr++) {
    // Add to linked list

    // Create Meta section
    mseg_t *ms = calloc(1, sizeof(mseg_t));
    if (!ms) {
      perror("calloc");
      exit(EXIT_FAILURE);
    }

    memcpy(ms, phdr, sizeof(Elf_Phdr));

    // Add to double linked list of msec_t Meta sections
    DL_APPEND(ctx->mphdrs, ms);
    ctx->mphnum++;
    ctx->phnum++;
    i++;
  }

  printf(" -- Original: %u\n", i);
  return 0;
}

static unsigned int mk_phdrs(ctx_t * ctx)
{
  create_phdrs(ctx);

  sort_phdrs_premerge(ctx);

  merge_phdrs(ctx);

  sort_phdrs(ctx);

  adjust_baseaddress(ctx);

  sort_phdrs(ctx);              // Need to resort after patching
  merge_phdrs(ctx);
  sort_phdrs(ctx);              // Need to resort after patching

  return 0;
}

static unsigned int write_phdrs(ctx_t * ctx)
{
  unsigned int tmpm = 0;

  // Goto end of file, align on 8 bytes boundaries
  tmpm = lseek(ctx->fdout, 0x00, SEEK_END);
  write(ctx->fdout, nullstr, 20);
  if ((tmpm % 8) == 0) {
    tmpm += 8;
  }
  tmpm &= ~0xf;
  tmpm += sizeof(Elf_Phdr);     // Prepend NULL section
  ftruncate(ctx->fdout, tmpm);

  ctx->start_phdrs = lseek(ctx->fdout, 0x00, SEEK_END);

  ctx->phnum += 2;

  if (ctx->opt_verbose) {
    printf(" -- Writting %u segment headers\n", ctx->phnum);
  }
  // first entry is the program header itself
  Elf_Phdr *phdr = calloc(1, sizeof(Elf_Phdr));
  phdr->p_vaddr = ctx->base_address;
  phdr->p_paddr = ctx->base_address;
  phdr->p_type = PT_PHDR;
  phdr->p_offset = ctx->start_phdrs;
  phdr->p_flags = 5;
  phdr->p_filesz = ctx->phnum * sizeof(Elf_Phdr);
  phdr->p_memsz = ctx->phnum * sizeof(Elf_Phdr);
  phdr->p_align = 8;
  write(ctx->fdout, phdr, sizeof(Elf_Phdr));

  // Copy all the Phdrs
  mseg_t *p;
  DL_FOREACH(ctx->mphdrs, p) {
    write(ctx->fdout, p, sizeof(Elf_Phdr));
  }

  // Append a Program Header for the stack
  phdr->p_vaddr = 0;
  phdr->p_paddr = 0;
  phdr->p_type = PT_GNU_STACK;
  phdr->p_offset = 0;
  phdr->p_flags = 3;
  phdr->p_filesz = 0;
  phdr->p_memsz = 0;
  phdr->p_align = 0x10;
  write(ctx->fdout, phdr, sizeof(Elf_Phdr));

  return ctx->start_phdrs;
}


static unsigned int write_phdrs_original(ctx_t * ctx)
{
  unsigned int tmpm = 0;

  // Goto end of file, align on 8 bytes boundaries
  tmpm = lseek(ctx->fdout, 0x00, SEEK_END);
  write(ctx->fdout, nullstr, 20);
  if ((tmpm % 8) == 0) {
    tmpm += 8;
  }
  tmpm &= ~0xf;

  ftruncate(ctx->fdout, tmpm);

  ctx->start_phdrs = lseek(ctx->fdout, 0x00, SEEK_END);

  mseg_t *p;
  unsigned int i = 0;
  DL_FOREACH(ctx->mphdrs, p) {
    if (i == 0) {               // First Phdr is the Program Header itself
      p->p_offset = ctx->start_phdrs;   // Patch offset of Program header
      i = 1;
    }
    write(ctx->fdout, p, sizeof(Elf_Phdr));
  }
  return ctx->start_phdrs;
}


msec_t *mk_section(void)
{
  msec_t *ms;

  // allocate memory
  ms = calloc(1, sizeof(msec_t));
  if (!ms) {
    perror("calloc");
    exit(EXIT_FAILURE);
  }

  ms->s_elf = calloc(1, sizeof(Elf_Shdr));
  if (!ms->s_elf) {
    perror("calloc");
    exit(EXIT_FAILURE);
  }

  return ms;
}



static int write_strtab_and_reloc(ctx_t * ctx)
{

  unsigned int tmpm = 0;

  if (ctx->opt_debug) {
    printf(" * .strtab length:\t\t\t%u\n", globalstrtablen);
    printf(" * .symtab length:\t\t\t%u\n", globalsymtablen);
  }
  // Goto end of file
  tmpm = lseek(ctx->fdout, 0x00, SEEK_END);
  write(ctx->fdout, nullstr, 20);
  // align on 8 bytes boundaries
  if ((tmpm % 8) == 0) {
    tmpm += 8;
  };
  tmpm &= ~0xf;
  // truncate
  ftruncate(ctx->fdout, tmpm);

  // write relocations to binary
  tmpm = lseek(ctx->fdout, 0x00, SEEK_END);
  globalrelocoffset = tmpm;
  write(ctx->fdout, globalreloc, globalreloclen);

  // write string table to binary
  tmpm = lseek(ctx->fdout, 0x00, SEEK_END);
  globalstrtableoffset = tmpm;
  write(ctx->fdout, globalstrtab, globalstrtablen);

  // write symbol table to binary
  tmpm = lseek(ctx->fdout, 0x00, SEEK_END);
  globalsymtableoffset = tmpm;
  write(ctx->fdout, globalsymtab, globalsymtablen);

  return 0;
}


char *reloc_htype_x86_64(int thetype)
{

  char *htype;

  switch (thetype) {
  case R_X86_64_NONE:
    htype = "R_X86_64_NONE";
    break;

  case R_X86_64_64:
    htype = "R_X86_64_64";
    break;

  case R_X86_64_32:
    htype = "R_X86_64_32";
    break;

  case R_X86_64_32S:
    htype = "R_X86_64_32S";
    break;

  case R_X86_64_PC32:
    htype = "R_X86_64_PC32";
    break;

  case R_X86_64_GOT32:
    htype = "R_X86_64_GOT32";
    break;

  case R_X86_64_PLT32:
    htype = "R_X86_64_PLT32";
    break;

  case R_X86_64_COPY:
    htype = "R_X86_64_COPY";
    break;

  case R_X86_64_GLOB_DAT:
    htype = "R_X86_64_GLOB_DAT";
    break;

  case R_X86_64_JUMP_SLOT:
    htype = "R_X86_64_JUMP_SLOT";
    break;

  case R_X86_64_RELATIVE:
    htype = "R_X86_64_RELATIVE";
    break;

  case R_X86_64_GOTPCREL:
    htype = "R_X86_64_GOTPCREL";
    break;

  case R_X86_64_16:
    htype = "R_X86_64_16";
    break;

  case R_X86_64_PC16:
    htype = "R_X86_64_PC16";
    break;

  case R_X86_64_8:
    htype = "R_X86_64_8";
    break;

  case R_X86_64_PC8:
    htype = "R_X86_64_PC8";
    break;

  case R_X86_64_NUM:
    htype = "R_X86_64_NUM";
    break;

  default:
    htype = "Unknown";
    break;
  }

  return htype;
}


char *reloc_htype_x86_32(int thetype)
{
  char *htype;

  switch (thetype) {
  case R_386_NONE:
    htype = "R_386_NONE";
    break;

  case R_386_32:
    htype = "R_386_32";
    break;

  case R_386_PC32:
    htype = "R_386_PC32";
    break;

  case R_386_GOT32:
    htype = "R_386_GOT32";
    break;

  case R_386_PLT32:
    htype = "R_386_PLT32";
    break;

  case R_386_COPY:
    htype = "R_386_COPY";
    break;

  case R_386_GLOB_DAT:
    htype = "R_386_GLOB_DAT";
    break;

  case R_386_JMP_SLOT:
    htype = "R_386_JMP_SLOT";
    break;

  case R_386_RELATIVE:
    htype = "R_386_RELATIVE";
    break;

  case R_386_GOTOFF:
    htype = "R_386_GOTOFF";
    break;

  case R_386_GOTPC:
    htype = "R_386_GOTPC";
    break;

  case R_386_NUM:
    htype = "R_386_NUM";
    break;

  default:
    htype = "Unknown";
    break;
  }

  return htype;
}

char *reloc_htype(int thetype)
{
  switch (RELOC_MODE) {
  case RELOC_X86_64:
    return reloc_htype_x86_64(thetype);
  case RELOC_X86_32:
    return reloc_htype_x86_32(thetype);
  default:
    return "UNKNOWN_RELOCATION";
    break;
  }
}

static int parse_reloc(ctx_t * ctx, msec_t * s)
{

  Elf_Shdr *shdr;
  Elf_Rela *r;
  unsigned int sz;
  unsigned int i;
  char *htype = 0;
  unsigned int sindex = 0;

  unsigned int has_addend = 0;

  shdr = s->s_elf;
  sz = shdr->sh_size;

  has_addend = (shdr->sh_type == SHT_RELA) ? 1 : 0;     // SHT_RELA has addends, SHT_REL doesn't

  if ((shdr->sh_type == SHT_RELA)
      && (shdr->sh_entsize != entszfromname(".rela.dyn"))) {
    printf("warning: strange relocation size: %lu != %u in %s\n",
           shdr->sh_entsize, entszfromname(".rela.dyn"), s->name);
    return -1;
  }

  if ((shdr->sh_type == SHT_REL)
      && (shdr->sh_entsize != entszfromname(".rel.dyn"))) {
    printf("warning: strange relocation size: %lu != %u in %s\n",
           shdr->sh_entsize, entszfromname(".rel.dyn"), s->name);
    return -1;
  }

  if ((shdr->sh_type == SHT_RELA)
      && (shdr->sh_size % entszfromname(".rela.dyn"))) {
    printf
        ("warning: strange relocation section size: %lu not a multiple of %u in %s\n",
         shdr->sh_size, entszfromname(".rela.dyn"), s->name);
    return -1;
  }

  if ((shdr->sh_type == SHT_REL) && (shdr->sh_size % entszfromname(".rel.dyn"))) {
    printf
        ("warning: strange relocation section size: %lu not a multiple of %u in %s\n",
         shdr->sh_size, entszfromname(".rel.dyn"), s->name);
    return -1;
  }

  if (ctx->opt_verbose) {
    printf("\t%s\tsize:%u\t%lu relocations\n", s->name, sz,
           sz / shdr->sh_entsize);
  }

  for (i = 0; i < sz / shdr->sh_entsize; i++) {
    r = s->data + i * shdr->sh_entsize;

    htype = reloc_htype(ELF_R_TYPE(r->r_info));

    if (ELF_R_TYPE(r->r_info) == R_X86_64_RELATIVE) {
      if (ctx->opt_debug) {
        printf("reloc[%u] %016lx\t%lu\t%s\t%u\taddend:%lx\t\n", i, r->r_offset,
               r->r_info, htype, sindex, r->r_addend);
        printf(" * Skipping relative relocation\n");
      }
      ctx->has_relativerelocations = 1; // Binary has relative relocations
      continue;                 // Do not save relocation for R_X86_64_RELATIVE
    } else {
      sindex = ELF_R_SYM(r->r_info);

      sindex += maxnewsec;      // account for section references at top of symbol table

      // write back sindex in symtab
      ELF_R_INFO(sindex, ELF_R_TYPE(r->r_info));
    }

    if (ctx->opt_verbose) {
      printf("reloc[%u] %016lx\t%lu\t%s\t%u\taddend:%lu\t\n", i, r->r_offset,
             r->r_info, htype, sindex, r->r_addend);
    }

    save_reloc(ctx, r, sindex, has_addend);
  }

  if (ctx->opt_verbose) {
    printf("\n");
  }
  return 0;
}

int fixup_strtab_and_symtab(ctx_t * ctx)
{

  char *sname = 0;
  Elf_Sym *s;
  unsigned int i, sindex;

  if (!globalsymtab) {
    return 0;
  }

  if (!globalstrtab) {
    return 0;
  }

  if (ctx->opt_debug) {
    printf("\n -- Fixing strtab and symtab with delta of %u\n\n", deltastrtab);
  }

  for (sindex = maxnewsec + 1; sindex < (globalsymtablen / sizeof(Elf_Sym));
       sindex++) {

    // get symbol name from index
    s = globalsymtab + sindex * sizeof(Elf_Sym);

    s->st_name += deltastrtab;  // fix symbol name offset in symbol table

    for (i = 0; i < sizeof(blnames) / sizeof(char *); i++) {
      sname = (char *) (globalstrtab + s->st_name);
      if ((s->st_name < globalstrtablen)
          && (strlen(sname) == strlen(blnames[i]))
          && (!strncmp(sname, blnames[i], strlen(blnames[i])))) {
        if (ctx->opt_debug) {
          printf(" * name blacklisted: %s at index %u\n", sname, sindex);
        }
        // generate new symbol name from old one

        globalstrtab =
            realloc(globalstrtab, globalstrtablen + strlen(sname) + 5);
        sprintf(globalstrtab + globalstrtablen, "old_%s", sname);
        s->st_name = globalstrtablen;
        globalstrtablen += strlen(globalstrtab + globalstrtablen) + 1;

        // change type and link information
        s->st_info = ELF64_ST_INFO(STB_WEAK, STT_NOTYPE);
        s->st_shndx = 0;
      }
    }
  }
  return 0;
}


int fixup_text(ctx_t * ctx)
{
  msec_t *s;

  if (ctx->opt_debug) {
    printf(" -- Fixup .text\n\n");
  }

  DL_FOREACH(ctx->mshdrs, s) {
    if (!strncmp(s->name, ".text", 6)) {
      unsigned int newsz = datavma - textvma + maxdata - mindata;
      if (ctx->opt_debug) {
        printf
            (" * .text section found, increasing size from 0x%lx to 0x%x (0x%lx)\n",
             s->s_elf->sh_size, newsz, s->len);
      }
      s->s_elf->sh_size = newsz;
      // extend data
      s->data = realloc(s->data, newsz);
      // pad
      memset(s->data + s->len, 0x00, newsz - s->len);
      s->s_elf->sh_offset = orig_sz;
      s->outoffset = orig_sz;
      // extend output file
      ftruncate(ctx->fdout, s->outoffset + s->s_elf->sh_size);
      s->len = newsz;
      break;
    }
  }
  return 0;
}

static unsigned int parse_relocations(ctx_t * ctx)
{
  msec_t *s;

  if (ctx->opt_verbose) {
    printf("\n -- Parsing existing relocations\n\n");
  }
  DL_FOREACH(ctx->mshdrs, s) {
    if ((s->s_elf) && (s->s_elf->sh_type == SHT_RELA)) {        // relocations with addends
      parse_reloc(ctx, s);
    } else if ((s->s_elf) && (s->s_elf->sh_type == SHT_REL)) {  // relocations without addends
      parse_reloc(ctx, s);
    }
  }

  if (ctx->opt_verbose) {
    printf("\n");
  }

  return 0;
}


unsigned int append_sym(Elf_Sym * s)
{

  if (globalsymtab == 0) {
    globalsymtab = calloc(1, sizeof(Elf_Sym) * 2);
    globalsymtablen += sizeof(Elf_Sym); // Skip 1 NULL entry
  } else {
    globalsymtab = realloc(globalsymtab, sizeof(Elf_Sym) + globalsymtablen);
  }

  memcpy(globalsymtab + globalsymtablen, s, sizeof(Elf_Sym));

  globalsymtablen += sizeof(Elf_Sym);

  return 0;

}

unsigned int append_strtab(char *str)
{

  unsigned int nameptr;

  if (globalstrtab == 0) {
    globalstrtab = calloc(1, strlen(str) + 3);
    globalstrtablen++;          // Start with a null byte
  } else {
    globalstrtab = realloc(globalstrtab, globalstrtablen + strlen(str) + 2);
  }
  memcpy(globalstrtab + globalstrtablen, str, strlen(str) + 1);
  nameptr = globalstrtablen;
  globalstrtablen += strlen(str) + 1;

  return nameptr;
}


static int create_section_symbols(ctx_t * ctx)
{

  msec_t *tmp;
  msec_t *s;
  unsigned int nameptr;
  Elf_Sym *sym;
  unsigned int i, n;

  sym = calloc(1, sizeof(Elf_Sym));

  DL_COUNT(ctx->mshdrs, tmp, maxoldsec);        // count before stripping

  for (i = 1; i <= maxoldsec; i++) {
    s = section_from_index(ctx, i);
    n = secindex_from_name_after_strip(ctx, s->name);
    if (n > maxnewsec) {
      maxnewsec = n;
    }
  }

//      maxnewsec += EXTRA_CREATED_SECTIONS;    // count sections not yet created
  if (ctx->opt_debug) {
    printf(" -- Max section index after stripping: %u\n", maxnewsec);
  }

  // Create symbol for section
  for (i = 1; i <= maxnewsec; i++) {

    char *newsname = 0;

    newsname = sec_name_from_index_after_strip(ctx, i);
    if (!newsname) {

      switch (i - EXTRA_CREATED_SECTIONS - 1) {
      case 1:
        newsname = ".rela.all";
        break;
      case 2:
        newsname = ".strtab";
        break;
      case 3:
        newsname = ".symtab";
        break;
      case 4:
        newsname = ".shstrtab";
        break;

      default:
        newsname = ".unknown";
        break;

      }
    }

    nameptr = append_strtab(newsname);

    if (ctx->opt_debug) {
      printf("%u %s\n", i, newsname);
    }

    sym->st_name = nameptr;
    sym->st_size = 0;
    sym->st_value = 0;
    sym->st_info = STT_SECTION;
    sym->st_other = 0;
    sym->st_shndx = i;

    append_sym(sym);
  }

  free(sym);

  deltastrtab = globalstrtablen;

  if (ctx->opt_debug) {
    printf(" -- Base sections symbol index: %u\n", 0);
    printf(" -- Delta string table: %u\n", deltastrtab);
  }

  return 0;
}

static unsigned int process_text(ctx_t * ctx)
{

  msec_t *t;
  unsigned int delta;

  t = section_from_name(ctx, ".text");
  delta = orig_text - textvma;

  // create section symbols
//      create_section_symbols(ctx);

  // parse text for relocations
  analyze_text(ctx, (char *) (t->data + delta), maxtext - mintext - delta,
               orig_text);

  return 0;
}

static unsigned int write_shdrs(ctx_t * ctx)
{
  Elf_Shdr *shdr = 0;
  unsigned int tmpm = 0;
  msec_t *s;

  // Goto end of file
  tmpm = lseek(ctx->fdout, 0x00, SEEK_END);
  write(ctx->fdout, nullstr, 20);
  write(ctx->fdout, nullstr, 20);
  write(ctx->fdout, nullstr, 20);
  tmpm = lseek(ctx->fdout, 0x00, SEEK_END);
  // align on 8 bytes boundaries
  if ((tmpm % 8) == 0) {
    tmpm += 8;
  };
  tmpm &= ~0xf;
  tmpm += sizeof(Elf_Shdr);     // Prepend a NULL section
  // truncate
  ftruncate(ctx->fdout, tmpm);

  ctx->start_shdrs = lseek(ctx->fdout, 0x00, SEEK_END) - sizeof(Elf_Shdr);      // New start of SHDRs
  ctx->strndx[0] = 0;
  ctx->strndx_len = 1;

  DL_FOREACH(ctx->mshdrs, s) {

    // append name to strndx
    memcpy(ctx->strndx + ctx->strndx_len, s->name, strlen(s->name) + 1);        // do copy the final "\x00"
    s->s_elf->sh_name = ctx->strndx_len;
    ctx->strndx_len += strlen(s->name) + 1;

    // adjust section links and info
    s->s_elf->sh_link = link_from_name(ctx, s->name);   // Link to another section 
    s->s_elf->sh_info = info_from_name(ctx, s->name);   // Additional section information 

    // write section header to binary
    write(ctx->fdout, s->s_elf, sizeof(Elf_Shdr));
  }


  // append name to strndx
  memcpy(ctx->strndx + ctx->strndx_len, ".rela.all", 10);

  shdr = calloc(1, sizeof(Elf_Shdr));

  shdr->sh_name = ctx->strndx_len;      // index in string table
  shdr->sh_type = SHT_RELA;     // Section type 
  shdr->sh_flags = 2;           // Section flags 
  shdr->sh_addr = 0;            // Section virtual addr at execution 
  shdr->sh_offset = globalrelocoffset;  // Section file offset 
  shdr->sh_size = globalreloclen;       // Section size in bytes 
  shdr->sh_link = ctx->shnum + 3;       // Link to another section 
  shdr->sh_info = 1;            // Additional section information  : .text
  shdr->sh_addralign = 8;       // Section alignment 
  shdr->sh_entsize = entszfromname(".rela.plt");        // Entry size if section holds table 

  ctx->strndx_len += 10;

  // append string table section header to binary
  write(ctx->fdout, shdr, sizeof(Elf_Shdr));
  free(shdr);

  ctx->strndx_index = ctx->shnum + 1;
  // append sections strint table to binary
//  write(ctx->fdout, ctx->strndx, ctx->strndx_len);

  // append name to strndx
  memcpy(ctx->strndx + ctx->strndx_len, ".strtab", 8);

  shdr = calloc(1, sizeof(Elf_Shdr));

  shdr->sh_name = ctx->strndx_len;      // index in string table
  shdr->sh_type = SHT_STRTAB;   // Section type 
  shdr->sh_flags = 0;           // Section flags 
  shdr->sh_addr = 0;            // Section virtual addr at execution 
  shdr->sh_offset = globalstrtableoffset;       // Section file offset 
  shdr->sh_size = globalstrtablen;      // Section size in bytes 
  shdr->sh_link = 0;            // Link to another section 
  shdr->sh_info = 0;            // Additional section information 
  shdr->sh_addralign = 1;       // Section alignment 
  shdr->sh_entsize = entszfromname(".strtab");  // Entry size if section holds table 

  ctx->strndx_len += 8;

  // append string table section header to binary
  write(ctx->fdout, shdr, sizeof(Elf_Shdr));
  free(shdr);

  ctx->strndx_index = ctx->shnum + 1;
  // append sections strint table to binary
//      write(ctx->fdout, ctx->strndx, ctx->strndx_len);


  // append name to strndx
  memcpy(ctx->strndx + ctx->strndx_len, ".symtab", 8);

  shdr = calloc(1, sizeof(Elf_Shdr));

  shdr->sh_name = ctx->strndx_len;      // index in string table
  shdr->sh_type = SHT_SYMTAB;   // Section type 
  shdr->sh_flags = 0;           // Section flags 
  shdr->sh_addr = 0;            // Section virtual addr at execution 
  shdr->sh_offset = globalsymtableoffset;       // Section file offset 
  shdr->sh_size = globalsymtablen;      // Section size in bytes 
  shdr->sh_link = ctx->shnum + 2;       // Link to another section (strtab) 
  shdr->sh_info = ctx->shnum + 1;       // Additional section information 
  shdr->sh_addralign = 8;       // Section alignment 
//      shdr->sh_entsize = 0;   // Entry size if section holds table 
  shdr->sh_entsize = entszfromname(".symtab");  // Entry size if section holds table 

  ctx->strndx_len += 8;

  // append string table section header to binary
  write(ctx->fdout, shdr, sizeof(Elf_Shdr));
  free(shdr);

  ctx->strndx_index = ctx->shnum + 1;
  // append sections strint table to binary
//      write(ctx->fdout, ctx->strndx, ctx->strndx_len);


  // append name to strndx
  memcpy(ctx->strndx + ctx->strndx_len, ".shstrtab", 10);

  shdr = calloc(1, sizeof(Elf_Shdr));

  shdr->sh_name = ctx->strndx_len;      // index in string table
  shdr->sh_type = SHT_STRTAB;   // Section type 
  shdr->sh_flags = 0;           // Section flags 
  shdr->sh_addr = 0;            // Section virtual addr at execution 
//      shdr->sh_offset = lseek(ctx->fdout, 0x00, SEEK_END) + 64;       // Section file offset 
  shdr->sh_offset = lseek(ctx->fdout, 0x00, SEEK_END) + sizeof(Elf_Shdr);       // Section file offset 
  shdr->sh_size = ctx->strndx_len + 10; // Section size in bytes 
  shdr->sh_link = 0;            // Link to another section 
  shdr->sh_info = 0;            // Additional section information 
  shdr->sh_addralign = 1;       // Section alignment 
  shdr->sh_entsize = 0;         // Entry size if section holds table 

  ctx->strndx_len += 9 + 1;

  // append string table section header to binary
  write(ctx->fdout, shdr, sizeof(Elf_Shdr));
  free(shdr);

  ctx->strndx_index = ctx->shnum + 1;
  // append sections strint table to binary
  write(ctx->fdout, ctx->strndx, ctx->strndx_len);

  if (ctx->opt_debug) {
    printf(" * section headers at:\t\t\t0x%x\n", ctx->start_shdrs);
    printf(" * section string table index:\t\t%u\n", ctx->shnum);
  }
  return ctx->start_shdrs;
}

static int mk_ehdr(ctx_t * ctx)
{
  Elf_Ehdr *e = 0;

  e = calloc(1, sizeof(Elf_Ehdr));
  if (!e) {
    perror("calloc");
    exit(EXIT_FAILURE);
  }

  // Set ELF signature
  memcpy(e->e_ident, "\x7f\x45\x4c\x46\x02\x01\x01", 7);
  e->e_ident[EI_CLASS] = ELFCLASS;      // 64 or 32 bits
  e->e_entry = bfd_get_start_address(ctx->abfd);
  // Set type of ELF based on command line options and compilation target
  e->e_type = ET_DYN;           // Default is shared library
  e->e_machine = ctx->opt_arch ? ctx->opt_arch : ELFMACHINE;    // Default : idem compiler cpu, else, user specified
  e->e_version = 0x1;           // ABI Version, Always 1
  e->e_phoff = ctx->start_phdrs;
  e->e_shoff = ctx->start_shdrs;
  e->e_flags = ctx->opt_flags;  // default is null. Used in setting some EABI versions on ARM
  e->e_ehsize = sizeof(Elf_Ehdr);       // Size of this header
  e->e_phentsize = sizeof(Elf_Phdr);    // Size of each program header
  e->e_phnum = ctx->phnum;
  e->e_shentsize = sizeof(Elf_Shdr);    // Size of each section header
  e->e_shnum = ctx->shnum + 5;  // We added a null section and a string table index + .strtab + .symtab + .rela.all
  e->e_shstrndx = ctx->shnum + 4;       // Sections Seader String table index is last valid

  if (ctx->opt_sstrip) {
    e->e_shoff = 0;
    e->e_shnum = 0;
    e->e_shstrndx = 0;          // Sections Seader String table index is last valid
    e->e_shentsize = 0;
  }

  if ((ctx->opt_exec) || (ctx->opt_static)) {
    e->e_type = ET_EXEC;        // Executable
  }
  if (ctx->opt_shared) {
    e->e_type = ET_DYN;         // Shared library
  }
  if (ctx->opt_reloc) {
    e->e_type = ET_REL;         // Relocatable object
    e->e_entry = 0;
    e->e_phoff = 0;
    e->e_phnum = 0;
    e->e_phentsize = 0;
  }

  if (ctx->opt_core) {
    e->e_type = ET_CORE;        // Core file
  }
  // write ELF Header
  lseek(ctx->fdout, 0x00, SEEK_SET);
  write(ctx->fdout, e, sizeof(Elf_Ehdr));
  return 0;
}

static int write_section(ctx_t * ctx, msec_t * m)
{
  unsigned int nwrite = 0;

  // Go to correct offset in output binary
  lseek(ctx->fdout, (unsigned long int) m->outoffset, SEEK_SET);

  // write to fdout
  nwrite = write(ctx->fdout, m->data, m->len);
  if (nwrite != m->len) {
    printf("write failed: %u != %lu %s\n", nwrite, m->len, strerror(errno));
    exit(EXIT_FAILURE);
  }
  return nwrite;
}

static int rd_extended_text(ctx_t * ctx)
{
  unsigned int i;
  asection *s;

  if (ctx->opt_debug) {
    printf(" -- Finding .text segment boundaries\n\n");

    printf(" index\t\tname\t\t\trange\tsize\tpermissions\toffset\n");
    printf
        ("--------------------------------------------------------------------\n");
  }
  s = ctx->abfd->sections;
  for (i = 0; i < ctx->shnum; i++) {
    unsigned perms = parse_bfd_perm(s->flags);
    if (perms == 5) {
      if (ctx->opt_debug) {
        int pad;
        pad = MAXPADLEN - strlen(s->name);
        if (pad < 0) {
          pad = 0;
        }

        printf(" [%2u] \t%s% *s\t%012llx-%012llx %llu\t%s\t%llu\n", i + 1,
               s->name, pad, "", s->vma, s->vma + s->size, s->size, "RX",
               s->filepos);
      }

      if (s->filepos < mintext) {
        mintext = s->filepos;
        textvma = s->vma;
      }
      if (s->filepos + s->size > maxtext) {
        maxtext = s->filepos + s->size;
      }
    }
    s = s->next;
  }

  if (ctx->opt_debug) {
    printf(" --> .text future boundaries: offset:%lu sz:%lu vma:%lx\n\n",
           mintext, maxtext - mintext, textvma);
  }
  return 0;
}

static int rd_extended_data(ctx_t * ctx)
{
  unsigned int i;
  asection *s;

  if (ctx->opt_debug) {
    printf(" -- Finding .data segment boundaries\n\n");

    printf(" index\t\tname\t\t\trange\tsize\tpermissions\toffset\n");
    printf("--------------------------------------------------------------------\n");
  }
  s = ctx->abfd->sections;
  for (i = 0; i < ctx->shnum; i++) {
    unsigned perms = parse_bfd_perm(s->flags);
    if (perms == 4) {
      if (ctx->opt_debug) {
        int pad;
        pad = MAXPADLEN - strlen(s->name);
        if (pad < 0) {
          pad = 0;
        }

        printf(" [%2u] \t%s % *s\t%012llx-%012llx %llu\t%s\t%lu\n", i + 1,
               s->name, pad, "", s->vma, s->vma + s->size, s->size, "RW",
               s->filepos);
      }

      if (s->filepos < mindata) {
        mindata = s->filepos;
        datavma = s->vma;
      }
      if (s->filepos + s->size > maxdata) {
        maxdata = s->filepos + s->size;
      }
    }
    s = s->next;
  }

  if (ctx->opt_debug) {
    printf(" --> .data future boundaries: offset:%lu sz:%lu vma:%lx\n\n",
           mindata, maxdata - mindata, datavma);
  }
  return 0;
}


static int extend_text(ctx_t * ctx)
{
  unsigned int i;
  asection *s;

  if (ctx->opt_debug) {
    printf(" -- Extending .text\n\n");
  }

  s = ctx->abfd->sections;
  for (i = 0; i < ctx->shnum; i++) {
    if (!strncmp(s->name, ".text", 5)) {
      orig_text = s->vma;
      s->vma = textvma;
      s->filepos = mintext;
      s->flags = -1;
      s->size = maxtext - mintext;
      if (ctx->opt_debug) {
        printf(" * extending section %s\n", s->name);
        printf(" * new .text boundaries: offset:%lu sz:%lu vma:%lx\n\n",
               mintext, s->size, textvma);
      }
    }
    s = s->next;
  }
  return 0;
}

int print_bfd_sections(ctx_t * ctx)
{
  unsigned int i;
  asection *s;
  int pad;
  unsigned perms;
  char *hperms;

  if (ctx->opt_verbose) {
    printf("\n -- Input binary sections\n\n");
    printf
        ("             name                      address range     pages  perms    offset\n");
    printf
        (" --------------------------------------------------------------------------------\n");
  }

  s = ctx->abfd->sections;
  for (i = 0; i < ctx->shnum; i++) {
    perms = parse_bfd_perm(s->flags);
    switch (perms) {
    case 7:
      hperms = "rwx";
      break;
    case 6:
      hperms = "r--";
      break;
    case 5:
      hperms = "r-x";
      break;
    case 4:
      hperms = "rw-";
      break;
    default:
      hperms = "---";
      break;
    }

    pad = MAXPADLEN - strlen(s->name);
    if (pad < 0) {
      pad = 0;
    }

    if (ctx->opt_verbose) {
      printf(" [%2u] %s% *s\t%012llx-%012llx %llu\t%s\t%lu\n", i + 1, s->name,
             pad, "", s->vma, s->vma + s->size, s->size, hperms, s->filepos);
    }
    s = s->next;
  }

  if (ctx->opt_verbose) {
    printf("\n");
  }
  return 0;
}

void hexdump(unsigned char *data, size_t size)
{
  size_t i, j;

  for (j = 0; j < size; j += 16) {
    for (i = j; i < j + 16; i++) {
      if (i < size) {
        printf("%02x ", data[i] & 255);
      } else {
        printf("   ");
      }
    }
    printf("   ");
    for (i = j; i < j + 16; i++) {
      if (i < size)
        putchar(32 <= (data[i] & 127)
                && (data[i] & 127) < 127 ? data[i] & 127 : '.');
      else
        putchar(' ');
    }
    putchar('\n');
  }
}

unsigned int open_best(ctx_t * ctx)
{
  int formatok = 0;

  // Open as object
  formatok = bfd_check_format(ctx->abfd, bfd_object);
  ctx->shnum = bfd_count_sections(ctx->abfd);
  ctx->corefile = 0;

  // Open as core file
  if ((!formatok) || (!ctx->shnum)) {
    formatok = bfd_check_format(ctx->abfd, bfd_core);
    ctx->shnum = bfd_count_sections(ctx->abfd);
    ctx->corefile = 1;
  }
  // Open as archive
  if ((!formatok) || (!ctx->shnum)) {
    formatok = bfd_check_format(ctx->abfd, bfd_archive);
    ctx->shnum = bfd_count_sections(ctx->abfd);
    ctx->corefile = 0;
  }

  if ((!formatok) || (!ctx->shnum)) {
    printf(" -- couldn't find a format for %s\n", ctx->binname);
    return 0;
  }
  return ctx->shnum;
}

int open_target(ctx_t * ctx)
{
  int fd = 0;
  struct stat sb;
  char *newname;
  char *p;

  if (stat(ctx->binname, &sb) == -1) {
    perror("stat");
    exit(EXIT_FAILURE);
  }

  if ((ctx->opt_binname) && (strlen(ctx->opt_binname))) {
    newname = ctx->opt_binname;
  } else {
    newname = calloc(1, strlen(ctx->binname) + 20);
    sprintf(newname, "a.out");
  }

  if (ctx->opt_debug) {
    printf(" -- Creating output file: %s\n\n", newname);
  }

  fd = open(newname, O_RDWR | O_CREAT | O_TRUNC, 0666);
  if (fd <= 0) {
    printf(" ERROR: open(%s) %s\n", newname, strerror(errno));
    exit(EXIT_FAILURE);
  }
  // set end of file
  ftruncate(fd, sb.st_size);

  // Copy default content : poison bytes or original data
  p = calloc(1, sb.st_size);
  if (ctx->opt_poison) {
    // map entire binary with poison byte
    memset(p, ctx->opt_poison, sb.st_size);
  } else {
    // Default : copy original binary
    int fdin = open(ctx->binname, O_RDONLY);
    read(fdin, p, sb.st_size);
    close(fdin);
  }
  lseek(fd, 0x00, SEEK_SET);
  write(fd, p, sb.st_size);
  free(p);
  lseek(fd, 0x00, SEEK_SET);

  ctx->fdout = fd;
  return fd;
}

int copy_body(ctx_t * ctx)
{
  msec_t *s;

  DL_FOREACH(ctx->mshdrs, s) {
    write_section(ctx, s);
  }
  return 0;
}

int load_binary(ctx_t * ctx)
{
  ctx->abfd = bfd_openr(ctx->binname, NULL);
  ctx->shnum = open_best(ctx);
  ctx->archsz = bfd_get_arch_size(ctx->abfd);
  if (ctx->opt_verbose) {
    printf(" -- Architecture size: %u\n", ctx->archsz);
  }
  return 0;
}

int flags_from_name(const char *name)
{
  ifis(".bss") {
    return FLAG_BSS | FLAG_NOBIT | FLAG_NOWRITE;
  }
  elis(".text") {
    return FLAG_TEXT;
  }
  return 0;
}

int craft_section(ctx_t * ctx, msec_t * m)
{
  asection *s = m->s_bfd;
  Elf_Shdr *shdr = m->s_elf;
  unsigned int dalign = 0;
  unsigned int dperms = 0;

  unsigned perms = parse_bfd_perm(s->flags);
  dperms = 0;
  switch (perms & 0xf) {
  case 7:
    dperms = SHF_ALLOC | SHF_WRITE | SHF_EXECINSTR;     // "rwx";
    break;
  case 6:
    dperms = SHF_ALLOC;         //"r--";
    break;
  case 5:
    dperms = SHF_ALLOC | SHF_EXECINSTR; // "r-x";
    break;
  case 4:
    dperms = SHF_ALLOC | SHF_WRITE;     // "rw-"
    break;
  default:
    dalign = 1;
    dperms = 0;                 // "---"
    break;
  }

  // append name to strndx
  memcpy(ctx->strndx + ctx->strndx_len, s->name, strlen(s->name));

  shdr->sh_name = ctx->strndx_len;      // Section name (string tbl index) 
  shdr->sh_type = typefromname(s->name);        // Section type 
  shdr->sh_flags = dperms;      // Section flags 
  shdr->sh_addr = s->vma;       // Section virtual addr at execution 

  if (ctx->opt_reloc) {
    shdr->sh_addr = 0;          // vma is null in relocatable files
  }

  shdr->sh_offset = s->filepos; // Section file offset 
  shdr->sh_size = s->size;      // Section size in bytes 
  shdr->sh_addralign = dalign ? dalign : alignfromname(s->name);        // Section alignment 
  shdr->sh_entsize = entszfromname(s->name);    // Entry size if section holds table 

  ctx->strndx_len += strlen(s->name) + 1;
  return 0;
}

static int read_section(ctx_t * ctx, asection * s)
{
  int fd = 0;
  unsigned int n, nread = 0, nwrite = 0;
  asection *buf;
  unsigned int wantedsz = 0;

  // Open input binary
  fd = open(ctx->binname, O_RDONLY);
  if (fd <= 0) {
    printf("error: open(%s) : %s\n", ctx->binname, strerror(errno));
    exit(0);
  }
  // Go to correct offset
  lseek(fd, s->filepos, SEEK_SET);

  // allocate tmp memory
  wantedsz = s->size;
  if (!strncmp(s->name, ".text", 5)) {
    wantedsz = s->size;
  }
  buf = calloc(1, wantedsz);

  // Create Meta section
  msec_t *ms = calloc(1, sizeof(msec_t));
  if (!ms) {
    perror("calloc");
    exit(EXIT_FAILURE);
  }

  ms->s_elf = calloc(1, sizeof(Elf_Shdr));
  if (!ms->s_elf) {
    perror("calloc");
    exit(EXIT_FAILURE);
  }
  // read data from disk
  if (!strncmp(s->name, ".bss", 4)) {
    // SHT_NOBITS Section contains no data (Global Uninitialized Data)
    n = 0;
    buf = realloc(buf, 0);
  } else {
    // read from disk
    n = 0;
    nread = read(fd, buf, s->size);
    while ((nread != 0) && (n <= s->size)) {
      n += nread;
      nread = read(fd, buf + n, s->size - n);
    }

    if ((n != s->size) && (!strncmp(s->name, ".text", 5))) {
      n = s->size;
      // initialized at 0x00 by calloc
    } else if (n != s->size) {
      printf("read failed: %u != %u\n", n, (unsigned int) s->size);
    }
  }

  // fill Meta section
  ms->s_bfd = s;
  ms->len = n;
  ms->name = strdup(s->name);
  ms->data = (unsigned char *) buf;
  ms->outoffset = (char *) s->filepos;

  // fill ELF section
  craft_section(ctx, ms);

  ms->flags = flags_from_name(s->name);

  // Add to double linked list of msec_t Meta sections
  DL_APPEND(ctx->mshdrs, ms);
  ctx->mshnum++;

  // Close file descriptor
  close(fd);
  return nwrite;
}

int print_msec(ctx_t * ctx)
{
  msec_t *ms;
  unsigned int count;

  DL_COUNT(ctx->mshdrs, ms, count);
  printf(" -- %u elements\n", count);

  DL_FOREACH(ctx->mshdrs, ms) {
    printf("%s  %lu\n", ms->name, ms->len);
  }
  return 0;
}

int rd_sections(ctx_t * ctx)
{
  unsigned int i;

  asection *s = ctx->abfd->sections;
  for (i = 0; i < ctx->shnum; i++) {
    read_section(ctx, s);
    s = s->next;
  }
  return 0;
}


int save_dynstr(ctx_t * ctx, GElf_Shdr shdr, char *binary)
{

  if (globalstrtab == 0) {
    globalstrtab = calloc(1, shdr.sh_size + 3);
    globalstrtablen++;          // Start with a null byte
  } else {
    globalstrtab = realloc(globalstrtab, globalstrtablen + shdr.sh_size + 2);
  }
  memcpy(globalstrtab + globalstrtablen, binary + shdr.sh_offset,
         shdr.sh_size + 1);
  globalstrtablen += shdr.sh_size + 1;

  return 0;
}



int save_dynsym(ctx_t * ctx, GElf_Shdr shdr, char *binary)
{

  if (globalsymtab == 0) {
    globalsymtab = calloc(1, sizeof(Elf_Sym) + shdr.sh_size);
//              globalsymtablen += sizeof(Elf_Sym);             // Skip 1 NULL entry
  } else {
    globalsymtab = realloc(globalsymtab, shdr.sh_size + globalsymtablen);
  }

  memcpy(globalsymtab + globalsymtablen,
         binary + shdr.sh_offset + sizeof(Elf_Sym),
         shdr.sh_size - sizeof(Elf_Sym));

  globalsymtablen += shdr.sh_size - sizeof(Elf_Sym);

  return 0;
}


int patch_symbol_index(ctx_t * ctx, Elf_Sym * s)
{
  msec_t *sec;
  char *sname;

  sname = globalstrtab + s->st_name;

  sec = section_from_index(ctx, s->st_shndx);   // section related to this object
  if (sec) {
    // patch section index in symbol table
    s->st_shndx = secindex_from_name_after_strip(ctx, sec->name);
  } else {
//              printf(" no section info for symbol: %s\n", sname);
  }

  return 0;
}


int fixup_symtab_section_index(ctx_t * ctx)
{

  Elf_Sym *s;
  unsigned int sindex;

  for (sindex = maxnewsec + 1; sindex < globalsymtablen / sizeof(Elf_Sym);
       sindex++) {

    // get symbol name from index
    s = globalsymtab + sindex * sizeof(Elf_Sym);

    if (s->st_shndx) {
      patch_symbol_index(ctx, s);
    }

  }
  return 0;
}

int append_reloc(Elf_Rela * r)
{

  unsigned int i;
  Elf_Rela *s;

  // search this address in reloc table
  for (i = 0; i < globalreloclen / sizeof(Elf_Rela); i++) {
    s = globalreloc + i * sizeof(Elf_Rela);
    //
    if (s->r_offset == r->r_offset) {
      printf("warning: already have a relocation at %lu\n", r->r_offset);
      return -1;                // already in relocation section
    }
  }

  // save relocation
  if (!globalreloc) {
    globalreloc = calloc(1, sizeof(Elf_Rela));
  } else {
    globalreloc = realloc(globalreloc, sizeof(Elf_Rela) + globalreloclen);
  }

  memcpy(globalreloc + globalreloclen, r, sizeof(Elf_Rela));
  globalreloclen += sizeof(Elf_Rela);

  return 0;

}

typedef struct gimport_t {
  char *sname;
  msec_t *sec;
  Elf_Rela *r;
  int rtype;
  unsigned int sindex;
} gimport_t;

gimport_t **gimports = 0;
unsigned int gimportslen = 0;

int save_global_import(ctx_t * ctx, char *sname, msec_t * sec, Elf_Rela * r, unsigned int sindex)
{
  int rtype;
  gimport_t *g;
  Elf_Rela *rnew;

  rtype = ELF_R_TYPE(r->r_info);

  if (ctx->opt_verbose) {
    printf
        ("recording blobal import variable %s in section: %s\t%s\tat:%lu\toff:%lu\n",
         sname, sec->name, reloc_htype(rtype), r->r_offset,
         r->r_offset - textvma);
  }

  g = calloc(1, sizeof(gimport_t));
  g->sname = strdup(sname);
  g->sec = sec;
  g->sindex = sindex;           // index of symbol in symbol table

  rnew = calloc(1, sizeof(Elf_Rela));
  memcpy(rnew, r, sizeof(Elf_Rela));
  g->r = rnew;
  g->rtype = rtype;

  if (!gimports) {
    gimports = calloc(1, sizeof(gimport_t *));
  } else {
    gimports = realloc(gimports, sizeof(gimport_t *) * (gimportslen + 1));
  }
  gimports[gimportslen++] = g;
  return 0;
}

int check_global_import(unsigned long int addr)
{
  unsigned i;

  if (addr < 4096) {
    return -1;
  }

  for (i = 0; i < gimportslen; i++) {
    if ((gimports[i]) && (gimports[i]->r) && (gimports[i]->r->r_offset == addr)) {
      return i;
    }
  }

  return -1;
}

int save_reloc(ctx_t * ctx, Elf_Rela * r, unsigned int sindex, int has_addend)
{

  Elf_Sym *s;
  char *sname = 0;
  unsigned int i;

  int rtype, outtype;
  char *htype;
  msec_t *sec;

  Elf_Rela *rout;

  rout = calloc(1, sizeof(Elf_Rela));   // Work on a copy of the relocation instead of the original one
  memcpy(rout, r, sizeof(Elf_Rela));

  if (!has_addend) {
    rout->r_addend = 0;
  };

  // search symbol corresponding to this index
  if (!globalsymtab) {
    printf("warning: no symbol table for relocation index %u\n", sindex);
    return 0;
  }

  if (sindex > globalsymtablen / sizeof(Elf_Sym)) {     // verify index is within bound of symtab...
    printf("warning: symbol index %u is out of bounds of symbol table\n",
           sindex);
    return 0;
  }

  if (!globalstrtab) {
    printf("warning: no string table for relocation index %u\n", sindex);
    return 0;
  }
  // get symbol name from index
  s = globalsymtab + sindex * sizeof(Elf_Sym);
  sname = globalstrtab + s->st_name;

  // check if name is "old_" : if so, skip
  if (!strncmp(sname, "old_", 4)) {
    return -1;
  }
  // check if name is in blacklist
  for (i = 0; i < sizeof(blnames) / sizeof(char *); i++) {
    if ((strlen(sname) == strlen(blnames[i]))
        && (!strncmp(sname, blnames[i], strlen(blnames[i])))) {
      if (ctx->opt_verbose) {
        printf(" * name blacklisted: %s\n", sname);
      }
      return -1;                // Name in blacklist
    }
  }

  if (ctx->opt_debug) {
    printf(" * adding relocation for: %s\n", sname);
  }

  outtype = 0;
  rtype = ELF_R_TYPE(rout->r_info);
  sec = section_from_index(ctx, s->st_shndx);   // section related to this object
  if (sec) {

    if (!strncmp(sec->name, ".bss", 4)) {
      // Save global import
      save_global_import(ctx, sname, sec, r, sindex);
      return 0;
    } else {
      // Skip
      if (ctx->opt_debug) {
        printf
            ("warning: skipping unknown relocation for symbol: %s in section: %s\t%s\tat:%lu\toff:%lu\n",
             sname, sec->name, reloc_htype(rtype), rout->r_offset,
             rout->r_offset - textvma);
      }
      s->st_shndx = 0;
      s->st_value = 0;          // Actual value is null in this case
      return 0;
    }

  } else if (rtype == R_X86_64_RELATIVE) {
    if (ctx->opt_debug) {
      printf(" * Not saving Relative relocation %lu %lu\n", rout->r_offset,
             rout->r_addend);
    }
//              rout->r_offset -= textvma;
    return 0;
  } else {                      // Jump slots
    if (ctx->opt_debug) {
      printf(" no section info for symbol: %s\n", sname);
    }
//#define R_386_JUMP_SLOT 7

#ifdef __x86_64__
    outtype = R_X86_64_64;
#else
    outtype = R_386_32;
//printf("textvma: %llx\n", textvma);
//      rout->r_addend = +4;
#endif
    rout->r_offset -= textvma;
    rout->r_info = ELF_R_INFO(sindex, outtype);
  }


  if (ctx->opt_debug) {
    htype = reloc_htype(outtype);
    printf("-->>     %016lx\t%lu\t%s\t%u\taddend:%lu\t\n\n", rout->r_offset,
           rout->r_info, htype, sindex, rout->r_addend);
  }

  append_reloc(rout);

  return 0;
}

#include <capstone/capstone.h>

static void print_string_hex(char *comment, unsigned char *str, size_t len)
{
  unsigned char *c;

  printf("%s", comment);
  for (c = str; c < str + len; c++) {
    printf("0x%02x ", *c & 0xff);
  }

  printf("\n");
}



static void print_insn_detail(ctx_t * ctx, csh handle, cs_mode mode,
                              cs_insn * ins)
{
  int count, i;
  cs_x86 *x86;

  // detail can be NULL on "data" instruction if SKIPDATA option is turned ON
  if (ins->detail == NULL)
    return;

  x86 = &(ins->detail->x86);
  printf("\tAddress: %lu\n", ins->address);
  printf("\tInstruction Length: %u\n", ins->size);

  print_string_hex("\tPrefix:", x86->prefix, 4);

  print_string_hex("\tOpcode:", x86->opcode, 4);

  printf("\trex: 0x%x\n", x86->rex);

  printf("\taddr_size: %u\n", x86->addr_size);
  printf("\tmodrm: 0x%x\n", x86->modrm);
  printf("\tdisp: 0x%x\n", x86->disp);

  // SIB is not available in 16-bit mode
  if ((mode & CS_MODE_16) == 0) {
    printf("\tsib: 0x%x\n", x86->sib);
    if (x86->sib_base != X86_REG_INVALID)
      printf("\t\tsib_base: %s\n", cs_reg_name(handle, x86->sib_base));
    if (x86->sib_index != X86_REG_INVALID)
      printf("\t\tsib_index: %s\n", cs_reg_name(handle, x86->sib_index));
    if (x86->sib_scale != 0)
      printf("\t\tsib_scale: %d\n", x86->sib_scale);
  }
  // SSE code condition
  if (x86->sse_cc != X86_SSE_CC_INVALID) {
    printf("\tsse_cc: %u\n", x86->sse_cc);
  }
  // AVX code condition
  if (x86->avx_cc != X86_AVX_CC_INVALID) {
    printf("\tavx_cc: %u\n", x86->avx_cc);
  }
  // AVX Suppress All Exception
  if (x86->avx_sae) {
    printf("\tavx_sae: %u\n", x86->avx_sae);
  }
  // AVX Rounding Mode
  if (x86->avx_rm != X86_AVX_RM_INVALID) {
    printf("\tavx_rm: %u\n", x86->avx_rm);
  }

  count = cs_op_count(handle, ins, X86_OP_IMM);
  if (count) {
    printf("\timm_count: %u\n", count);
    for (i = 1; i < count + 1; i++) {
      int index = cs_op_index(handle, ins, X86_OP_IMM, i);
      printf("\t\timms[%u]: 0x%" PRIx64 "\n", i, x86->operands[index].imm);
    }
  }

  if (x86->op_count)
    printf("\top_count: %u\n", x86->op_count);
  for (i = 0; i < x86->op_count; i++) {
    cs_x86_op *op = &(x86->operands[i]);

    switch ((int) op->type) {
    case X86_OP_REG:
      printf("\t\toperands[%u].type: REG = %s\n", i,
             cs_reg_name(handle, op->reg));
      break;
    case X86_OP_IMM:
      printf("\t\toperands[%u].type: IMM = 0x%" PRIx64 "\n", i, op->imm);
      break;
    case X86_OP_MEM:
      printf("\t\toperands[%u].type: MEM\n", i);
      if (op->mem.segment != X86_REG_INVALID)
        printf("\t\t\toperands[%u].mem.segment: REG = %s\n", i,
               cs_reg_name(handle, op->mem.segment));
      if (op->mem.base != X86_REG_INVALID)
        printf("\t\t\toperands[%u].mem.base: REG = %s\n", i,
               cs_reg_name(handle, op->mem.base));
      if (op->mem.index != X86_REG_INVALID)
        printf("\t\t\toperands[%u].mem.index: REG = %s\n", i,
               cs_reg_name(handle, op->mem.index));
      if (op->mem.scale != 1)
        printf("\t\t\toperands[%u].mem.scale: %u\n", i, op->mem.scale);
      if (op->mem.disp != 0)
        printf("\t\t\toperands[%u].mem.disp: 0x%" PRIx64 "\n", i, op->mem.disp);
      break;
    default:
      break;
    }

    // AVX broadcast type
    if (op->avx_bcast != X86_AVX_BCAST_INVALID)
      printf("\t\toperands[%u].avx_bcast: %u\n", i, op->avx_bcast);

    // AVX zero opmask {z}
    if (op->avx_zero_opmask != false)
      printf("\t\toperands[%u].avx_zero_opmask: TRUE\n", i);

    printf("\t\toperands[%u].size: %u\n", i, op->size);
  }

  printf("\n");
}

static int create_text_data_reloc(ctx_t * ctx, cs_insn * ins, msec_t * m,
        unsigned int soff, int rip_relative, unsigned int argnum)
{
  unsigned int sindex = 0;
  unsigned int wheretowrite = 0;
  unsigned int n = 0;
  int gimport = -1;
  cs_x86 *x86;

  x86 = &(ins->detail->x86);
  n = x86->op_count;
  wheretowrite = ins->size - 4;

  if (ctx->opt_debug) {
    printf(" --> transforming relocation from section: %s at ", m->name);
    printf("0x%" PRIx64 ":\t%s\t%s\tinslen:%u  argoffset:%u\n", ins->address,
           ins->mnemonic, ins->op_str, ins->size, wheretowrite);
  }

  sindex = secindex_from_name_after_strip(ctx, m->name);

  if ((!strncmp(m->name, ".bss", 4)) && (n == 2) && (!rip_relative)) {
    gimport = check_global_import(x86->operands[1].imm);
  }

  if (rip_relative) {
//              printf(" ** destination: %lx\n", x86->operands[1]->mem.disp + ins->address + 7);
    gimport = check_global_import(x86->operands[1].mem.disp + ins->address + 7);
    if (ctx->opt_debug) {
      printf("** global imports match : %d\n", gimport);
    }
  }

  if ((gimport != -1) && (!rip_relative)) {     // Relocation to .bss with a known global import

    if (ctx->opt_debug) {
      printf(" * known imported global : %s\n", gimports[gimport]->sname);
    }

    Elf_Rela *r = calloc(1, sizeof(Elf_Rela));
    if (!r) {
      perror("calloc");
      exit(-1);
    }

    sindex = gimports[gimport]->sindex;

    // reset string index in symbol table
    Elf_Sym *st = 0;
    st = globalsymtab + gimports[gimport]->sindex * sizeof(Elf_Sym);
    st->st_shndx = 0;
    st->st_value = 0;

    r->r_info = ELF_R_INFO(gimports[gimport]->sindex, R_X86_64_PC32);
    r->r_addend = 0;            //-4;
    r->r_offset = ins->address - textvma + wheretowrite;

    // patch back binary
    msec_t *t = section_from_name(ctx, ".text");
    memset(t->data + r->r_offset, 0x00, 4);

    if (ctx->opt_debug) {
      printf("%" PRIx64 "\t%s+%u\t\t\t(%s %s)\n", ins->address, m->name, soff,
             ins->mnemonic, ins->op_str);
      printf("%012lx\t%012lx\t%s\t%012x\t%s+%u\n", r->r_offset, r->r_info,
             "R_X86_64_32", 0, m->name, soff);
    }
    // append relocation
    append_reloc(r);

    free(r);

  } else if ((gimport != -1) && (rip_relative)) {       // Relocation to .bss with a known global import via rip relative

    if (ctx->opt_debug) {
      printf(" * known imported global (rip relative) : %s\n",
             gimports[gimport]->sname);
    }

    Elf_Rela *r = calloc(1, sizeof(Elf_Rela));
    if (!r) {
      perror("calloc");
      exit(-1);
    }

    sindex = gimports[gimport]->sindex;

    // reset string index in symbol table
    Elf_Sym *st = 0;
    st = globalsymtab + gimports[gimport]->sindex * sizeof(Elf_Sym);
    st->st_shndx = 0;
    st->st_value = 0;

    r->r_info = ELF_R_INFO(gimports[gimport]->sindex, R_X86_64_PC32);
    r->r_addend = -4;
    r->r_offset = ins->address - textvma + wheretowrite;

    // patch back binary
    msec_t *t = section_from_name(ctx, ".text");
    memset(t->data + r->r_offset, 0x00, 4);

    if (ctx->opt_debug) {
      printf("%012lx\t%012lx\t%s\t%012x\t%s+%ld\n", r->r_offset, r->r_info,
             "R_X86_64_32", 0, gimports[gimport]->sname, r->r_addend);
    }
    // append relocation
    append_reloc(r);

    free(r);

  } else if (sindex) {          // Any other local section relocation (.rodata, .data ...)

    Elf_Rela *r = calloc(1, sizeof(Elf_Rela));
    if (!r) {
      perror("calloc");
      exit(-1);
    }

    if (ctx->opt_debug) {
      printf("new %s sindex:%u addent:%u, off:0x%lx\thasrel:%u\n",
             rip_relative ? "rip relative local" : "local", sindex, soff,
             ins->address - textvma + wheretowrite,
             ctx->has_relativerelocations);
    }

    int newtype;
#ifdef __x86_64__
    newtype = ctx->has_relativerelocations ? R_X86_64_PC32 : R_X86_64_32;
#else
#ifdef __i386__
    newtype = R_386_32;         //R_386_PLT32;//R_386_GOTOFF;//R_386_GOTPC; //R_386_GOT32; //R_386_COPY; //R_386_RELATIVE; //R_386_PC32; //R_386_GLOB_DAT; //R_386_32;
#endif
#endif

    // patch back .text
    msec_t *t = section_from_name(ctx, ".text");

    if (argnum == 0) {          // typically: cmp [rip+0xdeadbeef], 0  or something like mov qword ptr [rip+0xdeadbeef], rax 
      /*
       * find at witch position we shall patch by scanning memory for the memory displacement
       */
      for (wheretowrite = 0; wheretowrite <= ins->size; wheretowrite++) {
        unsigned int searchval = x86->operands[0].mem.disp;
        if (!memcmp
            (t->data + (ins->address - textvma + wheretowrite), &searchval,
             4)) {
//                                      printf(" * patching instruction at offset: %u addend: %d relative:%d\n", wheretowrite, soff, rip_relative ? rip_relative : 0);
          break;
        }
      }

      // not found ? Fatal error
      if (wheretowrite == ins->size) {
        printf("error: can't find patch location\n");
        exit(-1);
      }

    }

    if (rip_relative) {         // compute new addend and set reloc type
      cs_x86_op *op = &(x86->operands[argnum]);

      r->r_addend = ((op->mem.disp) + ins->address) - m->s_bfd->vma;    // (rip + (immediate|displacement)) - m->s_bfd->vma;    // dst - (section vma)
//                      printf("* new rip based addend : %llx\n", r->r_addend);

      newtype = R_X86_64_PC32;

    } else {
      r->r_addend = soff;       // default
    }

    r->r_info = ELF_R_INFO(sindex, newtype);
    r->r_offset = ins->address - textvma + wheretowrite;

    if ((argnum == 0) && (rip_relative)) {      // write at custom location
      memset(t->data + r->r_offset, 0x00, 4);   // write back where computed previously
//                      r->r_addend = -4;
    } else if (rip_relative) {  // patch back register index (from rip to 0x00)
      memset(t->data + r->r_offset, 0x00, 4);   // write back 4 bytes (one 32b address) + 1 if relative (overwrite rip)
//                      r->r_addend = 0;//0x29a;
    } else if (ELFMACHINE == EM_386) {  // R_386_32 doesn't account for the addend : write it back to .text
      memcpy(t->data + r->r_offset, &soff, 4);
    } else {
      memset(t->data + r->r_offset, 0x00, 4);   // write back 4 bytes (one 32b address) + 1 if relative (overwrite rip)
    }
//              if (ctx->opt_verbose) {
//                      printf("%"PRIx64"\t%s+0x%lx\t\t\t(%s %s)\n",ins->address, m->name, soff, ins->mnemonic, ins->op_str);
//                      printf("%012lx\t%012lx\t%s\t%s+%u\n", r->r_offset, r->r_info, reloc_htype(newtype), m->name, soff);
//              }

    // append relocation
    append_reloc(r);

    free(r);
  } else {                      // Unhandled relocation
    if (ctx->opt_debug) {
      printf("warning: unknown relocation section: %s at ", m->name);
      printf("0x%" PRIx64 ":\t%s\t%s\n", ins->address, ins->mnemonic,
             ins->op_str);
    }
  }

  return 0;
}

int internal_function_store(ctx_t * ctx, unsigned long long int addr)
{

  unsigned int i;
  char buff[200];
  Elf_Sym *s = 0;

  memset(buff, 0x00, 200);
  snprintf(buff, 200, "internal_%08llx", addr);

  // search this symbol in string table
  for (i = 0; i < globalstrtablen; i += strlen(globalstrtab + i) + 1) {
    if (!strncmp(globalstrtab + i, buff, strlen(buff))) {
      return -1;                // already in strtab, hence in symtab
    }
  }

  // search this address in symbol table
  for (i = 0; i < globalsymtablen / sizeof(Elf_Sym); i++) {
    s = globalsymtab + i * sizeof(Elf_Sym);
    //
    if (s->st_value == addr) {
      return -1;                // already in symtab
    }
  }

  add_symaddr(ctx, buff, addr, 0x54);
  return 0;
}

static void parse_text_data_reloc(ctx_t * ctx, csh ud, cs_mode mode,
                                  cs_insn * ins)
{
  int i;
  cs_x86 *x86;
  msec_t *m;
  // detail can be NULL on "data" instruction if SKIPDATA option is turned ON
  if (ins->detail == NULL)
    return;

  x86 = &(ins->detail->x86);

//      if(ctx->opt_debug){
//              printf("\t\tRELOC Address: %lu\n", ins->address);
//              printf("\t\tRELOC operands.type: MEM, opcount:%u\n", x86->op_count);
//      }

  for (i = 0; i < x86->op_count; i++) {
    cs_x86_op *op = &(x86->operands[i]);
    m = 0;
    switch ((int) op->type) {
    case X86_OP_IMM:
      ;
      m = section_from_addr(ctx, op->imm);
      if (m) {
        if (i == 1) {           // only match arg=1 // second argument is of form [0xdeadbeef]
          create_text_data_reloc(ctx, ins, m, op->imm - m->s_bfd->vma, 0, i);
        } else if (i == 0) {    // first argument is of form [0xdeadbeef]

          if ((!strncmp(ins->mnemonic, "call", 4))
              && (!strncmp(m->name, ".text", 5))) {
//                                                      printf(" --> call to internal function at %lx\n", op->imm);
            internal_function_store(ctx, op->imm);
          } else {
// TODO instrument internal/cross sections jumps and calls
//                                                      printf("We have a problem: (dst section: %s)\n", m->name);
//                                                      printf("0x%llx %s %s\n", ins->address, ins->mnemonic, ins->op_str);
          }

        }
      }
      break;
    case X86_OP_MEM:
      ;
      m = section_from_addr(ctx, op->mem.disp + ins->address + 10 * ctx->has_relativerelocations);      // assume rip relative
//printf("sec name: %s\t%lx\n", m ? m->name : "-", op->mem.disp + ins->address + 10*ctx->has_relativerelocations);
      if ((m) && (m->name) && (strncmp(m->name, ".text", 5) || ctx->has_relativerelocations) && (cs_reg_name(ud, op->mem.base)) && (!strncmp(cs_reg_name(ud, op->mem.base), "rip", 3))) {       // destination section can't be .text, must be rip relative
        if (i == 1) {           // only match arg=1
          create_text_data_reloc(ctx, ins, m, op->mem.disp + ins->address - m->s_bfd->vma, 1, i);       // Addressing is rip relative
          break;
        }
      }

      if (!strncmp(ins->mnemonic, "nop", 3)) {  // ignore nops
        break;
      }
      // handle write to 1st argument, which is a rip relative mapped section
      if ((i == 0) && (m) && (m->name)
          && (strncmp(m->name, ".text", 5) || ctx->has_relativerelocations)
          && (cs_reg_name(ud, op->mem.base))
          && (!strncmp(cs_reg_name(ud, op->mem.base), "rip", 3))) {
//                                      printf(" * handling 1st arg access : %llx %s %s (%s)\n",ins->address, ins->mnemonic, ins->op_str, m ? m->name : "-");
        create_text_data_reloc(ctx, ins, m, op->mem.disp + ins->address - m->s_bfd->vma, 1, i); // Addressing is rip relative
        break;
      }

      break;

    case X86_OP_REG:
//                      case X86_OP_MEM:
    default:
      break;
    }
  }
}

int analyze_text(ctx_t * ctx, char *data, unsigned int datalen,
                 unsigned long int addr)
{
  csh handle;
  cs_insn *insn;
  size_t count;
  size_t j;

  if (cs_open(CS_ARCH_X86, CS_MODE, &handle)) {
    printf("error: Failed to initialize capstone library\n");
    return -1;
  }
  // request disassembly details
  cs_option(handle, CS_OPT_DETAIL, CS_OPT_ON);

  count = cs_disasm(handle, data, datalen - 1, addr, 0, &insn);
  if (!count) {
    printf("error: Cannot disassemble code\n");
    return -1;
  }

  if (ctx->opt_asmdebug) {
    printf(" -- parsing %lu instructions from %lx (.text) for relocations\n\n",
           count, addr);
    printf
        ("\n  Offset          Info           Type           Sym. Value    Sym. Name + Addend\n");
  }
  // scan instructions for relocations
  for (j = 0; j < count; j++) {

    if (ctx->opt_asmdebug) {
      printf("0x%" PRIx64 ":\t%s\t%s\n", insn[j].address, insn[j].mnemonic,
             insn[j].op_str);
      print_insn_detail(ctx, handle, CS_MODE, &insn[j]);
    }

    parse_text_data_reloc(ctx, handle, CS_MODE, &insn[j]);
  }

  cs_free(insn, count);
  cs_close(&handle);

  return 0;
}

int rd_symtab(ctx_t * ctx)
{
  Elf *elf;
  Elf_Scn *scn = NULL;
  GElf_Shdr shdr;
  int fd;
  const char *binary;
  struct stat sb;
  size_t shstrndx;
  char *sname = 0;

  if (ctx->opt_debug) {
    printf(" -- searching for .strtab/.symtab\n");
  }

  elf_version(EV_CURRENT);

  fd = open(ctx->binname, O_RDONLY);
  fstat(fd, &sb);
  binary = mmap(NULL, sb.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
  if (binary == MAP_FAILED) {
    perror("mmap");
    exit(EXIT_FAILURE);
  }

  elf = elf_begin(fd, ELF_C_READ, NULL);
  if (!elf) {
    printf("error: not a valid ELF\n");
    return -1;
  }

  if (elf_getshdrstrndx(elf, &shstrndx) != 0) {
    printf("error: in elf_getshdrstrndx\n");
    return -1;
  }

  while ((scn = elf_nextscn(elf, scn)) != NULL) {
    gelf_getshdr(scn, &shdr);
    sname = elf_strptr(elf, shstrndx, shdr.sh_name);

    switch (shdr.sh_type) {
    case SHT_SYMTAB:
      if (ctx->opt_debug) {
        printf(" * symbol table at offset:%lu, sz:%lu\n", shdr.sh_offset,
               shdr.sh_size);
      }
      break;

    case SHT_STRTAB:
      if (!strncmp(sname, ".dynstr", 7)) {
        if (ctx->opt_debug) {
          printf(" * dynamic string table at offset:%lu, sz:%lu\n",
                 shdr.sh_offset, shdr.sh_size);
        }
        save_dynstr(ctx, shdr, binary);
      } else {
        if (ctx->opt_debug) {
          printf(" * string table at offset:%lu, sz:%lu\n", shdr.sh_offset,
                 shdr.sh_size);
        }
      }
      break;

    case SHT_DYNSYM:
      if (ctx->opt_debug) {
        printf(" * dynamic symbol table at offset:%lu, sz:%lu\n",
               shdr.sh_offset, shdr.sh_size);
      }
      save_dynsym(ctx, shdr, binary);
      break;

    default:
      break;
    }

  }

  elf_end(elf);
  close(fd);

  if ((ctx->opt_verbose) || (ctx->opt_debug)) {
    printf("\n");
  }

  return 0;
}

int rm_section(ctx_t * ctx, char *name)
{
  msec_t *s;
  msec_t *rmsec = 0;

  DL_FOREACH(ctx->mshdrs, s) {
    if (!strncmp(s->name, name, strlen(name))) {
      rmsec = s;
      break;
    }
  }

  if (!rmsec) {
    return 0;
  }                             // Not found

  DL_DELETE(ctx->mshdrs, rmsec);

  ctx->shnum--;
  ctx->mshnum--;

  return 0;
}

int strip_binary_reloc(ctx_t * ctx)
{
  msec_t *s, *tmp;
  unsigned int allowed, i;

  if (ctx->opt_verbose) {
    printf("\n -- Stripping\n\n");

  }

  DL_FOREACH_SAFE(ctx->mshdrs, s, tmp) {
    allowed = 0;
    for (i = 0; i < sizeof(allowed_sections) / sizeof(char *); i++) {
      if (!strncmp(s->name, allowed_sections[i], strlen(allowed_sections[i]))) {
        allowed = 1;
        break;
      }
    }

    if (!allowed) {
      if (ctx->opt_verbose) {
        printf(" * %s\n", s->name);
      }

      rm_section(ctx, s->name);
    }
  }

  if (ctx->opt_verbose) {
    printf("\n");
  }
  return 0;
}

unsigned int libify(ctx_t * ctx)
{
  char const *target = NULL;
  int is_pe64 = 0, is_pe32 = 0;
  load_binary(ctx);

  print_bfd_sections(ctx);

  rd_extended_text(ctx);
  rd_extended_data(ctx);

  extend_text(ctx);

  open_target(ctx);

  rd_sections(ctx);


  create_section_symbols(ctx);

  rd_symtab(ctx);


  fixup_strtab_and_symtab(ctx);

  target = bfd_get_target(ctx->abfd);

  is_pe64 = (strcmp(target, "pe-x86-64") == 0
             || strcmp(target, "pei-x86-64") == 0);
  is_pe32 = (strcmp(target, "pe-i386") == 0 || strcmp(target, "pei-i386") == 0
             || strcmp(target, "pe-arm-wince-little") == 0
             || strcmp(target, "pei-arm-wince-little") == 0);

  if ((is_pe64) || (is_pe32)) {
    printf("target: %s\n", target);
  } else {
    rd_symbols(ctx);
  }

  fixup_text(ctx);

  add_extra_symbols(ctx);


  parse_relocations(ctx);


  fixup_symtab_section_index(ctx);

  process_text(ctx);

  copy_body(ctx);

  if ((ctx->opt_static) || (ctx->opt_reloc)) {
    rm_section(ctx, ".interp");
    rm_section(ctx, ".dynamic");
  }

  if (ctx->opt_reloc) {
    strip_binary_reloc(ctx);
  }

  if (!ctx->opt_original) {
    mk_phdrs(ctx);              // Create Program Headers from sections
  } else {
    // Read Original Program Headers
    rd_phdrs(ctx);
  }

  write_strtab_and_reloc(ctx);

  if (!ctx->opt_sstrip) {
    write_shdrs(ctx);
  }

  if (!ctx->opt_reloc) {
    if (!ctx->opt_original) {
      write_phdrs(ctx);
    } else {
      write_phdrs_original(ctx);

    }
  }

  mk_ehdr(ctx);

  return 0;
}

int print_maps(void)
{
  char cmd[1024];

  sprintf(cmd, "cat /proc/%u/maps", getpid());
  system(cmd);
  return 0;
}

ctx_t *ctx_init(void)
{
  ctx_t *ctx;

  bfd_init();
  errno = 0;
  ctx = calloc(1, sizeof(ctx_t));
  if (!ctx) {
    printf("error: calloc(): %s\n", strerror(errno));
    exit(EXIT_FAILURE);
  }

  ctx->strndx = calloc(1, DEFAULT_STRNDX_SIZE);
  ctx->mshdrs = NULL;
  return ctx;
}

int usage(char *name)
{
  printf("Usage: %s [options] file\n", name);
  printf("\noptions:\n\n");
  printf("    -o, --output           <output file>\n");
  printf("    -m, --march            <architecture>\n");
  printf("    -e, --entrypoint       <0xaddress>\n");
  printf("    -i, --interpreter      <interpreter>\n");
  printf("    -p, --poison           <poison>\n");
  printf("    -s, --shared\n");
  printf("    -c, --compile\n");
  printf("    -S, --static\n");
  printf("    -x, --strip\n");
  printf("    -X, --sstrip\n");
  printf("    -E, --exec\n");
  printf("    -C, --core\n");
  printf("    -O, --original\n");
  printf("    -D, --disasm\n");
  printf("    -d, --debug\n");
  printf("    -h, --help\n");
  printf("    -v, --verbose\n");
  printf("    -V, --version\n");
  printf("\n");
  return 0;
}

int print_version(void)
{
  printf("%s version:%s    (%s %s)\n", WNAME, WVERSION, WTIME, WDATE);
  return 0;
}

int desired_arch(ctx_t * ctx, char *name)
{

  unsigned int i = 0;

  for (i = 0; i < sizeof(wccarch) / sizeof(archi_t); i++) {
    if (!strncmp(wccarch[i].name, name, strlen(name))) {
      if (ctx->opt_verbose) {
        printf(" * architecture: %s\n", name);
      }
      return wccarch[i].value;
    }
  }

  printf("error: architecture %s not supported\n", name);
  exit(EXIT_FAILURE);

  return 0;
}

int ctx_getopt(ctx_t * ctx, int argc, char **argv)
{
  const char *short_opt = "ho:i:scSEsxCvVXp:Odm:e:f:D";
  int count = 0;
  struct stat sb;
  int c;

  struct option long_opt[] = {
    {"help", no_argument, NULL, 'h'},
    {"march", required_argument, NULL, 'm'},
    {"output", required_argument, NULL, 'o'},
    {"shared", no_argument, NULL, 's'},
    {"compile", no_argument, NULL, 'c'},
    {"debug", no_argument, NULL, 'd'},
    {"disasm", no_argument, NULL, 'D'},
    {"static", no_argument, NULL, 'S'},
    {"exec", no_argument, NULL, 'E'},
    {"core", no_argument, NULL, 'C'},
    {"strip", no_argument, NULL, 'x'},
    {"sstrip", no_argument, NULL, 'X'},
    {"entrypoint", required_argument, NULL, 'e'},
    {"interpreter", required_argument, NULL, 'i'},
    {"poison", required_argument, NULL, 'p'},
    {"original", no_argument, NULL, 'O'},
    {"verbose", no_argument, NULL, 'v'},
    {"version", no_argument, NULL, 'V'},
    {NULL, 0, NULL, 0}
  };

  // Parse options
  if (argc < 2) {
    print_version();
    printf("\n");
    usage(argv[0]);
    exit(EXIT_SUCCESS);
  }

  while ((c = getopt_long(argc, argv, short_opt, long_opt, NULL)) != -1) {
    count++;
    switch (c) {
    case -1:                    /* no more arguments */
    case 0:
      break;

    case 'c':
      ctx->opt_reloc = 1;
      break;

    case 'C':
      ctx->opt_core = 1;
      break;

    case 'd':
      ctx->opt_debug = 1;
      ctx->opt_verbose = 1;
      break;

    case 'D':
      ctx->opt_asmdebug = 1;
      break;

    case 'e':
      ctx->opt_entrypoint = strtoul(optarg, NULL, 16);
      count++;
      break;

    case 'E':
      ctx->opt_exec = 1;
      break;

    case 'f':
      ctx->opt_flags = strtoul(optarg, NULL, 16);
      count++;
      break;

    case 'h':
      usage(argv[0]);
      exit(0);
      break;

    case 'i':
      ctx->opt_interp = strdup(optarg);
      count++;
      break;

    case 'm':
      ctx->opt_arch = desired_arch(ctx, optarg);
      count++;
      break;

    case 'o':
      ctx->opt_binname = strdup(optarg);
      count++;
      break;

    case 'O':
      ctx->opt_original = 1;
      break;

    case 'p':
      ctx->opt_poison = optarg[0];
      count++;
      break;

    case 's':
      ctx->opt_shared = 1;
      break;

    case 'S':
      ctx->opt_static = 1;
      break;

    case 'v':
      ctx->opt_verbose = 1;
      break;

    case 'V':
      print_version();
      exit(EXIT_SUCCESS);
      break;

    case 'x':
      ctx->opt_strip = 1;
      break;

    case 'X':
      ctx->opt_sstrip = 1;
      break;

    case ':':
    case '?':
      fprintf(stderr, "Try `%s --help' for more information.\n", argv[0]);
      exit(-2);

    default:
      fprintf(stderr, "%s: invalid option -- %c\n", argv[0], c);
      fprintf(stderr, "Try `%s --help' for more information.\n", argv[0]);
      exit(-2);
    };
  };

  // arguments sanity checks
  if (count >= argc - 1) {
    fprintf(stderr, "error: No source binary found in arguments.\n");
    fprintf(stderr, "Try `%s --help' for more information.\n", argv[0]);
    exit(-2);
  }
  // verify target file exists
  if (stat(argv[count + 1], &sb)) {
    printf("error: Could not open file %s : %s\n", argv[count + 1],
           strerror(errno));
    exit(EXIT_FAILURE);
  }
  // store original size
  orig_sz = sb.st_size;

  if (ctx->opt_debug) {
    printf(" -- Analysing: %s\n", argv[count + 1]);
  }
  // copy target file name
  ctx->binname = strdup(argv[count + 1]);
  return 0;
}

int main(int argc, char **argv)
{
  ctx_t *ctx;

  ctx = ctx_init();
  ctx_getopt(ctx, argc, argv);
  libify(ctx);

  return 0;
}