arch/mips_symbolization
MIPS architecture-specific rules for symbolization
MIPS Symbolic Operand Attributes
%hi(symbol) / %lo(symbol)
Used to form full 32-bit addresses in non-PIC code.
Represents the high and low 16-bit parts of a symbol’s address.
Generates R_MIPS_HI16 and R_MIPS_LO16 relocations.
- E.g.,
lui $t0, %hi(foo) # $t0 gets the upper 16 bits of foo lw $t1, %lo(foo)($t0) # Add the lower 16 bits of foo to $t0
# and load from the address.
%got(symbol)
Used to access a symbol’s address through GOT.
The assembler emits an offset from $gp to the GOT entry for the symbol, which the dynamic linker resolves at runtime.
Generates an R_MIPS_GOT16 relocation.
- E.g,
lw $t9, %got(foo)($gp) # Load address of foo via GOT
%pcrel_hi(symbol) / %pcrel_lo(symbol)
Used in PIC to compute PC-relative addresses.
Generates R_MIPS_PCHI16 and R_MIPS_PCLO16 relocations.
- E.g.,
lui $t0, %pcrel_hi(foo) lw $t1, %pcrel_lo(foo)($t0)
%got_page(symbol) / %got_ofst(symbol)
Used in PIC to compute GOT-relative addresses more efficiently.
%got_page(symbol) gives the GOT entry page base and %got_ofst(symbol) gives the offset within that page.
Generates R_MIPS_GOT_PAGE and R_MIPS_GOT_OFST relocations.
- E.g.,
lw $t0, %got_page(foo)($gp) # $t0 gets the GOT page base for foo addiu $t1, $t0, %got_ofst(foo) # Add the offset to get the address of foo
- gp_relative_operand(src:address, index:operand_index, dest:address)
Instructions with an indirect operand with GP(Global Pointer)-relative address
Uses:
arch.load_operation,arch.store_operation,instruction,instruction_get_op,op_indirect,symbolUsed by:
base_addr_load,symbolic_expr,symbolic_operand_attribute,symbolic_operand_mips_candidate,tls_relative_operandRecursive:
indefinite_litpool_ref,__agg_single6,indexed_pc_relative_load,litpool_symbolic_operand,indexed_pc_relative_load_relative,data_block_candidate,wis_has_prior,unlikely_have_symbolic_immediate,relative_jump_table_entry_candidate,block_boundaries,def_used_for_address,block_instruction_next,reg_def_use.used_in_block,arm_jump_table_block_instruction,relocation_adjustment,reg_def_use.live_var_at_block_end,stack_def_use.ref_in_block,arm_jump_table_data_block,call_target_has_other_fallthrough_inter,__agg_subclause6,impossible_block,jump_table_element_access,gp_relative_operand,next_end,block_heuristic,stack_base_reg_move,stack_def_use.live_var_def,composite_data_access,unresolved_interval,block_limit,arm_jump_table_candidate,call_tls_get_addr_mips,symbol_minus_symbol_litpool_access_pattern,may_fallthrough,segment_target_range,arch.reg_relative_load,__agg_subclause2,candidate_block_is_not_padding,self_contained_segment,arch.extend_load,block_last_instruction,jump_table_prelude,stack_def_use.defined_in_block,arm_jump_table_candidate_start,split_load_candidate,split_load,data_access,cmp_defines,padding_block_candidate,split_load_point,tls_desc_call,reg_def_use.block_last_def,const_value_reg_used,value_reg_edge,is_padding,negative_block_heuristic,discarded_split_load,relative_address_start,base_relative_operation,simple_data_access_pattern,block,reg_has_base_image,jump_table_target,__agg_subclause4,init_ldr_add_pc,data_in_code_propagate,__agg_single2,relative_address,block_points,must_fallthrough,wis_prior,resolved_reaches,inferred_main_dispatch,code_in_block_candidate,last_value_reg_limit,nop_in_padding_candidate,value_reg_unsupported,reg_def_use.defined_in_block,correlated_live_reg,plt_entry,reg_def_use.live_var_used,adjusts_stack_in_block,__agg_subclause7,wis_schedule,initial_function_containing_return,next_function_entry_initial,discarded_block,possible_target,plt_block,fallthrough_over_padding,straight_line_last_def,block_implies_block,incomplete_block,wis_memo,value_reg_limit,inter_procedural_edge,reg_used_for,reg_def_use.live_var_def,known_block,arm_jump_table_block_start,reg_def_use.return_block_end,initialized_data_segment,data_segment,local_dynamic_tls_candidate,jump_table_candidate_refined,start_function,call_tls_get_addr,value_reg,got_relative_operand,adrp_used,unresolved_block_overlap,function_inference.function_entry_initial,arm_jump_table_skip_first_entry,split_load_total_points,next_type,no_return_call,jump_table_start,code_in_block_candidate_refined,basic_target,arch.simple_data_load,possible_target_from,overlapping_instruction,base_relative_jump,stack_def_use.live_var_used_in_block,invalid,compare_and_jump_indirect_op_valid,split_load_conflict,arm_jump_table_data_block_limit,call_may_fallthrough_inter,stack_def_use.used_in_block,compare_and_jump_indirect,no_return_call_propagated,after_end,__agg_subclause3,code_in_block,reg_def_use.return_val_used,transition_block_limit,no_value_reg_limit,block_candidate_dependency_edge,litpool_confidence,branch_to_calculated_pc_rel_addr,block_total_points,candidate_block_is_padding,stack_def_use.live_var_at_prior_used,litpool_boundaries,tls_relative_operand_mips,first_block_in_byte_interval,cmp_reg_to_reg,no_return_call_refined,split_load_for_symbolization,jump_table_candidate,reg_def_use.ambiguous_last_def_in_block,next_start,stack_def_use.def_used,block_next,reg_def_use.ref_in_block,reg_def_use.live_var_at_prior_used,data_in_code,hi_load_prop,reg_has_got,init_symbol_minus_symbol_candidate_arm,split_load_operand,unresolved_block,jump_table_max,common_tail,instruction_memory_access_size,likely_fallthrough,__agg_single10,compare_and_jump_immediate,wis_schedule_iter,block_candidate_boundaries,stack_def_use.live_var_at_block_end,contains_plausible_instr_seq,padding_block_limit,relocation_adjustment_total,arm_jump_table_cmp_limit,jump_table_signed,flags_and_jump_pair,next_block_in_byte_interval,reg_def_use.ambiguous_block_last_def,unresolved_interval_order,symbolic_expr_from_relocation,no_return_block,overlap_with_litpool,reg_def_use.def_used,stack_def_use.block_last_def,inferred_main_in_reg,contains_implausible_instr_seq,base_relative_operand,invalid_jump_table_candidate,tls_get_addr,reg_def_use.last_def_in_block,straight_line_def_used,data_block_limit,litpool_ref,cinf_ldr_add_pc,compare_and_jump_register,stack_def_use.live_var_used,block_overlap,__agg_single3,block_points_proportional,stack_def_use.last_def_in_block,reg_reg_arithmetic_operation_defs,reg_def_use.used,reg_def_use.flow_def
- got_reference_mips_global(Got_entry:address, Symbol:symbol)
MIPS-specific got_reference using MIPS_GOTSYM and MIPS_LOCAL_GOTNO
The main reason for this is to avoid potential issues in stratification. Some generic versions of got_reference rely on symbolic_expr, which can lead to cyclic negation or cyclic aggregation.
- hi_load(ea:address, reg:register, upper:number)
- hi_load_prop(reg_restore_ea:address, ea:address, reg:register, upper:number, type:symbol)
HI load propagation to recover hi_load value from stack or simple data-flow
Recursive:
indefinite_litpool_ref,__agg_single6,indexed_pc_relative_load,litpool_symbolic_operand,indexed_pc_relative_load_relative,data_block_candidate,wis_has_prior,unlikely_have_symbolic_immediate,relative_jump_table_entry_candidate,block_boundaries,def_used_for_address,block_instruction_next,reg_def_use.used_in_block,arm_jump_table_block_instruction,relocation_adjustment,reg_def_use.live_var_at_block_end,stack_def_use.ref_in_block,arm_jump_table_data_block,call_target_has_other_fallthrough_inter,__agg_subclause6,impossible_block,jump_table_element_access,gp_relative_operand,next_end,block_heuristic,stack_base_reg_move,stack_def_use.live_var_def,composite_data_access,unresolved_interval,block_limit,arm_jump_table_candidate,call_tls_get_addr_mips,symbol_minus_symbol_litpool_access_pattern,may_fallthrough,segment_target_range,arch.reg_relative_load,__agg_subclause2,candidate_block_is_not_padding,self_contained_segment,arch.extend_load,block_last_instruction,jump_table_prelude,stack_def_use.defined_in_block,arm_jump_table_candidate_start,split_load_candidate,split_load,data_access,cmp_defines,padding_block_candidate,split_load_point,tls_desc_call,reg_def_use.block_last_def,const_value_reg_used,value_reg_edge,is_padding,negative_block_heuristic,discarded_split_load,relative_address_start,base_relative_operation,simple_data_access_pattern,block,reg_has_base_image,jump_table_target,__agg_subclause4,init_ldr_add_pc,data_in_code_propagate,__agg_single2,relative_address,block_points,must_fallthrough,wis_prior,resolved_reaches,inferred_main_dispatch,code_in_block_candidate,last_value_reg_limit,nop_in_padding_candidate,value_reg_unsupported,reg_def_use.defined_in_block,correlated_live_reg,plt_entry,reg_def_use.live_var_used,adjusts_stack_in_block,__agg_subclause7,wis_schedule,initial_function_containing_return,next_function_entry_initial,discarded_block,possible_target,plt_block,fallthrough_over_padding,straight_line_last_def,block_implies_block,incomplete_block,wis_memo,value_reg_limit,inter_procedural_edge,reg_used_for,reg_def_use.live_var_def,known_block,arm_jump_table_block_start,reg_def_use.return_block_end,initialized_data_segment,data_segment,local_dynamic_tls_candidate,jump_table_candidate_refined,start_function,call_tls_get_addr,value_reg,got_relative_operand,adrp_used,unresolved_block_overlap,function_inference.function_entry_initial,arm_jump_table_skip_first_entry,split_load_total_points,next_type,no_return_call,jump_table_start,code_in_block_candidate_refined,basic_target,arch.simple_data_load,possible_target_from,overlapping_instruction,base_relative_jump,stack_def_use.live_var_used_in_block,invalid,compare_and_jump_indirect_op_valid,split_load_conflict,arm_jump_table_data_block_limit,call_may_fallthrough_inter,stack_def_use.used_in_block,compare_and_jump_indirect,no_return_call_propagated,after_end,__agg_subclause3,code_in_block,reg_def_use.return_val_used,transition_block_limit,no_value_reg_limit,block_candidate_dependency_edge,litpool_confidence,branch_to_calculated_pc_rel_addr,block_total_points,candidate_block_is_padding,stack_def_use.live_var_at_prior_used,litpool_boundaries,tls_relative_operand_mips,first_block_in_byte_interval,cmp_reg_to_reg,no_return_call_refined,split_load_for_symbolization,jump_table_candidate,reg_def_use.ambiguous_last_def_in_block,next_start,stack_def_use.def_used,block_next,reg_def_use.ref_in_block,reg_def_use.live_var_at_prior_used,data_in_code,hi_load_prop,reg_has_got,init_symbol_minus_symbol_candidate_arm,split_load_operand,unresolved_block,jump_table_max,common_tail,instruction_memory_access_size,likely_fallthrough,__agg_single10,compare_and_jump_immediate,wis_schedule_iter,block_candidate_boundaries,stack_def_use.live_var_at_block_end,contains_plausible_instr_seq,padding_block_limit,relocation_adjustment_total,arm_jump_table_cmp_limit,jump_table_signed,flags_and_jump_pair,next_block_in_byte_interval,reg_def_use.ambiguous_block_last_def,unresolved_interval_order,symbolic_expr_from_relocation,no_return_block,overlap_with_litpool,reg_def_use.def_used,stack_def_use.block_last_def,inferred_main_in_reg,contains_implausible_instr_seq,base_relative_operand,invalid_jump_table_candidate,tls_get_addr,reg_def_use.last_def_in_block,straight_line_def_used,data_block_limit,litpool_ref,cinf_ldr_add_pc,compare_and_jump_register,stack_def_use.live_var_used,block_overlap,__agg_single3,block_points_proportional,stack_def_use.last_def_in_block,reg_reg_arithmetic_operation_defs,reg_def_use.used,reg_def_use.flow_def
- split_load_candidate(ea_hi:address, ea_lo:address, dest:address, type:symbol)
Uses:
arch.logic_operation,arch.memory_access,arch.multiplication_operation,arch.reg_arithmetic_operation,arch.reg_reg_arithmetic_operation,arch.shift_rotate_operation,hi_load,instructionUsed by:
moved_label_candidate,resolved_transfer,split_loadstore,symbolic_operand_attribute,symbolic_operand_candidate,symbolic_operand_pointRecursive:
indefinite_litpool_ref,__agg_single6,indexed_pc_relative_load,litpool_symbolic_operand,indexed_pc_relative_load_relative,data_block_candidate,wis_has_prior,unlikely_have_symbolic_immediate,relative_jump_table_entry_candidate,block_boundaries,def_used_for_address,block_instruction_next,reg_def_use.used_in_block,arm_jump_table_block_instruction,relocation_adjustment,reg_def_use.live_var_at_block_end,stack_def_use.ref_in_block,arm_jump_table_data_block,call_target_has_other_fallthrough_inter,__agg_subclause6,impossible_block,jump_table_element_access,gp_relative_operand,next_end,block_heuristic,stack_base_reg_move,stack_def_use.live_var_def,composite_data_access,unresolved_interval,block_limit,arm_jump_table_candidate,call_tls_get_addr_mips,symbol_minus_symbol_litpool_access_pattern,may_fallthrough,segment_target_range,arch.reg_relative_load,__agg_subclause2,candidate_block_is_not_padding,self_contained_segment,arch.extend_load,block_last_instruction,jump_table_prelude,stack_def_use.defined_in_block,arm_jump_table_candidate_start,split_load_candidate,split_load,data_access,cmp_defines,padding_block_candidate,split_load_point,tls_desc_call,reg_def_use.block_last_def,const_value_reg_used,value_reg_edge,is_padding,negative_block_heuristic,discarded_split_load,relative_address_start,base_relative_operation,simple_data_access_pattern,block,reg_has_base_image,jump_table_target,__agg_subclause4,init_ldr_add_pc,data_in_code_propagate,__agg_single2,relative_address,block_points,must_fallthrough,wis_prior,resolved_reaches,inferred_main_dispatch,code_in_block_candidate,last_value_reg_limit,nop_in_padding_candidate,value_reg_unsupported,reg_def_use.defined_in_block,correlated_live_reg,plt_entry,reg_def_use.live_var_used,adjusts_stack_in_block,__agg_subclause7,wis_schedule,initial_function_containing_return,next_function_entry_initial,discarded_block,possible_target,plt_block,fallthrough_over_padding,straight_line_last_def,block_implies_block,incomplete_block,wis_memo,value_reg_limit,inter_procedural_edge,reg_used_for,reg_def_use.live_var_def,known_block,arm_jump_table_block_start,reg_def_use.return_block_end,initialized_data_segment,data_segment,local_dynamic_tls_candidate,jump_table_candidate_refined,start_function,call_tls_get_addr,value_reg,got_relative_operand,adrp_used,unresolved_block_overlap,function_inference.function_entry_initial,arm_jump_table_skip_first_entry,split_load_total_points,next_type,no_return_call,jump_table_start,code_in_block_candidate_refined,basic_target,arch.simple_data_load,possible_target_from,overlapping_instruction,base_relative_jump,stack_def_use.live_var_used_in_block,invalid,compare_and_jump_indirect_op_valid,split_load_conflict,arm_jump_table_data_block_limit,call_may_fallthrough_inter,stack_def_use.used_in_block,compare_and_jump_indirect,no_return_call_propagated,after_end,__agg_subclause3,code_in_block,reg_def_use.return_val_used,transition_block_limit,no_value_reg_limit,block_candidate_dependency_edge,litpool_confidence,branch_to_calculated_pc_rel_addr,block_total_points,candidate_block_is_padding,stack_def_use.live_var_at_prior_used,litpool_boundaries,tls_relative_operand_mips,first_block_in_byte_interval,cmp_reg_to_reg,no_return_call_refined,split_load_for_symbolization,jump_table_candidate,reg_def_use.ambiguous_last_def_in_block,next_start,stack_def_use.def_used,block_next,reg_def_use.ref_in_block,reg_def_use.live_var_at_prior_used,data_in_code,hi_load_prop,reg_has_got,init_symbol_minus_symbol_candidate_arm,split_load_operand,unresolved_block,jump_table_max,common_tail,instruction_memory_access_size,likely_fallthrough,__agg_single10,compare_and_jump_immediate,wis_schedule_iter,block_candidate_boundaries,stack_def_use.live_var_at_block_end,contains_plausible_instr_seq,padding_block_limit,relocation_adjustment_total,arm_jump_table_cmp_limit,jump_table_signed,flags_and_jump_pair,next_block_in_byte_interval,reg_def_use.ambiguous_block_last_def,unresolved_interval_order,symbolic_expr_from_relocation,no_return_block,overlap_with_litpool,reg_def_use.def_used,stack_def_use.block_last_def,inferred_main_in_reg,contains_implausible_instr_seq,base_relative_operand,invalid_jump_table_candidate,tls_get_addr,reg_def_use.last_def_in_block,straight_line_def_used,data_block_limit,litpool_ref,cinf_ldr_add_pc,compare_and_jump_register,stack_def_use.live_var_used,block_overlap,__agg_single3,block_points_proportional,stack_def_use.last_def_in_block,reg_reg_arithmetic_operation_defs,reg_def_use.used,reg_def_use.flow_def
- split_load_point(ea:address, nextea:address, dest:address, type:symbol, point:number, why:symbol)
Uses:
arch.reg_reg_arithmetic_operation,fde_addresses,instructionRecursive:
indefinite_litpool_ref,__agg_single6,indexed_pc_relative_load,litpool_symbolic_operand,indexed_pc_relative_load_relative,data_block_candidate,wis_has_prior,unlikely_have_symbolic_immediate,relative_jump_table_entry_candidate,block_boundaries,def_used_for_address,block_instruction_next,reg_def_use.used_in_block,arm_jump_table_block_instruction,relocation_adjustment,reg_def_use.live_var_at_block_end,stack_def_use.ref_in_block,arm_jump_table_data_block,call_target_has_other_fallthrough_inter,__agg_subclause6,impossible_block,jump_table_element_access,gp_relative_operand,next_end,block_heuristic,stack_base_reg_move,stack_def_use.live_var_def,composite_data_access,unresolved_interval,block_limit,arm_jump_table_candidate,call_tls_get_addr_mips,symbol_minus_symbol_litpool_access_pattern,may_fallthrough,segment_target_range,arch.reg_relative_load,__agg_subclause2,candidate_block_is_not_padding,self_contained_segment,arch.extend_load,block_last_instruction,jump_table_prelude,stack_def_use.defined_in_block,arm_jump_table_candidate_start,split_load_candidate,split_load,data_access,cmp_defines,padding_block_candidate,split_load_point,tls_desc_call,reg_def_use.block_last_def,const_value_reg_used,value_reg_edge,is_padding,negative_block_heuristic,discarded_split_load,relative_address_start,base_relative_operation,simple_data_access_pattern,block,reg_has_base_image,jump_table_target,__agg_subclause4,init_ldr_add_pc,data_in_code_propagate,__agg_single2,relative_address,block_points,must_fallthrough,wis_prior,resolved_reaches,inferred_main_dispatch,code_in_block_candidate,last_value_reg_limit,nop_in_padding_candidate,value_reg_unsupported,reg_def_use.defined_in_block,correlated_live_reg,plt_entry,reg_def_use.live_var_used,adjusts_stack_in_block,__agg_subclause7,wis_schedule,initial_function_containing_return,next_function_entry_initial,discarded_block,possible_target,plt_block,fallthrough_over_padding,straight_line_last_def,block_implies_block,incomplete_block,wis_memo,value_reg_limit,inter_procedural_edge,reg_used_for,reg_def_use.live_var_def,known_block,arm_jump_table_block_start,reg_def_use.return_block_end,initialized_data_segment,data_segment,local_dynamic_tls_candidate,jump_table_candidate_refined,start_function,call_tls_get_addr,value_reg,got_relative_operand,adrp_used,unresolved_block_overlap,function_inference.function_entry_initial,arm_jump_table_skip_first_entry,split_load_total_points,next_type,no_return_call,jump_table_start,code_in_block_candidate_refined,basic_target,arch.simple_data_load,possible_target_from,overlapping_instruction,base_relative_jump,stack_def_use.live_var_used_in_block,invalid,compare_and_jump_indirect_op_valid,split_load_conflict,arm_jump_table_data_block_limit,call_may_fallthrough_inter,stack_def_use.used_in_block,compare_and_jump_indirect,no_return_call_propagated,after_end,__agg_subclause3,code_in_block,reg_def_use.return_val_used,transition_block_limit,no_value_reg_limit,block_candidate_dependency_edge,litpool_confidence,branch_to_calculated_pc_rel_addr,block_total_points,candidate_block_is_padding,stack_def_use.live_var_at_prior_used,litpool_boundaries,tls_relative_operand_mips,first_block_in_byte_interval,cmp_reg_to_reg,no_return_call_refined,split_load_for_symbolization,jump_table_candidate,reg_def_use.ambiguous_last_def_in_block,next_start,stack_def_use.def_used,block_next,reg_def_use.ref_in_block,reg_def_use.live_var_at_prior_used,data_in_code,hi_load_prop,reg_has_got,init_symbol_minus_symbol_candidate_arm,split_load_operand,unresolved_block,jump_table_max,common_tail,instruction_memory_access_size,likely_fallthrough,__agg_single10,compare_and_jump_immediate,wis_schedule_iter,block_candidate_boundaries,stack_def_use.live_var_at_block_end,contains_plausible_instr_seq,padding_block_limit,relocation_adjustment_total,arm_jump_table_cmp_limit,jump_table_signed,flags_and_jump_pair,next_block_in_byte_interval,reg_def_use.ambiguous_block_last_def,unresolved_interval_order,symbolic_expr_from_relocation,no_return_block,overlap_with_litpool,reg_def_use.def_used,stack_def_use.block_last_def,inferred_main_in_reg,contains_implausible_instr_seq,base_relative_operand,invalid_jump_table_candidate,tls_get_addr,reg_def_use.last_def_in_block,straight_line_def_used,data_block_limit,litpool_ref,cinf_ldr_add_pc,compare_and_jump_register,stack_def_use.live_var_used,block_overlap,__agg_single3,block_points_proportional,stack_def_use.last_def_in_block,reg_reg_arithmetic_operation_defs,reg_def_use.used,reg_def_use.flow_def
- split_load_conflict(ea:address, nextea:address, dest:address, type:symbol, ea2:address, nextea2:address, dest2:address, type2:symbol)
Recursive:
indefinite_litpool_ref,__agg_single6,indexed_pc_relative_load,litpool_symbolic_operand,indexed_pc_relative_load_relative,data_block_candidate,wis_has_prior,unlikely_have_symbolic_immediate,relative_jump_table_entry_candidate,block_boundaries,def_used_for_address,block_instruction_next,reg_def_use.used_in_block,arm_jump_table_block_instruction,relocation_adjustment,reg_def_use.live_var_at_block_end,stack_def_use.ref_in_block,arm_jump_table_data_block,call_target_has_other_fallthrough_inter,__agg_subclause6,impossible_block,jump_table_element_access,gp_relative_operand,next_end,block_heuristic,stack_base_reg_move,stack_def_use.live_var_def,composite_data_access,unresolved_interval,block_limit,arm_jump_table_candidate,call_tls_get_addr_mips,symbol_minus_symbol_litpool_access_pattern,may_fallthrough,segment_target_range,arch.reg_relative_load,__agg_subclause2,candidate_block_is_not_padding,self_contained_segment,arch.extend_load,block_last_instruction,jump_table_prelude,stack_def_use.defined_in_block,arm_jump_table_candidate_start,split_load_candidate,split_load,data_access,cmp_defines,padding_block_candidate,split_load_point,tls_desc_call,reg_def_use.block_last_def,const_value_reg_used,value_reg_edge,is_padding,negative_block_heuristic,discarded_split_load,relative_address_start,base_relative_operation,simple_data_access_pattern,block,reg_has_base_image,jump_table_target,__agg_subclause4,init_ldr_add_pc,data_in_code_propagate,__agg_single2,relative_address,block_points,must_fallthrough,wis_prior,resolved_reaches,inferred_main_dispatch,code_in_block_candidate,last_value_reg_limit,nop_in_padding_candidate,value_reg_unsupported,reg_def_use.defined_in_block,correlated_live_reg,plt_entry,reg_def_use.live_var_used,adjusts_stack_in_block,__agg_subclause7,wis_schedule,initial_function_containing_return,next_function_entry_initial,discarded_block,possible_target,plt_block,fallthrough_over_padding,straight_line_last_def,block_implies_block,incomplete_block,wis_memo,value_reg_limit,inter_procedural_edge,reg_used_for,reg_def_use.live_var_def,known_block,arm_jump_table_block_start,reg_def_use.return_block_end,initialized_data_segment,data_segment,local_dynamic_tls_candidate,jump_table_candidate_refined,start_function,call_tls_get_addr,value_reg,got_relative_operand,adrp_used,unresolved_block_overlap,function_inference.function_entry_initial,arm_jump_table_skip_first_entry,split_load_total_points,next_type,no_return_call,jump_table_start,code_in_block_candidate_refined,basic_target,arch.simple_data_load,possible_target_from,overlapping_instruction,base_relative_jump,stack_def_use.live_var_used_in_block,invalid,compare_and_jump_indirect_op_valid,split_load_conflict,arm_jump_table_data_block_limit,call_may_fallthrough_inter,stack_def_use.used_in_block,compare_and_jump_indirect,no_return_call_propagated,after_end,__agg_subclause3,code_in_block,reg_def_use.return_val_used,transition_block_limit,no_value_reg_limit,block_candidate_dependency_edge,litpool_confidence,branch_to_calculated_pc_rel_addr,block_total_points,candidate_block_is_padding,stack_def_use.live_var_at_prior_used,litpool_boundaries,tls_relative_operand_mips,first_block_in_byte_interval,cmp_reg_to_reg,no_return_call_refined,split_load_for_symbolization,jump_table_candidate,reg_def_use.ambiguous_last_def_in_block,next_start,stack_def_use.def_used,block_next,reg_def_use.ref_in_block,reg_def_use.live_var_at_prior_used,data_in_code,hi_load_prop,reg_has_got,init_symbol_minus_symbol_candidate_arm,split_load_operand,unresolved_block,jump_table_max,common_tail,instruction_memory_access_size,likely_fallthrough,__agg_single10,compare_and_jump_immediate,wis_schedule_iter,block_candidate_boundaries,stack_def_use.live_var_at_block_end,contains_plausible_instr_seq,padding_block_limit,relocation_adjustment_total,arm_jump_table_cmp_limit,jump_table_signed,flags_and_jump_pair,next_block_in_byte_interval,reg_def_use.ambiguous_block_last_def,unresolved_interval_order,symbolic_expr_from_relocation,no_return_block,overlap_with_litpool,reg_def_use.def_used,stack_def_use.block_last_def,inferred_main_in_reg,contains_implausible_instr_seq,base_relative_operand,invalid_jump_table_candidate,tls_get_addr,reg_def_use.last_def_in_block,straight_line_def_used,data_block_limit,litpool_ref,cinf_ldr_add_pc,compare_and_jump_register,stack_def_use.live_var_used,block_overlap,__agg_single3,block_points_proportional,stack_def_use.last_def_in_block,reg_reg_arithmetic_operation_defs,reg_def_use.used,reg_def_use.flow_def
- split_load_total_points(ea:address, nextea:address, dest:address, type:symbol, points:number)
Recursive:
indefinite_litpool_ref,__agg_single6,indexed_pc_relative_load,litpool_symbolic_operand,indexed_pc_relative_load_relative,data_block_candidate,wis_has_prior,unlikely_have_symbolic_immediate,relative_jump_table_entry_candidate,block_boundaries,def_used_for_address,block_instruction_next,reg_def_use.used_in_block,arm_jump_table_block_instruction,relocation_adjustment,reg_def_use.live_var_at_block_end,stack_def_use.ref_in_block,arm_jump_table_data_block,call_target_has_other_fallthrough_inter,__agg_subclause6,impossible_block,jump_table_element_access,gp_relative_operand,next_end,block_heuristic,stack_base_reg_move,stack_def_use.live_var_def,composite_data_access,unresolved_interval,block_limit,arm_jump_table_candidate,call_tls_get_addr_mips,symbol_minus_symbol_litpool_access_pattern,may_fallthrough,segment_target_range,arch.reg_relative_load,__agg_subclause2,candidate_block_is_not_padding,self_contained_segment,arch.extend_load,block_last_instruction,jump_table_prelude,stack_def_use.defined_in_block,arm_jump_table_candidate_start,split_load_candidate,split_load,data_access,cmp_defines,padding_block_candidate,split_load_point,tls_desc_call,reg_def_use.block_last_def,const_value_reg_used,value_reg_edge,is_padding,negative_block_heuristic,discarded_split_load,relative_address_start,base_relative_operation,simple_data_access_pattern,block,reg_has_base_image,jump_table_target,__agg_subclause4,init_ldr_add_pc,data_in_code_propagate,__agg_single2,relative_address,block_points,must_fallthrough,wis_prior,resolved_reaches,inferred_main_dispatch,code_in_block_candidate,last_value_reg_limit,nop_in_padding_candidate,value_reg_unsupported,reg_def_use.defined_in_block,correlated_live_reg,plt_entry,reg_def_use.live_var_used,adjusts_stack_in_block,__agg_subclause7,wis_schedule,initial_function_containing_return,next_function_entry_initial,discarded_block,possible_target,plt_block,fallthrough_over_padding,straight_line_last_def,block_implies_block,incomplete_block,wis_memo,value_reg_limit,inter_procedural_edge,reg_used_for,reg_def_use.live_var_def,known_block,arm_jump_table_block_start,reg_def_use.return_block_end,initialized_data_segment,data_segment,local_dynamic_tls_candidate,jump_table_candidate_refined,start_function,call_tls_get_addr,value_reg,got_relative_operand,adrp_used,unresolved_block_overlap,function_inference.function_entry_initial,arm_jump_table_skip_first_entry,split_load_total_points,next_type,no_return_call,jump_table_start,code_in_block_candidate_refined,basic_target,arch.simple_data_load,possible_target_from,overlapping_instruction,base_relative_jump,stack_def_use.live_var_used_in_block,invalid,compare_and_jump_indirect_op_valid,split_load_conflict,arm_jump_table_data_block_limit,call_may_fallthrough_inter,stack_def_use.used_in_block,compare_and_jump_indirect,no_return_call_propagated,after_end,__agg_subclause3,code_in_block,reg_def_use.return_val_used,transition_block_limit,no_value_reg_limit,block_candidate_dependency_edge,litpool_confidence,branch_to_calculated_pc_rel_addr,block_total_points,candidate_block_is_padding,stack_def_use.live_var_at_prior_used,litpool_boundaries,tls_relative_operand_mips,first_block_in_byte_interval,cmp_reg_to_reg,no_return_call_refined,split_load_for_symbolization,jump_table_candidate,reg_def_use.ambiguous_last_def_in_block,next_start,stack_def_use.def_used,block_next,reg_def_use.ref_in_block,reg_def_use.live_var_at_prior_used,data_in_code,hi_load_prop,reg_has_got,init_symbol_minus_symbol_candidate_arm,split_load_operand,unresolved_block,jump_table_max,common_tail,instruction_memory_access_size,likely_fallthrough,__agg_single10,compare_and_jump_immediate,wis_schedule_iter,block_candidate_boundaries,stack_def_use.live_var_at_block_end,contains_plausible_instr_seq,padding_block_limit,relocation_adjustment_total,arm_jump_table_cmp_limit,jump_table_signed,flags_and_jump_pair,next_block_in_byte_interval,reg_def_use.ambiguous_block_last_def,unresolved_interval_order,symbolic_expr_from_relocation,no_return_block,overlap_with_litpool,reg_def_use.def_used,stack_def_use.block_last_def,inferred_main_in_reg,contains_implausible_instr_seq,base_relative_operand,invalid_jump_table_candidate,tls_get_addr,reg_def_use.last_def_in_block,straight_line_def_used,data_block_limit,litpool_ref,cinf_ldr_add_pc,compare_and_jump_register,stack_def_use.live_var_used,block_overlap,__agg_single3,block_points_proportional,stack_def_use.last_def_in_block,reg_reg_arithmetic_operation_defs,reg_def_use.used,reg_def_use.flow_def
- discarded_split_load(ea:address, nextea:address, dest:address, type:symbol, points:number)
Used by:
split_loadstoreRecursive:
indefinite_litpool_ref,__agg_single6,indexed_pc_relative_load,litpool_symbolic_operand,indexed_pc_relative_load_relative,data_block_candidate,wis_has_prior,unlikely_have_symbolic_immediate,relative_jump_table_entry_candidate,block_boundaries,def_used_for_address,block_instruction_next,reg_def_use.used_in_block,arm_jump_table_block_instruction,relocation_adjustment,reg_def_use.live_var_at_block_end,stack_def_use.ref_in_block,arm_jump_table_data_block,call_target_has_other_fallthrough_inter,__agg_subclause6,impossible_block,jump_table_element_access,gp_relative_operand,next_end,block_heuristic,stack_base_reg_move,stack_def_use.live_var_def,composite_data_access,unresolved_interval,block_limit,arm_jump_table_candidate,call_tls_get_addr_mips,symbol_minus_symbol_litpool_access_pattern,may_fallthrough,segment_target_range,arch.reg_relative_load,__agg_subclause2,candidate_block_is_not_padding,self_contained_segment,arch.extend_load,block_last_instruction,jump_table_prelude,stack_def_use.defined_in_block,arm_jump_table_candidate_start,split_load_candidate,split_load,data_access,cmp_defines,padding_block_candidate,split_load_point,tls_desc_call,reg_def_use.block_last_def,const_value_reg_used,value_reg_edge,is_padding,negative_block_heuristic,discarded_split_load,relative_address_start,base_relative_operation,simple_data_access_pattern,block,reg_has_base_image,jump_table_target,__agg_subclause4,init_ldr_add_pc,data_in_code_propagate,__agg_single2,relative_address,block_points,must_fallthrough,wis_prior,resolved_reaches,inferred_main_dispatch,code_in_block_candidate,last_value_reg_limit,nop_in_padding_candidate,value_reg_unsupported,reg_def_use.defined_in_block,correlated_live_reg,plt_entry,reg_def_use.live_var_used,adjusts_stack_in_block,__agg_subclause7,wis_schedule,initial_function_containing_return,next_function_entry_initial,discarded_block,possible_target,plt_block,fallthrough_over_padding,straight_line_last_def,block_implies_block,incomplete_block,wis_memo,value_reg_limit,inter_procedural_edge,reg_used_for,reg_def_use.live_var_def,known_block,arm_jump_table_block_start,reg_def_use.return_block_end,initialized_data_segment,data_segment,local_dynamic_tls_candidate,jump_table_candidate_refined,start_function,call_tls_get_addr,value_reg,got_relative_operand,adrp_used,unresolved_block_overlap,function_inference.function_entry_initial,arm_jump_table_skip_first_entry,split_load_total_points,next_type,no_return_call,jump_table_start,code_in_block_candidate_refined,basic_target,arch.simple_data_load,possible_target_from,overlapping_instruction,base_relative_jump,stack_def_use.live_var_used_in_block,invalid,compare_and_jump_indirect_op_valid,split_load_conflict,arm_jump_table_data_block_limit,call_may_fallthrough_inter,stack_def_use.used_in_block,compare_and_jump_indirect,no_return_call_propagated,after_end,__agg_subclause3,code_in_block,reg_def_use.return_val_used,transition_block_limit,no_value_reg_limit,block_candidate_dependency_edge,litpool_confidence,branch_to_calculated_pc_rel_addr,block_total_points,candidate_block_is_padding,stack_def_use.live_var_at_prior_used,litpool_boundaries,tls_relative_operand_mips,first_block_in_byte_interval,cmp_reg_to_reg,no_return_call_refined,split_load_for_symbolization,jump_table_candidate,reg_def_use.ambiguous_last_def_in_block,next_start,stack_def_use.def_used,block_next,reg_def_use.ref_in_block,reg_def_use.live_var_at_prior_used,data_in_code,hi_load_prop,reg_has_got,init_symbol_minus_symbol_candidate_arm,split_load_operand,unresolved_block,jump_table_max,common_tail,instruction_memory_access_size,likely_fallthrough,__agg_single10,compare_and_jump_immediate,wis_schedule_iter,block_candidate_boundaries,stack_def_use.live_var_at_block_end,contains_plausible_instr_seq,padding_block_limit,relocation_adjustment_total,arm_jump_table_cmp_limit,jump_table_signed,flags_and_jump_pair,next_block_in_byte_interval,reg_def_use.ambiguous_block_last_def,unresolved_interval_order,symbolic_expr_from_relocation,no_return_block,overlap_with_litpool,reg_def_use.def_used,stack_def_use.block_last_def,inferred_main_in_reg,contains_implausible_instr_seq,base_relative_operand,invalid_jump_table_candidate,tls_get_addr,reg_def_use.last_def_in_block,straight_line_def_used,data_block_limit,litpool_ref,cinf_ldr_add_pc,compare_and_jump_register,stack_def_use.live_var_used,block_overlap,__agg_single3,block_points_proportional,stack_def_use.last_def_in_block,reg_reg_arithmetic_operation_defs,reg_def_use.used,reg_def_use.flow_def
- split_load(ea:address, nextea:address, dest:address, type:symbol)
Uses:
arch.load_operation,arch.store_operation,instruction,instruction_get_dest_op,instruction_get_op,next,op_immediate,op_indirect_mapped,op_regdirect_contains_reg,symbolUsed by:
__agg_subclause8,base_addr_offset_operand_candidate,symbol_minus_symbol,symbolic_operand_attribute,symbolic_operand_mips_candidateRecursive:
indefinite_litpool_ref,__agg_single6,indexed_pc_relative_load,litpool_symbolic_operand,indexed_pc_relative_load_relative,data_block_candidate,wis_has_prior,unlikely_have_symbolic_immediate,relative_jump_table_entry_candidate,block_boundaries,def_used_for_address,block_instruction_next,reg_def_use.used_in_block,arm_jump_table_block_instruction,relocation_adjustment,reg_def_use.live_var_at_block_end,stack_def_use.ref_in_block,arm_jump_table_data_block,call_target_has_other_fallthrough_inter,__agg_subclause6,impossible_block,jump_table_element_access,gp_relative_operand,next_end,block_heuristic,stack_base_reg_move,stack_def_use.live_var_def,composite_data_access,unresolved_interval,block_limit,arm_jump_table_candidate,call_tls_get_addr_mips,symbol_minus_symbol_litpool_access_pattern,may_fallthrough,segment_target_range,arch.reg_relative_load,__agg_subclause2,candidate_block_is_not_padding,self_contained_segment,arch.extend_load,block_last_instruction,jump_table_prelude,stack_def_use.defined_in_block,arm_jump_table_candidate_start,split_load_candidate,split_load,data_access,cmp_defines,padding_block_candidate,split_load_point,tls_desc_call,reg_def_use.block_last_def,const_value_reg_used,value_reg_edge,is_padding,negative_block_heuristic,discarded_split_load,relative_address_start,base_relative_operation,simple_data_access_pattern,block,reg_has_base_image,jump_table_target,__agg_subclause4,init_ldr_add_pc,data_in_code_propagate,__agg_single2,relative_address,block_points,must_fallthrough,wis_prior,resolved_reaches,inferred_main_dispatch,code_in_block_candidate,last_value_reg_limit,nop_in_padding_candidate,value_reg_unsupported,reg_def_use.defined_in_block,correlated_live_reg,plt_entry,reg_def_use.live_var_used,adjusts_stack_in_block,__agg_subclause7,wis_schedule,initial_function_containing_return,next_function_entry_initial,discarded_block,possible_target,plt_block,fallthrough_over_padding,straight_line_last_def,block_implies_block,incomplete_block,wis_memo,value_reg_limit,inter_procedural_edge,reg_used_for,reg_def_use.live_var_def,known_block,arm_jump_table_block_start,reg_def_use.return_block_end,initialized_data_segment,data_segment,local_dynamic_tls_candidate,jump_table_candidate_refined,start_function,call_tls_get_addr,value_reg,got_relative_operand,adrp_used,unresolved_block_overlap,function_inference.function_entry_initial,arm_jump_table_skip_first_entry,split_load_total_points,next_type,no_return_call,jump_table_start,code_in_block_candidate_refined,basic_target,arch.simple_data_load,possible_target_from,overlapping_instruction,base_relative_jump,stack_def_use.live_var_used_in_block,invalid,compare_and_jump_indirect_op_valid,split_load_conflict,arm_jump_table_data_block_limit,call_may_fallthrough_inter,stack_def_use.used_in_block,compare_and_jump_indirect,no_return_call_propagated,after_end,__agg_subclause3,code_in_block,reg_def_use.return_val_used,transition_block_limit,no_value_reg_limit,block_candidate_dependency_edge,litpool_confidence,branch_to_calculated_pc_rel_addr,block_total_points,candidate_block_is_padding,stack_def_use.live_var_at_prior_used,litpool_boundaries,tls_relative_operand_mips,first_block_in_byte_interval,cmp_reg_to_reg,no_return_call_refined,split_load_for_symbolization,jump_table_candidate,reg_def_use.ambiguous_last_def_in_block,next_start,stack_def_use.def_used,block_next,reg_def_use.ref_in_block,reg_def_use.live_var_at_prior_used,data_in_code,hi_load_prop,reg_has_got,init_symbol_minus_symbol_candidate_arm,split_load_operand,unresolved_block,jump_table_max,common_tail,instruction_memory_access_size,likely_fallthrough,__agg_single10,compare_and_jump_immediate,wis_schedule_iter,block_candidate_boundaries,stack_def_use.live_var_at_block_end,contains_plausible_instr_seq,padding_block_limit,relocation_adjustment_total,arm_jump_table_cmp_limit,jump_table_signed,flags_and_jump_pair,next_block_in_byte_interval,reg_def_use.ambiguous_block_last_def,unresolved_interval_order,symbolic_expr_from_relocation,no_return_block,overlap_with_litpool,reg_def_use.def_used,stack_def_use.block_last_def,inferred_main_in_reg,contains_implausible_instr_seq,base_relative_operand,invalid_jump_table_candidate,tls_get_addr,reg_def_use.last_def_in_block,straight_line_def_used,data_block_limit,litpool_ref,cinf_ldr_add_pc,compare_and_jump_register,stack_def_use.live_var_used,block_overlap,__agg_single3,block_points_proportional,stack_def_use.last_def_in_block,reg_reg_arithmetic_operation_defs,reg_def_use.used,reg_def_use.flow_def
- split_loadstore(ea:address, nextea:address, dest:address)
- valid_address(EA:address)
WARNING: Predicate not present in compiled Datalog program (Dead Code)
- symbol_type(Addr:address, Type:symbol)
WARNING: Predicate not present in compiled Datalog program (Dead Code)
- base_addr_offset_operand_candidate(EA:address, NextEA:address, Index2:operand_index, Reg:register, Dest_addr:address, SymType:symbol, Got_entry:address, Offset:number, Type:symbol)
got_page / got_fst instructions pairs
EA: Instruction for got_page NextEA: Instruction for got_ofst Index2: Operand index for got_ofst Reg: Base register in NextEA Dest_addr: Target symbol address SymType: Type of target symbol (either “code” or “data”) Got_entry: GOT entry containing page base Offset: Raw offset in NextEA Index2 operand Type: Type of got_ofst instruction (either ADDIU or LoadStore)
- base_addr_offset_operand(EA:address, NextEA:address, Index2:operand_index, Dest_addr:address, SymType:symbol, Type:symbol)
- base_addr_offset_operand_point(EA:address, NextEA:address, Index2:operand_index, Points:number, Why:symbol)
- base_addr_offset_operand_total_points(EA:address, NextEA:address, Index2:operand_index, Points:number)
- base_addr_load(EA:address, NextEA:address, Reg:register, Reg2:register, Got_entry:address, BaseAddr:address)
- mips_page_base_in_got(Got_entry:address)
- match_symbol_dest_addr(Dest_addr:address)
WARNING: Predicate not present in compiled Datalog program (Dead Code)
- symbolic_operand_mips_candidate(ea:address, index:operand_index, dest:address)
- inferred_symbol_mips(EA:address, SymbolName:symbol, Scope:symbol, Visibility:symbol, Type:symbol, Pos:symbol_position)
MIPS-specific inferred_symbol:
The MIPS assembler requires any symbol referenced by a GOT-related relocation to be global; otherwise, assembly fails (e.g., with an error that local symbols cannot use %got).
However, in a fully linked shared object, symbols originally accessed via %got(sym) may appear as local in the ELF symbol table. This happens because the linker performs symbol binding reduction – localizing symbols that are not exported – even if they were originally global during assembly and relocation processing.
As a result, some GOT entries correspond to symbols that now appear local, and reassembling such code would fail because the assembler rejects %got references to local symbols.
This discrepancy arises from the difference between what the assembler allows and what the linker produces.
To resolve this issue, we create a new inferred symbol with GLOBAL binding and HIDDEN visibility for such cases. ——————————————————————————-
Uses:
aligned_address_in_data,ambiguous_symbol,base_addr_offset_operand,defined_symbol,loaded_section,mips_page_base_in_got,symbol,tls_relative_operand_mips,tls_segmentRecursive:
symbolic_expr,moved_label,symbol_minus_symbol_candidate,next_data_limit,label_conflict,symbolic_expr_symbol_minus_symbol,labeled_ea,symbolic_operand,boundary_sym_expr,got_reference,best_func_symbol,function_inference.function_entry,best_symexpr_symbol,next_address_in_data,data_object_candidate,data_limit_after_access,data_object,labeled_data_candidate,+disconnected2,resolved_transfer,code_pointer_in_data,moved_label_candidate,block_needs_merging,inferred_special_symbol,value_reg_address_before,symbolic_data,address_array_aux,split_block,symbol_minus_symbol_from_relocation,string_candidate,moved_pc_relative_candidate,subsequent_string_candidate,+disconnected4,+disconnected6,symbolic_operand_attribute,preferred_data_access,inferred_symbol,data_object_total_points,inferred_symbol_mips,address_array,code_in_refined_block,symbolic_expr_attribute,discarded_jump_table_entry,jump_table,main_function,discarded_data_object,data_access_limit,refined_block,symbol_score,inferred_main_function,symbolic_operand_point,relative_jump_table_entry,moved_displacement_candidate,data_object_point,string_candidate_refined,data_limit,moved_data_label,symbol_minus_symbol,+disconnected1,after_address_in_data,code_in_split_block,data_object_conflict,block_needs_splitting_at
- mips_stubs_section(name:symbol)
Used by:
mips_stubs_entry
- mips_stubs_entry(Block:address, Function:symbol)
Uses:
code_in_refined_block,loaded_section,mips_stubs_section,plt_entry_candidate,symbolUsed by:
abi_intrinsic
- plt_entry_candidate(EA:address, GotIndex:unsigned)
Uses:
instruction,loaded_section,next,op_immediate,op_indirect,op_regdirect_contains_reg,symbolUsed by:
mips_stubs_entry,plt_entry
- mips_attribute_target_to_mid_function(EA:address, Dest_addr:address, Attribute:symbol)
Some relocations may reference labels inside the body of a function, not just function entry points. Log any symbolic operands with attribute whose target lies in the middle of function.