Skip to content

Bloaty McBloatface v1.1

Latest
Latest
Compare
Choose a tag to compare
@haberman haberman released this 24 May 04:56
v1.1
8708274

Added

  • Source Filtering: Bloaty can now filter the results based on a regex
    match. See "Source filter" in README.md for details. (#177)
  • Show only File or VM: It is possible to restrict the output to show only
    "VM SIZE" or "FILE SIZE" by passing --domain=vm or --domain=file. (#165)

Fixed

  • Use system deps in CMake build: The CMake build can now use system deps
    for protobuf, capstone, and re2 if they are present. Hopefully this will make
    Bloaty easier to package in package managers. (#155)
  • DWARF 4 Support: Fixed one place in Bloaty that was not accepting DWARF 4.
    (#166)
  • DWARF fix: Added support for DW_FORM_ref_udata. (#197)
  • Big-endian fix: Added missing byte swapping when getting the build ID for
    a big-endian binary. (#182)
  • WASM demangling: WASM symbols are now properly demangled. (#149)
  • New WASM sections: Added support for new DataCount and Event sections
    in WASM. (#178)
  • Scaling fixes: Fixed integer overflow in 32-bit builds, and other issues
    that arise when using Bloaty with many files and/or large files. (#193)
  • Improved coverage: Bloaty now properly attributes .eh_frame in object
    files, and attributes ELF headers to the corresponding section. (#168)
  • CSV escaping: Bloaty now properly escapes CSV output when a field contains
    a comma or double quote. (#174)

Changed

  • File size column moved left: In the default output, the file size now
    appears on the left. This means that all numbers are now on the left, which
    leads to more readable output when viewing in a proportional font or in a
    limited-width window.

    Old:

         VM SIZE                         FILE SIZE
 --------------                   --------------
   0.0%       0 .debug_info        7.97Mi  29.5%
   0.0%       0 .debug_loc         6.40Mi  23.7%

    New:

        FILE SIZE        VM SIZE    
 --------------  -------------- 
  30.0%  8.85Mi   0.0%       0    .debug_info
  24.7%  7.29Mi   0.0%       0    .debug_loc

    This shouldn't cause breakage, as anything consuming Bloaty's output
    programmatically should be using --csv or --tsv. (#165)

  • ELF Segment labels now contain index: Previously ELF segment labels looked
    like LOAD [RW] with segment flags only. Now they also contain the segment
    index, eg. LOAD #1 [RW], so the output can distinguish between different
    segments with the same flags. (#159)

Security

Bloaty should not be considered fully hardened against malicious binaries. This
is one of the major reasons why Bloaty is not offered as an in-process library,
and should only be used through its command-line interface in a dedicated
address space. If you do not trust the input, further process sandboxing is
advisable.

However we do perform fuzzing of the parsers, and fix and crash bugs that are
found by fuzzing.

  • Fixed crash bugs found by fuzzing (#173, #175)
Assets 3
Loading