Linux "objdump" Command Line Options and Examples
display information from object files.

objdump displays information about one or more object files. The options control what particular information to display. This information is mostly useful to programmers who are working on the compilation tools, as opposed to programmers who just want their program to compile and work.


Usage:

objdump [-a|--archive-headers]
[-b bfdname|--target=bfdname]
[-C|--demangle[=style] ]
[-d|--disassemble]
[-D|--disassemble-all]
[-z|--disassemble-zeroes]
[-EB|-EL|--endian={big | little }]
[-f|--file-headers]
[-F|--file-offsets]
[--file-start-context]
[-g|--debugging]
[-e|--debugging-tags]
[-h|--section-headers|--headers]
[-i|--info]
[-j section|--section=section]
[-l|--line-numbers]
[-S|--source]
[-m machine|--architecture=machine]
[-M options|--disassembler-options=options]
[-p|--private-headers]
[-P options|--private=options]
[-r|--reloc]
[-R|--dynamic-reloc]
[-s|--full-contents]
[-W[lLiaprmfFsoRtUuTgAckK]|
--dwarf[=rawline,=decodedline,=info,=abbrev,=pubnames,=aranges,=macro,=frames,=frames-interp,=str,=loc,=Ranges,=pubtypes,=trace_info,=trace_abbrev,=trace_aranges,=gdb_index,=addr,=cu_index,=links,=follow-links]
[-G|--stabs]
[-t|--syms]
[-T|--dynamic-syms]
[-x|--all-headers]
[-w|--wide]
[--start-address=address]
[--stop-address=address]
[--prefix-addresses]
[--[no-]show-raw-insn]
[--adjust-vma=offset]
[--dwarf-depth=n]
[--dwarf-start=n]
[--special-syms]
[--prefix=prefix]
[--prefix-strip=level]
[--insn-width=width]
[-V|--version]
[-H|--help]
objfile...






Command Line Options:

--archive-header
If any of the objfile files are archives, display the archive header information (in a format similar tols -l). Besides the information you could list with ar tv, objdump -a shows the object file format ofeach archive member.
objdump --archive-header ...
--adjust-vma
When dumping information, first add offset to all the section addresses. This is useful if the sectionaddresses do not correspond to the symbol table, which can happen when putting sections at particularaddresses when using a format which can not represent section addresses, such as a.out.
objdump --adjust-vma ...
--target
Specify that the object-code format for the object files is bfdname. This option may not be necessary;objdump can automatically recognize many formats.For example,objdump -b oasys -m vax -h fu.odisplays summary information from the section headers (-h) of fu.o, which is explicitly identified (-m) asa VAX object file in the format produced by Oasys compilers. You can list the formats available with the
objdump --target ...
--demangle[
Decode (demangle) low-level symbol names into user-level names. Besides removing any initial underscoreprepended by the system, this makes C++ function names readable. Different compilers have differentmangling styles. The optional demangling style argument can be used to choose an appropriate demanglingstyle for your compiler.
objdump --demangle[ ...
--debugging
Display debugging information. This attempts to parse STABS and IEEE debugging format information storedin the file and print it out using a C like syntax. If neither of these formats are found this optionfalls back on the -W option to print any DWARF information in the file.
objdump --debugging ...
--debugging-tags
Like -g, but the information is generated in a format compatible with ctags tool.
objdump --debugging-tags ...
--disassemble
Display the assembler mnemonics for the machine instructions from objfile. This option only disassemblesthose sections which are expected to contain instructions.
objdump --disassemble ...
--disassemble-all
Like -d, but disassemble the contents of all sections, not just those expected to contain instructions.This option also has a subtle effect on the disassembly of instructions in code sections. When option -dis in effect objdump will assume that any symbols present in a code section occur on the boundary betweeninstructions and it will refuse to disassemble across such a boundary. When option -D is in effecthowever this assumption is supressed. This means that it is possible for the output of -d and -D todiffer if, for example, data is stored in code sections.If the target is an ARM architecture this switch also has the effect of forcing the disassembler to decodepieces of data found in code sections as if they were instructions.
objdump --disassemble-all ...
--prefix-addresses
When disassembling, print the complete address on each line. This is the older disassembly format.
objdump --prefix-addresses ...
--endian
Specify the endianness of the object files. This only affects disassembly. This can be useful whendisassembling a file format which does not describe endianness information, such as S-records.
objdump --endian ...
--file-headers
Display summary information from the overall header of each of the objfile files.
objdump --file-headers ...
--file-offsets
When disassembling sections, whenever a symbol is displayed, also display the file offset of the region ofdata that is about to be dumped. If zeroes are being skipped, then when disassembly resumes, tell theuser how many zeroes were skipped and the file offset of the location from where the disassembly resumes.When dumping sections, display the file offset of the location from where the dump starts.
objdump --file-offsets ...
--file-start-context
Specify that when displaying interlisted source code/disassembly (assumes -S) from a file that has not yetbeen displayed, extend the context to the start of the file.
objdump --file-start-context ...
--headers
Display summary information from the section headers of the object file.File segments may be relocated to nonstandard addresses, for example by using the -Ttext, -Tdata, or -Tbssoptions to ld. However, some object file formats, such as a.out, do not store the starting address of thefile segments. In those situations, although ld relocates the sections correctly, using objdump -h tolist the file section headers cannot show the correct addresses. Instead, it shows the usual addresses,which are implicit for the target.Note, in some cases it is possible for a section to have both the READONLY and the NOREAD attributes set.In such cases the NOREAD attribute takes precedence, but objdump will report both since the exact settingof the flag bits might be important.
objdump --headers ...
--help
Print a summary of the options to objdump and exit.
objdump --help ...
--info
Display a list showing all architectures and object formats available for specification with -b or -m.
objdump --info ...
--section
Display information only for section name.
objdump --section ...
--line-numbers
Label the display (using debugging information) with the filename and source line numbers corresponding tothe object code or relocs shown. Only useful with -d, -D, or -r.
objdump --line-numbers ...
--architecture
Specify the architecture to use when disassembling object files. This can be useful when disassemblingobject files which do not describe architecture information, such as S-records. You can list theavailable architectures with the -i option.If the target is an ARM architecture then this switch has an additional effect. It restricts thedisassembly to only those instructions supported by the architecture specified by machine. If it isnecessary to use this switch because the input file does not contain any architecture information, but itis also desired to disassemble all the instructions use -marm.
objdump --architecture ...
--disassembler-options
Pass target specific information to the disassembler. Only supported on some targets. If it is necessaryto specify more than one disassembler option then multiple -M options can be used or can be placedtogether into a comma separated list.For ARC, dsp controls the printing of DSP instructions, spfp selects the printing of FPX single precisionFP instructions, dpfp selects the printing of FPX double precision FP instructions, quarkse_em selects theprinting of special QuarkSE-EM instructions, fpuda selects the printing of double precision assistinstructions, fpus selects the printing of FPU single precision FP instructions, while fpud selects theprinting of FPU souble precision FP instructions. Additionally, one can choose to have all the immediatesprinted in hexadecimal using hex. By default, the short immediates are printed using the decimalrepresentation, while the long immediate values are printed as hexadecimal.cpu=... allows to enforce a particular ISA when disassembling instructions, overriding the -m value orwhatever is in the ELF file. This might be useful to select ARC EM or HS ISA, because architecture issame for those and disassembler relies on private ELF header data to decide if code is for EM or HS. Thisoption might be specified multiple times - only the latest value will be used. Valid values are same asfor the assembler -mcpu=... option.If the target is an ARM architecture then this switch can be used to select which register name set isused during disassembler. Specifying -M reg-names-std (the default) will select the register names asused in ARM's instruction set documentation, but with register 13 called 'sp', register 14 called 'lr' andregister 15 called 'pc'. Specifying -M reg-names-apcs will select the name set used by the ARM ProcedureCall Standard, whilst specifying -M reg-names-raw will just use r followed by the register number.There are also two variants on the APCS register naming scheme enabled by -M reg-names-atpcs and -M reg-names-special-atpcs which use the ARM/Thumb Procedure Call Standard naming conventions. (Either with thenormal register names or the special register names).This option can also be used for ARM architectures to force the disassembler to interpret all instructionsas Thumb instructions by using the switch --disassembler-options=force-thumb. This can be useful whenattempting to disassemble thumb code produced by other compilers.For the x86, some of the options duplicate functions of the -m switch, but allow finer grained control.Multiple selections from the following may be specified as a comma separated string."x86-64""i386""i8086"Select disassembly for the given architecture."intel""att"Select between intel syntax mode and AT&T syntax mode."amd64""intel64"Select between AMD64 ISA and Intel64 ISA."intel-mnemonic""att-mnemonic"Select between intel mnemonic mode and AT&T mnemonic mode. Note: "intel-mnemonic" implies "intel" and"att-mnemonic" implies "att"."addr64""addr32""addr16""data32""data16"Specify the default address size and operand size. These four options will be overridden if "x86-64","i386" or "i8086" appear later in the option string."suffix"When in AT&T mode, instructs the disassembler to print a mnemonic suffix even when the suffix could beinferred by the operands.For PowerPC, the -M argument raw selects disasssembly of hardware insns rather than aliases. For example,you will see "rlwinm" rather than "clrlwi", and "addi" rather than "li". All of the -m arguments for gasthat select a CPU are supported. These are: 403, 405, 440, 464, 476, 601, 603, 604, 620, 7400, 7410,7450, 7455, 750cl, 821, 850, 860, a2, booke, booke32, cell, com, e200z4, e300, e500, e500mc, e500mc64,e500x2, e5500, e6500, efs, power4, power5, power6, power7, power8, power9, ppc, ppc32, ppc64, ppc64bridge,ppcps, pwr, pwr2, pwr4, pwr5, pwr5x, pwr6, pwr7, pwr8, pwr9, pwrx, titan, and vle. 32 and 64 modify thedefault or a prior CPU selection, disabling and enabling 64-bit insns respectively. In addition, altivec,any, htm, vsx, and spe add capabilities to a previous or later CPU selection. any will disassemble anyopcode known to binutils, but in cases where an opcode has two different meanings or different arguments,you may not see the disassembly you expect. If you disassemble without giving a CPU selection, a defaultwill be chosen from information gleaned by BFD from the object files headers, but the result again may notbe as you expect.For MIPS, this option controls the printing of instruction mnemonic names and register names indisassembled instructions. Multiple selections from the following may be specified as a comma separatedstring, and invalid options are ignored:"no-aliases"Print the 'raw' instruction mnemonic instead of some pseudo instruction mnemonic. I.e., print 'daddu'or 'or' instead of 'move', 'sll' instead of 'nop', etc."msa"Disassemble MSA instructions."virt"Disassemble the virtualization ASE instructions."xpa"Disassemble the eXtended Physical Address (XPA) ASE instructions."gpr-names=ABI"Print GPR (general-purpose register) names as appropriate for the specified ABI. By default, GPRnames are selected according to the ABI of the binary being disassembled."fpr-names=ABI"Print FPR (floating-point register) names as appropriate for the specified ABI. By default, FPRnumbers are printed rather than names."cp0-names=ARCH"Print CP0 (system control coprocessor; coprocessor 0) register names as appropriate for the CPU orarchitecture specified by ARCH. By default, CP0 register names are selected according to thearchitecture and CPU of the binary being disassembled."hwr-names=ARCH"Print HWR (hardware register, used by the "rdhwr" instruction) names as appropriate for the CPU orarchitecture specified by ARCH. By default, HWR names are selected according to the architecture andCPU of the binary being disassembled."reg-names=ABI"Print GPR and FPR names as appropriate for the selected ABI."reg-names=ARCH"Print CPU-specific register names (CP0 register and HWR names) as appropriate for the selected CPU orarchitecture.For any of the options listed above, ABI or ARCH may be specified as numeric to have numbers printedrather than names, for the selected types of registers. You can list the available values of ABI and ARCHusing the --help option.For VAX, you can specify function entry addresses with -M entry:0xf00ba. You can use this multiple timesto properly disassemble VAX binary files that don't contain symbol tables (like ROM dumps). In thesecases, the function entry mask would otherwise be decoded as VAX instructions, which would probably leadthe rest of the function being wrongly disassembled.
objdump --disassembler-options ...
--private-headers
Print information that is specific to the object file format. The exact information printed depends uponthe object file format. For some object file formats, no additional information is printed.
objdump --private-headers ...
--private
Print information that is specific to the object file format. The argument options is a comma separatedlist that depends on the format (the lists of options is displayed with the help).For XCOFF, the available options are:"header""aout""sections""syms""relocs""lineno,""loader""except""typchk""traceback""toc""ldinfo"Not all object formats support this option. In particular the ELF format does not use it.
objdump --private ...
--reloc
Print the relocation entries of the file. If used with -d or -D, the relocations are printed interspersedwith the disassembly.
objdump --reloc ...
--dynamic-reloc
Print the dynamic relocation entries of the file. This is only meaningful for dynamic objects, such ascertain types of shared libraries. As for -r, if used with -d or -D, the relocations are printedinterspersed with the disassembly.
objdump --dynamic-reloc ...
--full-contents
Display the full contents of any sections requested. By default all non-empty sections are displayed.
objdump --full-contents ...
--source
Display source code intermixed with disassembly, if possible. Implies -d.
objdump --source ...
--prefix
Specify prefix to add to the absolute paths when used with -S.
objdump --prefix ...
--prefix-strip
Indicate how many initial directory names to strip off the hardwired absolute paths. It has no effectwithout --prefix=prefix.
objdump --prefix-strip ...
--show-raw-insn
When disassembling instructions, print the instruction in hex as well as in symbolic form. This is thedefault except when --prefix-addresses is used.
objdump --show-raw-insn ...
--no-show-raw-insn
When disassembling instructions, do not print the instruction bytes. This is the default when
objdump --no-show-raw-insn ...
--insn-width
Display width bytes on a single line when disassembling instructions.
objdump --insn-width ...
--dwarf-depth
Limit the dump of the ".debug_info" section to n children. This is only useful with --debug-dump=info.The default is to print all DIEs; the special value 0 for n will also have this effect.With a non-zero value for n, DIEs at or deeper than n levels will not be printed. The range for n iszero-based.
objdump --dwarf-depth ...
--dwarf-start
Print only DIEs beginning with the DIE numbered n. This is only useful with --debug-dump=info.If specified, this option will suppress printing of any header information and all DIEs before the DIEnumbered n. Only siblings and children of the specified DIE will be printed.This can be used in conjunction with --dwarf-depth.
objdump --dwarf-start ...
--dwarf-check
Enable additional checks for consistency of Dwarf information.
objdump --dwarf-check ...
--stabs
Display the full contents of any sections requested. Display the contents of the .stab and .stab.indexand .stab.excl sections from an ELF file. This is only useful on systems (such as Solaris 2.0) in which".stab" debugging symbol-table entries are carried in an ELF section. In most other file formats,debugging symbol-table entries are interleaved with linkage symbols, and are visible in the --syms output.
objdump --stabs ...
--start-address
Start displaying data at the specified address. This affects the output of the -d, -r and -s options.
objdump --start-address ...
--stop-address
Stop displaying data at the specified address. This affects the output of the -d, -r and -s options.
objdump --stop-address ...
--syms
Print the symbol table entries of the file. This is similar to the information provided by the nmprogram, although the display format is different. The format of the output depends upon the format ofthe file being dumped, but there are two main types. One looks like this:[ 4](sec 3)(fl 0x00)(ty 0)(scl 3) (nx 1) 0x00000000 .bss[ 6](sec 1)(fl 0x00)(ty 0)(scl 2) (nx 0) 0x00000000 fredwhere the number inside the square brackets is the number of the entry in the symbol table, the sec numberis the section number, the fl value are the symbol's flag bits, the ty number is the symbol's type, thescl number is the symbol's storage class and the nx value is the number of auxilary entries associatedwith the symbol. The last two fields are the symbol's value and its name.The other common output format, usually seen with ELF based files, looks like this:00000000 l d .bss 00000000 .bss00000000 g .text 00000000 fredHere the first number is the symbol's value (sometimes refered to as its address). The next field isactually a set of characters and spaces indicating the flag bits that are set on the symbol. Thesecharacters are described below. Next is the section with which the symbol is associated or *ABS* if thesection is absolute (ie not connected with any section), or *UND* if the section is referenced in the filebeing dumped, but not defined there.After the section name comes another field, a number, which for common symbols is the alignment and forother symbol is the size. Finally the symbol's name is displayed.The flag characters are divided into 7 groups as follows:"l""g""u""!" The symbol is a local (l), global (g), unique global (u), neither global nor local (a space) or bothglobal and local (!). A symbol can be neither local or global for a variety of reasons, e.g., becauseit is used for debugging, but it is probably an indication of a bug if it is ever both local andglobal. Unique global symbols are a GNU extension to the standard set of ELF symbol bindings. Forsuch a symbol the dynamic linker will make sure that in the entire process there is just one symbolwith this name and type in use."w" The symbol is weak (w) or strong (a space)."C" The symbol denotes a constructor (C) or an ordinary symbol (a space)."W" The symbol is a warning (W) or a normal symbol (a space). A warning symbol's name is a message to bedisplayed if the symbol following the warning symbol is ever referenced."I""i" The symbol is an indirect reference to another symbol (I), a function to be evaluated during relocprocessing (i) or a normal symbol (a space)."d""D" The symbol is a debugging symbol (d) or a dynamic symbol (D) or a normal symbol (a space)."F""f""O" The symbol is the name of a function (F) or a file (f) or an object (O) or just a normal symbol (aspace).
objdump --syms ...
--dynamic-syms
Print the dynamic symbol table entries of the file. This is only meaningful for dynamic objects, such ascertain types of shared libraries. This is similar to the information provided by the nm program whengiven the -D (--dynamic) option.The output format is similar to that produced by the --syms option, except that an extra field is insertedbefore the symbol's name, giving the version information associated with the symbol. If the version isthe default version to be used when resolving unversioned references to the symbol then it's displayed asis, otherwise it's put into parentheses.
objdump --dynamic-syms ...
--special-syms
When displaying symbols include those which the target considers to be special in some way and which wouldnot normally be of interest to the user.
objdump --special-syms ...
--version
Print the version number of objdump and exit.
objdump --version ...
--all-headers
Display all available header information, including the symbol table and relocation entries. Using -x isequivalent to specifying all of -a -f -h -p -r -t.
objdump --all-headers ...
--wide
Format some lines for output devices that have more than 80 columns. Also do not truncate symbol nameswhen they are displayed.
objdump --wide ...
--disassemble-zeroes
Normally the disassembly output will skip blocks of zeroes. This option directs the disassembler todisassemble those blocks, just like any other data.@fileRead command-line options from file. The options read are inserted in place of the original @file option.If file does not exist, or cannot be read, then the option will be treated literally, and not removed.Options in file are separated by whitespace. A whitespace character may be included in an option bysurrounding the entire option in either single or double quotes. Any character (including a backslash)may be included by prefixing the character to be included with a backslash. The file may itself containadditional @file options; any such options will be processed recursively.
objdump --disassemble-zeroes ...