diff --git a/src/elf/arm.rs b/src/elf/arm.rs
new file mode 100644
index 00000000..a16e8e46
--- /dev/null
+++ b/src/elf/arm.rs
@@ -0,0 +1,260 @@
+//! Implements Arm extensions for ELF.
+//!
+//! These data structures are primarily defined by [ELF for the Arm Architecture].
+//!
+//! [ELF for the Arm Architecture]: https://developer.arm.com/documentation/ihi0044/h/?lang=en
+
+use crate::elf::build_attributes::aeabi::Aeabi;
+use crate::elf::header::EM_ARM;
+use core::num::NonZeroU8;
+
+// Table 4-2, Arm-specific e_flags
+
+/// This masks an 8-bit version number, the version of the ABI to which this ELF file conforms. A
+/// value of 0 denotes unknown conformance.
+pub const EF_ARM_ABIMASK: u32 = 0xFF000000;
+/// The ELF file contains BE-8 code, suitable for execution on an Arm Architecture v6 processor.
+/// This flag must only be set on an executable file.
+pub const EF_ARM_BE8: u32 = 0x00800000;
+/// Legacy code (ABI version 4 and earlier) generated by gcc-arm-xxx might use these bits.
+pub const EF_ARM_GCCMASK: u32 = 0x00400FFF;
+/// Set in executable file headers (`e_type` = `ET_EXEC` or `ET_DYN`) to note that the executable
+/// file was built to conform to the hardware floating-point procedure-call standard.
+///
+/// Compatible with legacy (pre version 5) gcc use as EF_ARM_VFP_FLOAT.
+pub const EF_ARM_ABI_FLOAT_HARD: u32 = 0x00000400;
+/// Set in executable file headers (`e_type` = `ET_EXEC` or `ET_DYN`) to note explicitly that the
+/// executable file was built to conform to the software floating-point procedure-call standard (the
+/// base standard). If both `EF_ARM_ABI_FLOAT_XXXX` bits are clear, conformance to the base
+/// procedure-call standard is implied.
+///
+/// Compatible with legacy (pre version 5) gcc use as EF_ARM_SOFT_FLOAT.
+pub const EF_ARM_ABI_FLOAT_SOFT: u32 = 0x00000200;
+
+trait ElfHeaderExt {
+    /// If this ELF header provides Arm extensions, return an `ArmElfHeader`.
+    fn arm(&self) -> Option<ArmElfHeader>;
+}
+
+macro_rules! header {
+    ($t:ty) => {
+        impl ElfHeaderExt for $t {
+            fn arm(&self) -> Option<ArmElfHeader> {
+                if self.e_machine == EM_ARM {
+                    Some(ArmElfHeader {
+                        e_entry_mod_4: (self.e_entry % 4) as u8,
+                        e_flags: self.e_flags,
+                    })
+                } else {
+                    None
+                }
+            }
+        }
+    };
+}
+
+#[cfg(std)]
+header!(super::Header);
+header!(super::header::header32::Header);
+header!(super::header::header64::Header);
+
+/// Arm extensions to the ELF header, as documented in [ELF for the Arm Architecture] § 5.2.
+///
+/// [ELF for the Arm Architecture]: https://developer.arm.com/documentation/ihi0044/h/?lang=en
+#[derive(Debug, Copy, Clone)]
+pub struct ArmElfHeader {
+    e_entry_mod_4: u8,
+    e_flags: u32,
+}
+
+impl ArmElfHeader {
+    /// The ABI version, if present.
+    pub fn abi_version(&self) -> Option<NonZeroU8> {
+        NonZeroU8::new(((self.e_flags & EF_ARM_ABIMASK) >> 24) as u8)
+    }
+
+    /// To what kind of machine code does `e_entry` pointer point?
+    pub fn entrypoint_contents(&self) -> EntrypointContents {
+        match self.e_entry_mod_4 {
+            0 => EntrypointContents::Arm,
+            1 | 3 => EntrypointContents::Thumb,
+            _ => EntrypointContents::Reserved,
+        }
+    }
+
+    /// Is this explicitly using the hardware floating-point calling convention?
+    ///
+    /// ABI v5 specifies that this flag is set in executable file headers (`e_type` = `ET_EXEC` or
+    /// `ET_DYN`) to note that the executable file was built to conform to the hardware
+    /// floating-point procedure-call standard.
+    ///
+    /// Previous standards used `EF_ARM_VFP_FLOAT` which maps to this same field.
+    ///
+    /// If neither `is_hard_float()` nor `is_soft_float()` is true, one may reasonably assume that
+    /// the executable conforms to the software floating-point procedure-call standard, since the
+    /// software standard is the base standard.
+    pub fn is_hard_float(&self) -> bool {
+        (self.e_flags & EF_ARM_ABI_FLOAT_HARD) == EF_ARM_ABI_FLOAT_HARD
+    }
+
+    /// Is this explicitly using the software floating-point calling convention?
+    ///
+    /// ABI v5 specifies that this flag is set in executable file headers (`e_type` = `ET_EXEC` or
+    /// `ET_DYN`) to note that the executable file was built to conform to the software
+    /// floating-point procedure-call standard, i.e. the base standard.
+    ///
+    /// Previous standards used `EF_ARM_SOFT_FLOAT` which maps to this same field.
+    ///
+    /// If neither `is_hard_float()` nor `is_soft_float()` is true, one may reasonably assume that
+    /// the executable conforms to the software floating-point procedure-call standard, since the
+    /// software standard is the base standard.
+    pub fn is_soft_float(&self) -> bool {
+        (self.e_flags & EF_ARM_ABI_FLOAT_SOFT) == EF_ARM_ABI_FLOAT_SOFT
+    }
+
+    /// Does this executable file contain BE-8 code?
+    pub fn contains_be8_code(&self) -> bool {
+        (self.e_flags & EF_ARM_BE8) == EF_ARM_BE8
+    }
+}
+
+/// The kind of machine code present at the `e_entry` code pointer.
+///
+/// Reference: [ELF for the Arm Architecture] § 5.2.
+///
+/// [ELF for the Arm Architecture]: https://developer.arm.com/documentation/ihi0044/h/?lang=en
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub enum EntrypointContents {
+    /// The entrypoint contains Arm code.
+    Arm,
+    /// The entrypoint contains Thumb code.
+    Thumb,
+    /// This value is reserved.
+    Reserved,
+}
+
+// Table 5.3: Table 4-4, Processor specific section types
+/// Exception Index table
+pub const SHT_ARM_EXIDX: u32 = 0x70000001;
+/// BPABI DLL dynamic linking pre-emption map
+pub const SHT_ARM_PREEMPTMAP: u32 = 0x70000002;
+/// Object file compatibility attributes
+pub const SHT_ARM_ATTRIBUTES: u32 = 0x70000003;
+pub const SHT_ARM_DEBUGOVERLAY: u32 = 0x70000004;
+pub const SHT_ARM_OVERLAYSECTION: u32 = 0x70000005;
+
+// Table 5.4: Table 4-5, Processor specific section attribute flags
+/// The contents of this section contains only program instructions and no program data.
+pub const SHF_ARM_PURECODE: u32 = 0x20000000;
+
+/// A kind of Arm special section, as documented in [ELF for the Arm Architecture] § 5.3.4.
+///
+/// [ELF for the Arm Architecture]: https://developer.arm.com/documentation/ihi0044/h/?lang=en
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub enum ArmSpecialSection {
+    IndexForExceptionUnwinding,
+    ExceptionUnwindingTable,
+    PreemptionMap,
+    BuildAttributes,
+    DebugOverlay,
+    OverlayTable,
+}
+
+impl ArmSpecialSection {
+    fn from_sh_type_and_name(sh_type: u32, name: &str) -> Option<Self> {
+        const SHT_PROGBITS: u32 = 1;
+
+        // Table 4-6, Arm special sections
+        Some(match (name, sh_type) {
+            (_, SHT_ARM_EXIDX) if name.starts_with(".ARM.exidx") => {
+                Self::IndexForExceptionUnwinding
+            }
+            (_, SHT_PROGBITS) if name.starts_with(".ARM.extab") => Self::ExceptionUnwindingTable,
+            (".ARM.preemptmap", SHT_ARM_PREEMPTMAP) => Self::PreemptionMap,
+            (".ARM.attributes", SHT_ARM_ATTRIBUTES) => Self::BuildAttributes,
+            ("ARM.debug_overlay", SHT_ARM_DEBUGOVERLAY) => Self::DebugOverlay,
+            ("ARM.overlay_table", SHT_ARM_OVERLAYSECTION) => Self::OverlayTable,
+            _ => return None,
+        })
+    }
+}
+
+pub trait SectionExt {
+    /// Which kind of Arm special section this header describes, if any.
+    ///
+    /// Look up `sh_name` from a `Strtab` using whatever error handling technique is most
+    /// appropriate for your application and pass in as `name`.
+    fn arm_special_section(&self, name: &str) -> Option<ArmSpecialSection>;
+}
+
+macro_rules! section_header {
+    ($t:ty) => {
+        impl SectionExt for $t {
+            fn arm_special_section(&self, name: &str) -> Option<ArmSpecialSection> {
+                ArmSpecialSection::from_sh_type_and_name(self.sh_type, name)
+            }
+        }
+    };
+}
+
+#[cfg(std)]
+section_header!(super::section_header::SectionHeader);
+section_header!(super::section_header::section_header32::SectionHeader);
+section_header!(super::section_header::section_header64::SectionHeader);
+
+pub trait ElfExt {
+    /// Retrieve the `aeabi` build attributes.
+    fn aeabi<'a>(&self, bytes: &'a [u8]) -> Result<Aeabi<'a>, AeabiError>;
+}
+
+pub enum AeabiError {
+    /// The ELF header indicates this is not an Arm executable.
+    NotArmHeader,
+    /// This executable does not contain a build attributes section.
+    NoBuildAttributesSection,
+    /// The build attributes section header refers to a portion of the executable which does not
+    /// exist.
+    SectionHeaderOutOfRange,
+    /// The build attributes section contains invalid data.
+    InvalidBuildAttributes(super::build_attributes::Error),
+}
+
+#[cfg(std)]
+impl ElfExt for super::Elf<'_> {
+    fn aeabi<'a>(&self, bytes: &'a [u8]) -> Result<Aeabi<'a>, AeabiError> {
+        let endianness = self
+            .header
+            .endianness()
+            .expect("endianness() must succeed after parsing");
+
+        let _arm_header = self.header.arm().ok_or(AeabiError::NotArmHeader)?;
+        let build_attributes_section = self
+            .section_headers
+            .iter()
+            .find(|h| {
+                if let Some(Ok(name)) = self.strtab.get(h.sh_name) {
+                    h.arm_special_section(name) == ArmSpecialSection::BuildAttributes
+                } else {
+                    false
+                }
+            })
+            .ok_or(AeabiError::NoBuildAttributesSection)?;
+
+        let build_attributes = match (
+            usize::try_from(build_attributes_section.sh_offset).ok(),
+            build_attributes_section
+                .sh_offset
+                .checked_add(build_attributes_section.sh_size)
+                .and_then(|end| usize::try_from(end).ok())
+                .filter(|end| *end < bytes.len()),
+        ) {
+            (Some(start), Some(end)) => &bytes[start..end],
+            _ => return Err(AeabiError::SectionHeaderOutOfRange),
+        };
+
+        let build_attributes = super::build_attributes::Section::new(build_attributes, endianness)
+            .map_err(|e| AeabiError::InvalidBuildAttributes(e.into()))?;
+
+        Aeabi::try_from(build_attributes).map_err(AeabiError::InvalidBuildAttributes)
+    }
+}
diff --git a/src/elf/build_attributes.rs b/src/elf/build_attributes.rs
new file mode 100644
index 00000000..9a772108
--- /dev/null
+++ b/src/elf/build_attributes.rs
@@ -0,0 +1,841 @@
+//! Implements build attributes used by various toolchains to describe architecture-specific
+//! metadata.
+//!
+//! This implementation was written following [ELF for the Arm Architecture] § 5.3.6, but the
+//! structure is identical elsewhere.
+//!
+//! [ELF for the Arm Architecture]: https://developer.arm.com/documentation/ihi0044/h/?lang=en
+
+use core::convert::TryFrom;
+use core::iter::FusedIterator;
+use core::str::Utf8Error;
+use scroll::{Pread, Uleb128};
+
+/// A build attributes section.
+pub struct Section<'a>(&'a [u8], scroll::Endian);
+
+impl<'a> Section<'a> {
+    /// Instantiate a `Section` from the bytes of a build attributes section.
+    ///
+    /// `endianness` must match the ELF header, i.e. `elf::Header::endianness()`.
+    pub fn new(
+        section_bytes: &'a [u8],
+        endianness: scroll::Endian,
+    ) -> Result<Self, NewSectionError> {
+        match section_bytes.get(0) {
+            Some(b'A') => Ok(Section(&section_bytes[1..], endianness)),
+            Some(other) => Err(NewSectionError::UnknownFormat(*other)),
+            None => Err(NewSectionError::EmptySection),
+        }
+    }
+
+    pub fn subsections(&self) -> SectionIter<'a> {
+        SectionIter(self.0, 0, self.1)
+    }
+}
+
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub enum NewSectionError {
+    /// The section was empty.
+    EmptySection,
+    /// The section contained an unknown format, identified by this `u8`.
+    UnknownFormat(u8),
+}
+
+impl<'a> IntoIterator for Section<'a> {
+    type Item = Result<Subsection<'a>, SectionIterError>;
+    type IntoIter = SectionIter<'a>;
+
+    fn into_iter(self) -> Self::IntoIter {
+        self.subsections()
+    }
+}
+
+impl<'a> IntoIterator for &'_ Section<'a> {
+    type Item = Result<Subsection<'a>, SectionIterError>;
+    type IntoIter = SectionIter<'a>;
+
+    fn into_iter(self) -> Self::IntoIter {
+        self.subsections()
+    }
+}
+
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub enum SectionIterError {
+    /// The subsection at `offset` could not be parsed because the section data unexpectedly ended.
+    UnexpectedEof { offset: usize },
+    /// The subsection at `offset` specifies its length as `subsection_len`, while the slice is
+    /// `len` bytes long.
+    InvalidLength {
+        offset: usize,
+        len: usize,
+        subsection_len: u32,
+    },
+    /// The subsection at `offset` is invalid and cannot be parsed.
+    InvalidSubsection { offset: usize },
+}
+
+/// An iterator over a `Section`'s contents.
+#[derive(Debug)]
+pub struct SectionIter<'a>(&'a [u8], usize, scroll::Endian);
+
+impl<'a> FusedIterator for SectionIter<'a> {}
+impl<'a> Iterator for SectionIter<'a> {
+    type Item = Result<Subsection<'a>, SectionIterError>;
+
+    fn next(&mut self) -> Option<Self::Item> {
+        if self.1 >= self.0.len() {
+            return None;
+        }
+
+        let result = {
+            // Read the length
+            self.0
+                .pread_with::<u32>(self.1, self.2)
+                .map_err(|_| SectionIterError::UnexpectedEof { offset: self.1 })
+                .and_then(|len| {
+                    // Figure out and validate the end
+                    self.1
+                        .checked_add(len as usize)
+                        .filter(|end| *end > 4)
+                        .filter(|end| *end <= self.0.len())
+                        .ok_or(SectionIterError::InvalidLength {
+                            offset: self.1,
+                            len: self.0.len(),
+                            subsection_len: len,
+                        })
+                })
+                // Get the subsection slice
+                .map(|end| {
+                    let start = self.1 + 4;
+                    self.1 = end;
+                    &self.0[start..end]
+                })
+                .and_then(|slice| {
+                    // Map it to a Subsection
+                    Subsection::new(slice, self.2)
+                        .map_err(|_| SectionIterError::InvalidSubsection { offset: self.1 })
+                })
+        };
+
+        if result.is_err() {
+            // Break the iterator
+            self.1 = self.0.len();
+        }
+
+        Some(result)
+    }
+}
+
+trait SliceExt {
+    fn split_at_nul(&self) -> (Self, Option<Self>)
+    where
+        Self: core::marker::Sized;
+}
+
+impl<'a> SliceExt for &'a [u8] {
+    fn split_at_nul(&self) -> (Self, Option<Self>) {
+        let mut iter = self.splitn(2, |b| *b == 0);
+        (iter.next().unwrap(), iter.next())
+    }
+}
+
+/// A sequence of attributes defined by a particular vendor.
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub struct Subsection<'a> {
+    vendor_name: &'a [u8],
+    tags: &'a [u8],
+    endianness: scroll::Endian,
+}
+
+impl<'a> Subsection<'a> {
+    fn new(bytes: &'a [u8], endianness: scroll::Endian) -> Result<Self, ()> {
+        let (vendor_name, tags) = bytes.split_at_nul();
+        tags.map(|tags| Self {
+            vendor_name,
+            tags,
+            endianness,
+        })
+        .ok_or(())
+    }
+
+    /// The vendor which defined this subsection.
+    pub fn vendor_name(&self) -> &[u8] {
+        self.vendor_name
+    }
+
+    /// Iterate over the tags inside this subsection.
+    pub fn tags(&self) -> SubsectionIter<'a> {
+        SubsectionIter(self.tags, 0, self.endianness)
+    }
+}
+
+impl<'a> IntoIterator for Subsection<'a> {
+    type Item = Result<Group<'a>, SubsectionIterError>;
+    type IntoIter = SubsectionIter<'a>;
+
+    fn into_iter(self) -> Self::IntoIter {
+        self.tags()
+    }
+}
+
+impl<'a> IntoIterator for &'_ Subsection<'a> {
+    type Item = Result<Group<'a>, SubsectionIterError>;
+    type IntoIter = SubsectionIter<'a>;
+
+    fn into_iter(self) -> Self::IntoIter {
+        self.tags()
+    }
+}
+
+/// An iterator over a `Subsection`'s contents.
+#[derive(Debug)]
+pub struct SubsectionIter<'a>(&'a [u8], usize, scroll::Endian);
+
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+enum TagKind {
+    File,
+    Section,
+    Symbol,
+}
+impl TryFrom<u8> for TagKind {
+    type Error = SubsectionIterError;
+
+    fn try_from(value: u8) -> Result<Self, Self::Error> {
+        match value {
+            1 => Ok(TagKind::File),
+            2 => Ok(TagKind::Section),
+            3 => Ok(TagKind::Symbol),
+            other => Err(SubsectionIterError::UnrecognizedKind(other)),
+        }
+    }
+}
+
+impl<'a> FusedIterator for SubsectionIter<'a> {}
+impl<'a> Iterator for SubsectionIter<'a> {
+    type Item = Result<Group<'a>, SubsectionIterError>;
+
+    fn next(&mut self) -> Option<Self::Item> {
+        let result = match self.0.get(self.1).map(|num| TagKind::try_from(*num)) {
+            Some(Ok(kind)) => {
+                // Read the size following the tag
+                self.0
+                    .pread_with::<u32>(self.1 + 1, self.2)
+                    .map_err(SubsectionIterError::SizeParseError)
+                    .and_then(|size| {
+                        // Convert the size to a u64
+                        usize::try_from(size)
+                            // Drop the existing error
+                            .ok()
+                            // Ensure it's at least the 1 byte (tag) + 4 bytes (size) already read
+                            .filter(|end| *end >= 5)
+                            // Add it to the start of the tag
+                            .and_then(|size| size.checked_add(self.1))
+                            // Ensure it's within the slice bounds
+                            .filter(|end| *end <= self.0.len())
+                            // Turn failures into an error
+                            .ok_or(SubsectionIterError::SizeTooBig {
+                                offset: self.1,
+                                length: self.0.len(),
+                                tag_size: size,
+                            })
+                    })
+                    .map(|end| {
+                        // Success!
+                        // Make the slice
+                        let start = self.1 + 5;
+                        let slice = &self.0[start..end];
+                        // Update the cursor
+                        self.1 = end;
+                        // Make the Tag
+                        match kind {
+                            TagKind::File => Group::File(FileGroup(slice)),
+                            TagKind::Section => Group::Section(SectionGroup(slice)),
+                            TagKind::Symbol => Group::Symbol(SymbolGroup(slice)),
+                        }
+                    })
+            }
+            Some(Err(err)) => Err(err),
+            None => return None,
+        };
+
+        if result.is_err() {
+            // Kill the iterator
+            self.1 = self.0.len();
+        }
+
+        Some(result)
+    }
+}
+
+#[derive(Debug)]
+pub enum SubsectionIterError {
+    UnrecognizedKind(u8),
+    SizeParseError(scroll::Error),
+    SizeTooBig {
+        offset: usize,
+        length: usize,
+        tag_size: u32,
+    },
+}
+
+/// A group of attributes, applying to all or a part of this executable file.
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub enum Group<'a> {
+    /// A group of attributes applying to the entire file.
+    File(FileGroup<'a>),
+    /// A group of attributes applying to specific ELF sections.
+    Section(SectionGroup<'a>),
+    /// A group of attributes applying to specific symbols.
+    Symbol(SymbolGroup<'a>),
+}
+
+/// A group of attributes applying to the entire file.
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub struct FileGroup<'a>(&'a [u8]);
+
+impl<'a> FileGroup<'a> {
+    pub fn attributes(&self) -> Attributes<'a> {
+        Attributes(self.0)
+    }
+}
+
+/// A group of attributes applying to specific ELF sections.
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub struct SectionGroup<'a>(&'a [u8]);
+
+impl<'a> SectionGroup<'a> {
+    /// Iterate over the group, returning the sections to which this group applies followed by the
+    /// attributes themselves.
+    pub fn iter(&self) -> SectionGroupIter<'a> {
+        SectionGroupIter(self.0, 0)
+    }
+
+    /// Return the section numbers for this group, discarding errors and discarding attributes.
+    pub fn section_numbers(&self) -> impl Iterator<Item = u64> + 'a {
+        self.iter().filter_map(|i| match i {
+            Ok(SectionGroupItem::SectionNumber(n)) => Some(n),
+            _ => None,
+        })
+    }
+
+    /// Return the attributes for this group, discarding errors and discarding section numbers.
+    pub fn attributes(&self) -> Option<Attributes<'a>> {
+        self.iter()
+            .filter_map(|i| match i {
+                Ok(SectionGroupItem::Attributes(a)) => Some(a),
+                _ => None,
+            })
+            .next()
+    }
+}
+
+impl<'a> IntoIterator for SectionGroup<'a> {
+    type Item = Result<SectionGroupItem<'a>, GroupIterError>;
+    type IntoIter = SectionGroupIter<'a>;
+
+    fn into_iter(self) -> Self::IntoIter {
+        self.iter()
+    }
+}
+impl<'a> IntoIterator for &'_ SectionGroup<'a> {
+    type Item = Result<SectionGroupItem<'a>, GroupIterError>;
+    type IntoIter = SectionGroupIter<'a>;
+
+    fn into_iter(self) -> Self::IntoIter {
+        self.iter()
+    }
+}
+
+#[derive(Debug)]
+pub enum GroupIterError {
+    InvalidNumber(scroll::Error),
+}
+
+/// An iterator over a `SectionGroup`'s contents.
+pub struct SectionGroupIter<'a>(&'a [u8], usize);
+
+impl<'a> FusedIterator for SectionGroupIter<'a> {}
+impl<'a> Iterator for SectionGroupIter<'a> {
+    type Item = Result<SectionGroupItem<'a>, GroupIterError>;
+
+    fn next(&mut self) -> Option<Self::Item> {
+        if self.1 >= self.0.len() {
+            return None;
+        }
+
+        Some(
+            Uleb128::read(self.0, &mut self.1)
+                .map(|value| {
+                    if value == 0 {
+                        // This is the terminator
+                        // Get the rest of the bytes
+                        let rest = &self.0[self.1..];
+                        // Break the iterator
+                        self.1 = self.0.len();
+                        // Return it as attributes
+                        SectionGroupItem::Attributes(Attributes(rest))
+                    } else {
+                        // Normal value
+                        SectionGroupItem::SectionNumber(value)
+                    }
+                })
+                .map_err(|e| {
+                    // Break the iterator
+                    self.1 = self.0.len();
+                    // Return the error
+                    GroupIterError::InvalidNumber(e)
+                }),
+        )
+    }
+}
+
+/// An item contained by a `SectionGroup`.
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub enum SectionGroupItem<'a> {
+    /// A section number to which this `SectionGroup` applies.
+    SectionNumber(u64),
+    /// The set of attributes which applies to these sections.
+    Attributes(Attributes<'a>),
+}
+
+/// A group of attributes applying to specific symbols.
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub struct SymbolGroup<'a>(&'a [u8]);
+
+impl<'a> SymbolGroup<'a> {
+    /// Iterate over the group, returning the symbols to which this group applies followed by the
+    /// attributes themselves.
+    pub fn iter(&self) -> SymbolGroupIter<'a> {
+        SymbolGroupIter(SectionGroupIter(self.0, 0))
+    }
+
+    /// Return the symbol numbers for this group, discarding errors and discarding attributes.
+    pub fn section_numbers(&self) -> impl Iterator<Item = u64> + 'a {
+        self.iter().filter_map(|i| match i {
+            Ok(SymbolGroupItem::SymbolNumber(n)) => Some(n),
+            _ => None,
+        })
+    }
+
+    /// Return the attributes for this group, discarding errors and discarding symbol numbers.
+    pub fn attributes(&self) -> Option<Attributes<'a>> {
+        self.iter()
+            .filter_map(|i| match i {
+                Ok(SymbolGroupItem::Attributes(a)) => Some(a),
+                _ => None,
+            })
+            .next()
+    }
+}
+
+impl<'a> IntoIterator for SymbolGroup<'a> {
+    type Item = Result<SymbolGroupItem<'a>, GroupIterError>;
+    type IntoIter = SymbolGroupIter<'a>;
+
+    fn into_iter(self) -> Self::IntoIter {
+        self.iter()
+    }
+}
+impl<'a> IntoIterator for &'_ SymbolGroup<'a> {
+    type Item = Result<SymbolGroupItem<'a>, GroupIterError>;
+    type IntoIter = SymbolGroupIter<'a>;
+
+    fn into_iter(self) -> Self::IntoIter {
+        self.iter()
+    }
+}
+
+/// An iterator over a `SymbolGroup`'s contents.
+pub struct SymbolGroupIter<'a>(
+    // Symbol groups are equivalent to section groups except what we call the enum discriminant
+    // Implement it as such
+    SectionGroupIter<'a>,
+);
+
+impl<'a> FusedIterator for SymbolGroupIter<'a> {}
+impl<'a> Iterator for SymbolGroupIter<'a> {
+    type Item = Result<SymbolGroupItem<'a>, GroupIterError>;
+
+    fn next(&mut self) -> Option<Self::Item> {
+        match self.0.next() {
+            Some(Ok(SectionGroupItem::SectionNumber(n))) => {
+                Some(Ok(SymbolGroupItem::SymbolNumber(n)))
+            }
+            Some(Ok(SectionGroupItem::Attributes(a))) => Some(Ok(SymbolGroupItem::Attributes(a))),
+            Some(Err(e)) => Some(Err(e)),
+            None => None,
+        }
+    }
+}
+
+/// An item contained by a `SymbolGroup`.
+pub enum SymbolGroupItem<'a> {
+    /// A symbol number to which this `SymbolGroup` applies.
+    SymbolNumber(u64),
+    /// The set of attributes which applies to these symbols.
+    Attributes(Attributes<'a>),
+}
+
+/// An unparsed set of attributes.
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub struct Attributes<'a>(&'a [u8]);
+
+impl<'a> Attributes<'a> {
+    /// Consume `Attributes`, returning an `UnparsedAttribute` .
+    pub(crate) fn next(self) -> Option<Result<SemiParsedAttribute<'a>, AttributeParseError>> {
+        if self.0.is_empty() {
+            None
+        } else {
+            let mut offset = 0;
+            Some(
+                Uleb128::read(self.0, &mut offset)
+                    .map_err(AttributeParseError::TagParseError)
+                    .map(|tag_number| SemiParsedAttribute(tag_number, &self.0[offset..])),
+            )
+        }
+    }
+}
+
+/// A tag number, followed by its unparsed payload and subsequent attributes.
+pub(crate) struct SemiParsedAttribute<'a>(u64, &'a [u8]);
+
+impl<'a> SemiParsedAttribute<'a> {
+    pub fn tag_number(&self) -> u64 {
+        self.0
+    }
+
+    /// Return an error indicating this tag is unrecognized.
+    pub(crate) fn unrecognized(&self) -> AttributeParseError {
+        AttributeParseError::UnknownTag(self.0)
+    }
+
+    /// Parse a NUL-terminated byte string, returning subsequent attributes.
+    pub(crate) fn parse_ntbs(&self) -> Result<(&'a [u8], Attributes<'a>), AttributeParseError> {
+        let (str, rest) = self.1.split_at_nul();
+        rest.map(|rest| (str, Attributes(rest)))
+            .ok_or(AttributeParseError::MissingNulTerminator(self.0))
+    }
+
+    /// Parse a ULEB 128, returning subsequent attributes.
+    pub(crate) fn parse_uleb128(&self) -> Result<(u64, Attributes<'a>), AttributeParseError> {
+        let mut offset = 0;
+        Uleb128::read(self.1, &mut offset)
+            .map(|value| (value, Attributes(&self.1[offset..])))
+            .map_err(|_| AttributeParseError::InvalidUleb128(self.0))
+    }
+
+    /// Parse a ULEB 128 followed by a NUL-terminated byte string, returning subsequent attributes.
+    pub(crate) fn parse_uleb128_ntbs(
+        &self,
+    ) -> Result<(u64, &'a [u8], Attributes<'a>), AttributeParseError> {
+        // Read the ULEB128
+        let mut offset = 0;
+        let flag = Uleb128::read(self.1, &mut offset)
+            .map_err(|_| AttributeParseError::InvalidUleb128(self.0))?;
+
+        // Read the NTBS
+        let rest = &self.1[offset..];
+        let (str, rest) = rest.split_at_nul();
+        rest.map(|rest| (flag, str, Attributes(rest)))
+            .ok_or(AttributeParseError::MissingNulTerminator(self.0))
+    }
+}
+
+#[derive(Debug)]
+pub enum AttributeParseError {
+    /// The attribute tag could not be parsed
+    TagParseError(scroll::Error),
+    /// The attribute tag was not recognized
+    UnknownTag(u64),
+    /// The attribute with this tag number is NUL-terminated but does not have a NUL terminator.
+    MissingNulTerminator(u64),
+    /// The attribute with this tag number contains an invalid ULEB-128 encoded parameter.
+    InvalidUleb128(u64),
+}
+
+/// An opaque unknown value.
+///
+/// Tag enumerations are all `#[non_exhaustive]`, and they all have an `Unknown(UnknownValue)`
+/// variant to allow the tag enumeration to contain every value even if it cannot articulate every
+/// value. The `UnknownValue` type is opaque to discourage matching on this `Unknown` variant.
+///
+/// Instead of explicitly matching `Unknown`, use the fall-through forced by `#[non_exhaustive]` to
+/// match all values not recognized by your application together:
+///
+/// ```
+/// # use goblin::elf::build_attributes::aeabi::*;
+/// # let abi_fp_rounding = AbiFpRounding::from(123);
+/// match abi_fp_rounding {
+///     AbiFpRounding::ChosenAtRuntime => {
+///         /* case A */
+///     },
+///     AbiFpRounding::RoundToNearest => {
+///         /* case B */
+///     },
+///     other => {
+///         /* case forced by #[non_exhaustive] */
+///         /* if you must discriminate further, use `u64::from(other)` to access the raw value */
+///     },
+/// }
+/// ```
+///
+/// This pattern allows future versions of `goblin` to add variants to existing enumerations without
+/// breaking source compatibility. If e.g. `AbiFpRounding::RoundToZero = 2` was defined in a
+/// subsequent revision, it would be fall into `other` and be handled by your application the same
+/// way, even as a `goblin` update changes its modeling from `AbiFpRounding::Unknown(2)` to
+/// `AbiFpRounding::RoundToZero`.
+#[derive(Debug, Copy, Clone, Eq, PartialEq)]
+pub struct UnknownValue(pub(crate) u64);
+
+/// An error which occurred while parsing some kind of build attributes data structure.
+#[derive(Debug)]
+pub enum Error {
+    /// The requested vendor subsection was not found.
+    VendorNotFound,
+    /// An error occurred while iterating over a `Section`.
+    Section(SectionIterError),
+    /// An error occurred while iterating over a `Subsection`.
+    Subsection(SubsectionIterError),
+    /// An error occurred while parsing `Attributes`.
+    Attributes(AttributeParseError),
+}
+
+impl From<SectionIterError> for Error {
+    fn from(e: SectionIterError) -> Self {
+        Self::Section(e)
+    }
+}
+impl From<SubsectionIterError> for Error {
+    fn from(e: SubsectionIterError) -> Self {
+        Self::Subsection(e)
+    }
+}
+impl From<AttributeParseError> for Error {
+    fn from(e: AttributeParseError) -> Self {
+        Self::Attributes(e)
+    }
+}
+
+macro_rules! build_attributes {
+    (
+    $(#[$outer_meta:meta])*
+    $t:ident {
+        vendor_name: $vendor_name:literal
+        unknown_tag: $unknown_tag_var:ident => { $unknown_tag_expr:expr }
+        $(
+            $(#[$field_meta:meta])*
+            [$n:ident, (= $tag:literal), $(#[$typ_meta:meta])* $typ:tt $($rest:tt)*]
+        )+
+    }) => {
+        // Define all the types
+        $(
+        build_attributes!(@define_type(
+            $(#[$typ_meta])* $typ $($rest)*
+        ));
+        )+
+
+        // Define the main struct
+        $(#[$outer_meta])*
+        #[derive(Debug, Copy, Clone, Eq, PartialEq, Default)]
+        #[non_exhaustive]
+        pub struct $t<'a> {
+            // Define all the fields
+            $(
+            $(#[$field_meta])*
+            pub $n: Option<build_attributes!(@field_type($typ $($rest)*))>,
+            )+
+        }
+
+        #[allow(deprecated)]
+        impl<'a> $t<'a> {
+            fn new() -> Self {
+                Self {
+                    $($n: Default::default(),)+
+                }
+            }
+
+            /// Parse `Attributes`, merging it into this object.
+            fn parse(&mut self, mut attrs: Attributes<'a>) -> Result<(), AttributeParseError> {
+                while let Some(attr) = attrs.next() {
+                    let attr = attr?;
+                    match attr.tag_number() {
+                        $(
+                        $tag => {
+                            let (value, rest) = $typ::parse(attr)?;
+                            self.$n = Some(value);
+                            attrs = rest;
+                        },
+                        )+
+                        _ => {
+                            // unknown tag
+                            let $unknown_tag_var = attr;
+                            attrs = $unknown_tag_expr;
+                        },
+                    }
+                }
+                Ok(())
+            }
+
+            /// The byte string which identifies this vendor section.
+            pub const VENDOR_NAME: &'static [u8] = $vendor_name;
+        }
+
+        impl<'a> core::convert::TryFrom<Attributes<'a>> for $t<'a> {
+            type Error = AttributeParseError;
+
+            fn try_from(attrs: Attributes<'a>) -> Result<Self, Self::Error> {
+                let mut vendor = Self::new();
+                vendor.parse(attrs)?;
+                Ok(vendor)
+            }
+        }
+
+        impl<'a> core::convert::TryFrom<Section<'a>> for $t<'a> {
+            type Error = Error;
+
+            fn try_from(section: Section<'a>) -> Result<Self, Self::Error> {
+                for subsection in section {
+                    let subsection = subsection?;
+                    if subsection.vendor_name() != $t::VENDOR_NAME {
+                        continue;
+                    }
+                    for group in subsection {
+                        match group? {
+                            Group::File(g) => {
+                                return $t::try_from(g.attributes()).map_err(|e| e.into())
+                            }
+                            _ => {},
+                        }
+                    }
+                }
+                Err(Error::VendorNotFound)
+            }
+        }
+
+        impl<'a> core::ops::Add<Attributes<'a>> for $t<'a> {
+            type Output = Result<Self, AttributeParseError>;
+
+            fn add(self, attrs: Attributes<'a>) -> Self::Output {
+                let mut vendor = self.clone();
+                vendor.parse(attrs)?;
+                Ok(vendor)
+            }
+        }
+    };
+
+    (@field_type($t:tt(NTBS) )) => { $t<'a> };
+    (@field_type($t:tt { $($rest:tt)* } )) => { $t };
+
+    (@define_type($(#[$typ_meta:meta])* $t:tt(NTBS) )) => {
+        $(#[$typ_meta:meta])*
+        #[derive(Debug, Copy, Clone, Eq, PartialEq)]
+        pub struct $t<'a>(&'a [u8]);
+
+        impl<'a> $t<'a> {
+            fn parse(attr: SemiParsedAttribute<'a>) -> Result<(Self, Attributes<'a>), AttributeParseError> {
+                let (value, rest) = attr.parse_ntbs()?;
+                Ok((Self(value), rest))
+            }
+
+            /// Return the value as a `&[u8]`.
+            pub fn as_bytes(&self) -> &'a [u8] {
+                self.0
+            }
+
+            /// Return the value as a `&str`, provided it is encoded as UTF-8.
+            pub fn as_str(&self) -> Result<&'a str, Utf8Error> {
+                core::str::from_utf8(self.0)
+            }
+
+            /// Return the value as a `Cow<str>`, discarding invalid UTF-8.
+            #[cfg(std)]
+            pub fn to_string_lossy(&self) -> Cow<'a, str> {
+                String::from_utf8_lossy(self.0)
+            }
+        }
+
+        impl<'a> AsRef<[u8]> for $t<'a> {
+            fn as_ref(&self) -> &[u8] {
+                self.0
+            }
+        }
+
+        impl<'a> From<&'a [u8]> for $t<'a> {
+            fn from(bytes: &'a [u8]) -> Self {
+                Self(bytes)
+            }
+        }
+
+        impl<'a> From<$t<'a>> for &'a [u8] {
+            fn from(v: $t<'a>) -> Self {
+                v.0
+            }
+        }
+    };
+
+    (@define_type($(#[$typ_meta:meta])* $t:tt {
+        $(
+        $(#[$variant_meta:meta])*
+        $value:literal => $variant:tt,
+        )+
+    })) => {
+        $(#[$typ_meta:meta])*
+        #[derive(Debug, Copy, Clone, Eq, PartialEq)]
+        #[non_exhaustive]
+        pub enum $t {
+            $(
+            $(#[$variant_meta])*
+            $variant,
+            )+
+            /// A numeric value with unknown meaning.
+            ///
+            /// Avoid matching `Unknown`. See [`UnknownValue`] for details.
+            ///
+            /// [`UnknownValue`]: ../struct.UnknownValue.html
+            #[deprecated(note = "Avoid matching Unknown; this enum is non-exhaustive")]
+            Unknown(UnknownValue),
+        }
+
+        impl $t {
+            fn parse<'a>(attr: SemiParsedAttribute<'a>) -> Result<(Self, Attributes<'a>), AttributeParseError> {
+                let (value, rest) = attr.parse_uleb128()?;
+                Ok((Self::from(value), rest))
+            }
+        }
+
+        impl Default for $t {
+            fn default() -> Self {
+                Self::from(0u64)
+            }
+        }
+
+        impl From<u64> for $t {
+            #[allow(deprecated)]
+            fn from(value: u64) -> Self {
+                match value {
+                    $($value => Self::$variant,)+
+                    other => Self::Unknown(UnknownValue(other)),
+                }
+            }
+        }
+
+        impl From<$t> for u64 {
+            #[allow(deprecated)]
+            fn from(value: $t) -> u64 {
+                match value {
+                    $($t::$variant => $value,)+
+                    $t::Unknown(UnknownValue(value)) => value,
+                }
+            }
+        }
+
+        impl From<&'_ $t> for u64 {
+            fn from(value: &'_ $t) -> u64 {
+                u64::from(*value)
+            }
+        }
+    };
+}
+
+pub mod aeabi;
diff --git a/src/elf/build_attributes/aeabi.rs b/src/elf/build_attributes/aeabi.rs
new file mode 100644
index 00000000..347d648d
--- /dev/null
+++ b/src/elf/build_attributes/aeabi.rs
@@ -0,0 +1,667 @@
+//! Types for Arm public tags in the `aeabi` build attributes section.
+//!
+//! These tags are defined by [Addenda to, and Errata in, the ABI for the Arm® Architecture].
+//!
+//! [Addenda to, and Errata in, the ABI for the Arm® Architecture]: https://github.com/ARM-software/abi-aa/blob/master/addenda32/addenda32.rst#public-aeabi-attribute-tags
+
+use super::*;
+
+build_attributes!(
+/// A set of Arm embedded ABI properties.
+Aeabi {
+    vendor_name: b"aeabi"
+    unknown_tag: attr => {
+        // Spec says:
+        //
+        // Tags 0-63 convey information that a consuming tool must comprehend. This includes all the
+        // tags (1-32) defined by the first release (v1.0) of this addendum. A tool encountering an
+        // unknown tag in this range should stop processing or take similar defensive action
+        // (Q-o-I).
+        //
+        // Tags 64-127 convey information a consumer can ignore safely (though maybe with degraded
+        // functionality).
+        //
+        // For N >= 128, tag N has the same properties as tag N modulo 128.
+        //
+        // To allow an ignored tag and its parameter value to be skipped easily, we adopt this
+        // convention.
+        //
+        // * For N > 32, even numbered tags have a ULEB128 parameter and odd numbered ones have a
+        //   null-terminated byte string (NTBS) parameter.
+        // * A consumer must comprehend tags 1-32 individually.
+        match attr.tag_number() % 128 {
+            // Tags 0-63 must be understood, so if we don't know about them, that's an error
+            n if n <= 63 => return Err(attr.unrecognized()),
+            // Tags 64-127 may be ignored
+            // Even tags are ULEB128
+            n if n % 2 == 0 => attr.parse_uleb128()?.1,
+            // Odd tags are NTBS
+            n if n % 2 == 1 => attr.parse_ntbs()?.1,
+            // This branch can't be reached, but the match grammar can't provide it
+            _ => unreachable!(),
+        }
+    }
+
+    /// The raw name is the name a user gave to a tool or selected from a menu. It can be:
+    ///
+    ///   * The name of a specific manufacturer's part (such as ML692000)
+    ///   * The name of a generic part (such as Arm946E-S) or architecture (such as v5TE)
+    ///   * Any other name acceptable to the tool chain
+    ///
+    /// The value `""` denotes that the raw name is identical to `cpu_name` and records that the
+    /// user built for a generic implementation (such as Arm946E-S) rather than any
+    /// manufacturer-specific part (such as ML692000) based on it.
+    [cpu_raw_name, (=4), CpuRawName(NTBS)]
+
+    /// A CPU name is defined by Arm or the architecture licensee responsible for designing the
+    /// part. It is the official product name, with no extension and no abbreviation.
+    ///
+    /// An Arm-defined architecture name may be used instead of a CPU name, and denotes that the
+    /// user had more generic intentions.
+    [cpu_name, (=5), CpuName(NTBS)]
+
+    /// The following tags describe the processor architecture version and architecture profile for
+    /// which the user intended the producer to produce code.
+    ///
+    /// Starting with architecture versions v8-A, v8-R and v8-M, the profile is represented by
+    /// `cpu_arch`. For earlier versions, the profile is stored separately in `cpu_arch_profile`.
+    [cpu_arch, (=6), CpuArch {
+        /// Pre-v4
+        0 => PreV4,
+        /// Arm v4, e.g. SA110
+        1 => V4,
+        /// Arm v4T, e.g. Arm7TDMI
+        2 => V4t,
+        /// Arm v5T, e.g. Arm9TDMI
+        3 => V5t,
+        /// Arm v5TE, e.g. Arm946E-S
+        4 => V5te,
+        /// Arm v5TEJ, e.g. Arm926EJ-S
+        5 => V5tej,
+        /// Arm v6, e.g. Arm1136J-S
+        6 => V6,
+        /// Arm v6KZ, e.g. Arm1176JZ-S
+        7 => V6kz,
+        /// Arm v6T2, e.g. Arm1156T2F-S
+        8 => V6t2,
+        /// Arm v6K, e.g. Arm1136J-S
+        9 => V6k,
+        // Arm v7, e.g. Cortex-A8, Cortex-M3
+        10 => V7,
+        /// Arm v6-M, e.g. Cortex-M1
+        11 => V6m,
+        /// Arm v6-SM, i.e. v6-M with the System extensions
+        12 => V6sm,
+        /// Arm v7-EM, i.e. v7-M with DSP extensions
+        13 => V7em,
+        /// Arm v8-A
+        14 => V8a,
+        /// Arm v8-R
+        15 => V8r,
+        /// Arm v8-M.baseline
+        16 => V8mBaseline,
+        /// Arm v8-M.mainline
+        17 => V8mMainline,
+        /// Arm v8.1-A
+        18 => V81a,
+        /// Arm v8.2-A
+        19 => V82a,
+        /// Arm v8.3-A
+        20 => V83a,
+        /// Arm v8.1-M.mainline
+        21 => V81mMainline,
+    }]
+
+    /// `cpu_arch_profile` states that the attributed entity requires the noted architecture
+    /// profile.
+    ///
+    /// Starting with architecture versions v8-A, v8-R and v8-M, the profile is represented by
+    /// `cpu_arch`. For these architecture versions and any later versions, a value of
+    /// `NotApplicable` should be used for `cpu_arch_profile`.
+    [cpu_arch_profile, (=7), CpuArchProfile {
+        /// Architecture profile is not applicable (e.g. pre v7, or cross-profile code) or is
+        /// indicated by `cpu_arch`.
+        ///
+        /// This value states that there is no requirement for any specific architecture profile.
+        0 => NotApplicable,
+        /// The application profile (e.g. for Cortex-A8)
+        0x41 => Application,
+        /// The real-time profile (e.g. for Cortex-R4)
+        0x52 => Realtime,
+        /// The microcontroller profile (e.g. for Cortex-M3)
+        0x4D => Microcontroller,
+        /// Application or real-time profile (i.e. the ‘classic’ programmer’s model).
+        ///
+        /// This value denotes that the attributed entity requires the classic programmer's model
+        /// rather than the microcontroller programmer's model.
+        0x53 => Classic,
+    }]
+
+    /// Are Arm instructions permitted?
+    [arm_isa_use, (=8), ArmIsaUse {
+        /// The user did not permit this entity to use Arm instructions
+        0 => NotPermitted,
+        /// The user intended that this entity could use Arm instructions.
+        ///
+        /// The architecture revision (`cpu_arch` and `cpu_arch_profile`) implies the permitted
+        /// subset of instructions.
+        1 => Intended,
+    }]
+
+    /// Are Thumb instructions permitted?
+    [thumb_isa_use, (=9), ThumbIsaUse {
+        /// The user did not permit this entity to use Thumb instructions
+        0 => NotPermitted,
+        /// The user permitted this entity to use 16-bit Thumb instructions (including BL)
+        ///
+        /// This value was defined when there was a clear separation between implementations using
+        /// 16-bit only Thumb instructions and those using the extended set of instructions. The
+        /// introduction of `Armv8-M.baseline` has blurred this distinction to the point where it is
+        /// no longer useful. Arm recommends that in future all toolchains emit a value of
+        /// `Intended` when use of Thumb was intended by the user and `NotPermitted` when use of
+        /// Thumb was not intended.
+        1 => SixteenBitPermitted,
+        /// 32-bit Thumb instructions were permitted (implies 16-bit instructions permitted)
+        ///
+        /// This value was defined when there was a clear separation between implementations using
+        /// 16-bit only Thumb instructions and those using the extended set of instructions. The
+        /// introduction of `Armv8-M.baseline` has blurred this distinction to the point where it is
+        /// no longer useful. Arm recommends that in future all toolchains emit a value of
+        /// `Intended` when use of Thumb was intended by the user and `NotPermitted` when use of
+        /// Thumb was not intended.
+        2 => ThirtyTwoBitPermitted,
+        /// The user permitted this entity to use Thumb code.
+        ///
+        /// The architecture revision (`cpu_arch` and `cpu_arch_profile`) implies the permitted
+        /// subset of instructions.
+        3 => Intended,
+    }]
+
+    /// Which floating point instructions and registers are permitted?
+    [fp_arch, (=10), FpArch {
+        /// The user did not permit this entity to use instructions requiring FP hardware
+        0 => NotPermitted,
+        /// The user permitted use of instructions from v1 of the floating point (FP) ISA
+        1 => V1,
+        /// Use of the v2 FP ISA was permitted (implies use of the v1 FP ISA)
+        2 => V2,
+        /// Use of the v3 FP ISA was permitted (implies use of the v2 FP ISA)
+        3 => V3,
+        /// Use of the v3 FP ISA was permitted, but only citing registers D0-D15, S0-S31
+        4 => V3D16,
+        /// Use of the v4 FP ISA was permitted (implies use of the non-vector v3 FP ISA)
+        5 => V4,
+        /// Use of the v4 FP ISA was permitted, but only citing registers D0-D15, S0-S31
+        6 => V4D16,
+        /// Use of the Arm v8-A FP ISA was permitted
+        7 => Neon,
+        /// Use of the Arm v8-A FP ISA was permitted, but only citing registers D0-D15, S0-S31
+        8 => NeonD16,
+    }]
+
+    /// Are WMMX instructions permitted?
+    [wmmx_arch, (=11), WmmxArch {
+        /// The user did not permit this entity to use WMMX
+        0 => NotPermitted,
+        /// The user permitted this entity to use WMMX v1
+        1 => V1,
+        /// The user permitted this entity to use WMMX v2
+        2 => V2,
+    }]
+
+    // Are Advanced SIMD Architecture (Neon) instructions permitted?
+    [advanced_simd_arch, (=12), AdvancedSimdArch {
+        /// The user did not permit this entity to use the Advanced SIMD Architecture (Neon)
+        0 => NotPermitted,
+        /// Use of the Advanced SIMDv1 Architecture (Neon) was permitted
+        1 => V1,
+        /// Use of Advanced SIMDv2 Architecture (Neon) (with half-precision floating-point and fused
+        /// MAC operations) was permitted
+        2 => V2,
+        /// Use of the Arm v8-A Advanced SIMD Architecture (Neon) was permitted
+        3 => V8a,
+        /// Use of the Arm v8.1-A Advanced SIMD Architecture (Neon) was permitted
+        4 => V81a,
+    }]
+
+    // Are M-profile Vector Extension instructions permitted?
+    [mve_arch, (=48), MveArch {
+        /// The user did not permit this entity to use the M-profile Vector Extension
+        0 => NotPermitted,
+        /// Use of the Integer M-profile Vector Extension was permitted
+        1 => Integer,
+        /// Use of the Integer and Floating Point M-profile Vector Extension was permitted
+        2 => IntegerAndFloatingPoint,
+    }]
+
+    /// Are half-precision floating point instructions permitted?
+    [fp_hp_extension, (=36), FpHpExtension {
+        /// The user intended half-precision floating point instructions may be used if they exist
+        /// in the available FP and ASIMD instruction sets as indicated by `fp_arch` and
+        /// `asimd_arch`.
+        0 => Implied,
+        /// Use of the half-precision instructions first added as an optional extension to
+        /// VFPv3/Advanced SIMDv1 was permitted, in addition to those indicated by `fp_arch` and
+        /// `asimd_arch`.
+        1 => Vfpv3,
+        /// Use of the half-precision instructions first added as an optional extension to Armv8.2-A
+        /// Floating-Point and Advanced SIMD was permitted, in addition to those indicated by
+        /// `fp_arch` and `asimd_arch`.
+        2 => Armv82a,
+    }]
+
+    /// Are unaligned memory accesses permitted?
+    [cpu_unaligned_access, (=34), CpuUnalignedAccess {
+        /// The user did not intend this entity to make unaligned data accesses
+        0 => NotIntended,
+        /// The user intended that this entity might make v6-style unaligned data accesses
+        1 => V6,
+    }]
+
+    /// Are `ENTERX` and `LEAVEX` instructions permitted?
+    #[deprecated(since="ABI r2.09")]
+    [t2ee_use, (=66), T2eeUse {
+        /// No use of T2EE extension was permitted, or no information is available
+        0 => NotPermitted,
+        /// Use of the T2EE extension was permitted
+        1 => Permitted,
+    }]
+
+    /// Are the TrustZone extension or virtualization extensions permitted?
+    [virtualization_use, (=68), VirtualizationUse {
+        /// No use of any virtualization extension was permitted, or no information available
+        0 => NotPermitted,
+        /// Use of the TrustZone extension (`SMC`) was permitted
+        1 => TrustZone,
+        /// Use of the virtualization extensions (`HVC`, `ERET`) were permitted
+        2 => VirtualizationExtensions,
+        /// Use of TrustZone (`SMC`) and virtualization extensions (`HVC`, `ERET`) were permitted
+        3 => TrustZoneAndVirtualizationExtensions,
+    }]
+
+    /// Is the multiprocessing extension permitted?
+    [mp_extension_use, (=42), MpExtensionUse {
+        /// No use of Arm v7 MP extension was permitted, or no information available.
+        0 => NotPermitted,
+        /// Use of the Arm v7 MP extension was permitted.
+        ///
+        /// This enables the `PLDW` (preload write hint) instruction.
+        1 => V7,
+    }]
+
+    /// Are integer division instructions permitted?
+    [div_use, (=44), DivUse {
+        /// The user intended divide instructions may be used if they exist, or no explicit
+        /// information recorded. This code was permitted to use `SDIV` and `UDIV` if the
+        /// instructions are guaranteed present in the architecture, as indicated by `cpu_arch` and
+        /// `cpu_arch_profile`.
+        0 => Implied,
+        /// This code was explicitly not permitted to use `SDIV` or `UDIV`.
+        ///
+        /// `NotPermitted` records an explicit intention to not use divide instructions in this
+        /// code, on targets where they would otherwise be permitted. This intention could be
+        /// conveyed to the object producer by citing a "no divide" command-line option, or by
+        /// other means.
+        1 => NotPermitted,
+        /// This code was permitted to use `SDIV` and `UDIV` in the Arm and Thumb ISAs. the
+        /// instructions are present as an optional architectural extension above the base
+        /// architecture implied by `cpu_arch` and `cpu_arch_profile`.
+        ///
+        /// Producers must emit `Permitted` if and only if the permission to use `SDIV` and `UDIV`
+        /// cannot be conveyed using values `Implied` or `NotPermitted`.
+        2 => Permitted,
+    }]
+
+    /// Are DSP instructions permitted?
+    [dsp_extension, (=46), DspExtension {
+        /// The user intended DSP instructions may be used if they exist. This entity is permitted
+        /// to use DSP instructions if they are guaranteed present in the architecture as indicated
+        /// by `cpu_arch`.
+        0 => Implied,
+        /// This code was permitted to use Thumb DSP functions as an optional architecture extension
+        /// above the base architecture as indicated by `cpu_arch`.
+        1 => ThumbPermitted,
+    }]
+
+    /// Summarizes the user intention behind the procedure-call standard configuration used. Its
+    /// value must be consistent with the values given to the tags below, and must not be used as a
+    /// macro in place of them.
+    [pcs_config, (=13), PcsConfig {
+        /// No standard configuration used, or no information recorded
+        0 => Unspecified,
+        /// Bare platform configuration
+        1 => Bare,
+        /// Linux application configuration
+        2 => Linux,
+        /// Linux DSO configuration
+        3 => LinuxDso,
+        /// Palm OS 2004 configuration
+        4 => PalmOs2004,
+        /// Reserved to future Palm OS configuration
+        5 => FuturePalmOs,
+        /// Symbian OS 2004 configuration
+        6 => SymbianOs2004,
+        /// Reserved to future Symbian OS configuration
+        7 => FutureSymbianOs,
+    }]
+
+    /// R9 has a role in some variants of the PCS. `abi_pcs_r9_use` describes the user’s chosen PCS
+    /// variant.
+    [abi_pcs_r9_use, (=14), AbiPcsR9Use {
+        /// R9 used as V6 (just another callee-saved register, implied by omitting the tag)
+        0 => Default,
+        /// R9 used as SB, a global Static Base register
+        1 => StaticBase,
+        /// R9 used as a Thread Local Storage (TLS) pointer
+        ///
+        /// In this mode, R9 plays the role that would otherwise be played by one of the three
+        /// Software Thread ID Registers `TPIDRURW`, `TPIDRURO`, `TPIDRPRW` defined in section
+        /// B3.12.46 (CP15 c13 Software Thread ID registers) of the Arm Architecture Reference
+        /// Manual Arm v7-A and Arm v7-R edition.
+        ///
+        /// The role played by that `TPID*` register is defined by the software platform’s ABI.
+        2 => ThreadLocalStorage,
+        /// R9 not used at all by code associated with the attributed entity
+        3 => Unused,
+    }]
+
+    /// How may the attributed entity access read-write static data?
+    [abi_pcs_rw_data, (=15), AbiPcsRwData {
+      /// RW static data was permitted to be addressed absolutely
+      0 => Absolute,
+      /// RW static data was only permitted to be addressed PC-relative
+      1 => PcRelative,
+      /// RW static data was only permitted to be addressed SB-relative
+      2 => SbRelative,
+      /// The user did not permit this entity to use RW static data
+      3 => NotPermitted,
+    }]
+
+    /// How may the attributed entity access read-only static data?
+    [abi_pcs_ro_data, (=16), AbiPcsRoData {
+      /// RO static data was permitted to be addressed absolutely
+      0 => Absolute,
+      /// RO static data was only permitted to be addressed PC-relative
+      1 => PcRelative,
+      /// The user did not permit this entity to use RO static data
+      2 => NotPermitted,
+    }]
+
+    /// Compatibility among shared objects and their clients is affected by whether imported data
+    /// are addressed directly or indirectly. Linux imported data must be addressed indirectly (via
+    /// the Global Object Table, or GOT). Symbian OS (2004) imported data must be addressed
+    /// directly.
+    [abi_pcs_got_use, (=17), AbiPcsGotUse {
+      /// The user did not permit this entity to import static data
+      0 => NotPermitted,
+      /// The user permitted this entity to address imported data directly
+      1 => Direct,
+      /// The user permitted this entity to address imported data indirectly (e.g. via a GOT)
+      2 => Indirect,
+    }]
+
+    /// How is `wchar_t` defined?
+    [abi_pcs_wchar_t, (=18), AbiPcsWcharT {
+      /// The user prohibited the use of wchar_t when building this entity
+      0 => Prohibited,
+      /// The user intended the size of wchar_t to be 2
+      2 => TwoBytes,
+      /// The user intended the size of wchar_t to be 4
+      4 => FourBytes,
+    }]
+
+    /// How does this ABI handle enumerations?
+    [abi_enum_size, (=26), AbiEnumSize {
+        /// The user prohibited the use of enums when building this entity
+        0 => Prohibited,
+        /// Enum values occupy the smallest container big enough to hold all their values
+        1 => Containerized,
+        /// The user intended Enum containers to be 32-bit
+        2 => ThirtyTwoBit,
+        /// The user intended that every enumeration visible across an ABI-complying interface
+        /// contains a value needing 32 bits to encode it; other enums can be containerized.
+        3 => ThirtyTwoBitOverAbi,
+    }]
+
+    [abi_align_needed, (=24), AbiAlignNeeded {
+      /// The user did not permit code to depend the alignment of 8-byte data or data with extended
+      /// (> 8-byte) alignment
+      0 => None,
+      /// Code was permitted to depend on the 8-byte alignment of 8-byte data items
+      1 => EightBytes,
+      /// Code was permitted to depend on the 4-byte alignment of 8-byte data items
+      2 => FourBytes,
+      // TODO:
+      // n  (in 4..12) Code was permitted to depend on the 8-byte alignment of 8-byte data items and
+      // the alignment of data items having up to 2n-byte extended alignment
+    }]
+
+    [abi_align_preserved, (=25), AbiAlignPreserved {
+      /// The user did not require code to preserve 8-byte alignment of 8-byte data objects
+      0 => None,
+      /// Code was required to preserve 8-byte alignment of 8-byte data objects
+      ///
+      /// This requirement is specifically enforced at function calls, which means that leaf
+      /// functions (those which do not make additional function calls) may use whichever alignment
+      /// is convenient.
+      1 => EightBytesExceptLeaf,
+      ///  Code was required to preserve 8-byte alignment of 8-byte data objects and to ensure
+      /// `(SP MOD 8) = 0` at all instruction boundaries (not just at function calls)
+      2 => EightBytesAlways,
+      // TODO:
+      // n (in 4..12) Code was required to preserve the alignments of case 2 and the alignment of
+      // data items having up to 2n-byte extended alignment.
+    }]
+
+    [abi_fp_rounding, (=19), AbiFpRounding {
+      /// The user intended this code to use the IEEE 754 round to nearest rounding mode
+      0 => RoundToNearest,
+      /// The user permitted this code to choose the IEEE 754 rounding mode at run time
+      1 => ChosenAtRuntime,
+    }]
+
+    [abi_fp_denormal, (=20), AbiFpDenormal {
+      /// The user built this code knowing that denormal numbers might be flushed to (+) zero
+      0 => MayFlushToZero,
+      /// The user permitted this code to depend on IEEE 754 denormal numbers
+      1 => MustPreserveValue,
+      /// The user permitted this code to depend on the sign of a flushed-to-zero number being preserved in the sign of 0
+      2 => MustPreserveSign,
+    }]
+
+    [abi_fp_extensions, (=21), AbiFpExtensions {
+      /// The user intended that this code should not check for inexact results
+      0 => NotPermitted,
+      /// The user permitted this code to check the IEEE 754 inexact exception
+      1 => MayCheckInexactException,
+    }]
+
+    [abi_fp_user_exceptions, (=22), AbiFpUserExceptions {
+      /// The user intended that this code should not enable or use IEEE user exceptions
+      0 => NotPermitted,
+      /// The user permitted this code to enables and use IEEE 754 user exceptions
+      1 => Permitted,
+    }]
+
+    [abi_fp_number_model, (=23), AbiFpNumberModel {
+      /// The user intended that this code should not use floating point numbers
+      0 => None,
+      /// The user permitted this code to use IEEE 754 format normal numbers only
+      1 => Finite,
+      /// The user permitted numbers, infinities, and one quiet NaN (see RTABI32)
+      2 => RtAbi,
+      /// The user permitted this code to use all the IEEE 754-defined FP encodings
+      3 => Ieee754,
+    }]
+
+    [abi_fp_16bit_format, (=38), AbiFp16BitFormat {
+        /// The user intended that this entity should not use 16-bit floating point numbers
+        0 => None,
+        /// Use of IEEE 754 (draft, November 2006) format 16-bit FP numbers was permitted
+        1 => Ieee754,
+        /// Use of VFPv3/Advanced SIMD "alternative format" 16-bit FP numbers was permitted
+        2 => AlternativeFormat,
+    }]
+
+    [abi_hard_fp_use, (=27), AbiHardFpUse {
+        /// The user intended that FP use should be implied by `fp_arch`
+        0 => Implied,
+        /// The user intended this code to execute on the single-precision variant derived from
+        /// `fp_arch`
+        1 => SinglePrecision,
+        /// The user intended that FP use should be implied by `fp_arch`
+        #[deprecated(note="This is a duplicate value; use `Implied`")]
+        3 => ImpliedAgain,
+    }]
+
+    [abi_vfp_args, (=28), AbiVfpArgs {
+        /// The user intended FP parameter/result passing to conform to AAPCS, base variant
+        0 => Aapcs,
+        /// The user intended FP parameter/result passing to conform to AAPCS, VFP variant
+        1 => Vfp,
+        /// The user intended FP parameter/result passing to conform to tool chain-specific conventions
+        2 => Custom,
+        /// Code is compatible with both the base and VFP variants; the user did not permit
+        /// non-variadic functions to pass FP parameters/results
+        3 => Compatible,
+    }]
+
+    [abi_wmmx_args, (=29), AbiWmmxArgs {
+        /// The user intended WMMX parameter/result passing conform to the AAPCS, base variant
+        0 => Base,
+        /// The user intended WMMX parameter/result passing conform to Intel’s WMMX conventions
+        1 => Wmmx,
+        /// The user intended WMMX parameter/result passing conforms to tool chain-specific conventions
+        2 => Custom,
+    }]
+
+    [frame_pointer_use, (=72), FramePointerUse {
+        /// This code makes no claims to conformance with the rules for use of a frame pointer
+        0 => Unspecified,
+        /// This code creates a frame record for all functions that may modify the value stored in
+        /// the link register (`LR`)
+        1 => CreatesFrameRecords,
+        /// This code does not create frame records, but preserves the value stored in the frame
+        /// pointer register (`FP`)
+        2 => PreservesFramePointer,
+    }]
+
+    [abi_optimization_goals, (=30), AbiOptimizationGoals {
+        /// No particular optimization goals, or no information recorded
+        0 => Unspecified,
+        /// Optimized for speed, but small size and good debug illusion preserved
+        1 => Speed,
+        /// Optimized aggressively for speed, small size and debug illusion sacrificed
+        2 => BestSpeed,
+        /// Optimized for small size, but speed and debugging illusion preserved
+        3 => Size,
+        /// Optimized aggressively for small size, speed and debug illusion sacrificed
+        4 => BestSize,
+        /// Optimized for good debugging, but speed and small size preserved
+        5 => Debugging,
+        /// Optimized for best debugging illusion, speed and small size sacrificed
+        6 => BestDebugging,
+    }]
+
+    [abi_fp_optimization_goals, (=31), AbiFpOptimizationGoals {
+        /// No particular FP optimization goals, or no information recorded
+        0 => Unspecified,
+        /// Optimized for speed, but small size and good accuracy preserved
+        1 => Speed,
+        /// Optimized aggressively for speed, small size and accuracy sacrificed
+        2 => BestSpeed,
+        /// Optimized for small size, but speed and accuracy preserved
+        3 => Size,
+        /// Optimized aggressively for small size, speed and accuracy sacrificed
+        4 => BestSize,
+        /// Optimized for accuracy, but speed and small size preserved
+        5 => Accuracy,
+        /// Optimized for best accuracy, speed and small size sacrificed
+        6 => BestAccuracy,
+    }]
+
+    // TODO: document and define a specialized NTBS type
+    [compatibility, (=32), Compatibility(NTBS)]
+
+    /// At this release of the ABI (2020Q3) there are only two defined uses of
+    /// `also_compatible_with`:
+    ///
+    /// * To express v4T also compatible with v6-M and v6-M also compatible with v4T.
+    /// * To express v8-A also compatible with v8-R and v8-R also compatible with v8-A.
+    // TODO: define constants
+    [also_compatible_with, (=65), AlsoCompatibleWith(NTBS)]
+
+    [conformance, (=67), Conformance(NTBS)]
+});
+
+// `VirtualizationUse` is documented to be a bitfield, so provide bitwise accessors
+impl VirtualizationUse {
+    /// Is the `SMC` instruction intended to be used?
+    pub fn smc(&self) -> bool {
+        u64::from(self) & 0x01 != 0
+    }
+
+    /// Are the the `HVC` and `ERET` instructions intended to be used?
+    pub fn hvc_and_eret(&self) -> bool {
+        u64::from(self) & 0x02 != 0
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn smoke() {
+        // readelf says:
+        // Attribute Section: aeabi
+        // File Attributes
+        //   Tag_CPU_name: "7-A"
+        //   Tag_CPU_arch: v7
+        //   Tag_CPU_arch_profile: Application
+        //   Tag_ARM_ISA_use: Yes
+        //   Tag_THUMB_ISA_use: Thumb-2
+        //   Tag_FP_arch: VFPv3
+        //   Tag_Advanced_SIMD_arch: NEONv1
+        //   Tag_ABI_PCS_wchar_t: 4
+        //   Tag_ABI_FP_denormal: Needed
+        //   Tag_ABI_FP_exceptions: Needed
+        //   Tag_ABI_FP_number_model: IEEE 754
+        //   Tag_ABI_align_needed: 8-byte
+        //   Tag_ABI_align_preserved: 8-byte, except leaf SP
+        //   Tag_ABI_enum_size: int
+        //   Tag_ABI_VFP_args: VFP registers
+        //   Tag_CPU_unaligned_access: v6
+        //   Tag_MPextension_use: Allowed
+        //   Tag_Virtualization_use: TrustZone
+        let expected = Aeabi {
+            cpu_name: Some(CpuName(b"7-A")),
+            cpu_arch: Some(CpuArch::V7),
+            cpu_arch_profile: Some(CpuArchProfile::Application),
+            arm_isa_use: Some(ArmIsaUse::Intended),
+            thumb_isa_use: Some(ThumbIsaUse::ThirtyTwoBitPermitted),
+            fp_arch: Some(FpArch::V3),
+            advanced_simd_arch: Some(AdvancedSimdArch::V1),
+            abi_pcs_wchar_t: Some(AbiPcsWcharT::FourBytes),
+            abi_fp_denormal: Some(AbiFpDenormal::MustPreserveValue),
+            abi_fp_extensions: Some(AbiFpExtensions::MayCheckInexactException),
+            abi_fp_number_model: Some(AbiFpNumberModel::Ieee754),
+            abi_align_needed: Some(AbiAlignNeeded::EightBytes),
+            abi_align_preserved: Some(AbiAlignPreserved::EightBytesExceptLeaf),
+            abi_enum_size: Some(AbiEnumSize::ThirtyTwoBit),
+            abi_vfp_args: Some(AbiVfpArgs::Vfp),
+            cpu_unaligned_access: Some(CpuUnalignedAccess::V6),
+            mp_extension_use: Some(MpExtensionUse::V7),
+            virtualization_use: Some(VirtualizationUse::TrustZone),
+            ..Default::default()
+        };
+
+        let bytes = b"\x41\x36\x00\x00\x00\x61\x65\x61\x62\x69\x00\x01\x2c\x00\x00\x00\
+        \x05\x37\x2d\x41\x00\x06\x0a\x07\x41\x08\x01\x09\x02\x0a\x03\x0c\x01\x12\x04\x14\x01\x15\
+        \x01\x17\x03\x18\x01\x19\x01\x1a\x02\x1c\x01\x22\x01\x2a\x01\x44\x01";
+
+        let section = Section::new(bytes, scroll::Endian::Little).unwrap();
+        let actual = Aeabi::try_from(section).unwrap();
+        assert_eq!(actual, expected);
+    }
+}
diff --git a/src/elf/mod.rs b/src/elf/mod.rs
index b8775b23..f642d27a 100644
--- a/src/elf/mod.rs
+++ b/src/elf/mod.rs
@@ -54,6 +54,10 @@ pub mod dynamic;
 pub mod reloc;
 pub mod note;
 
+pub mod build_attributes;
+
+pub mod arm;
+
 macro_rules! if_sylvan {
     ($($i:item)*) => ($(
         #[cfg(all(feature = "elf32", feature = "elf64", feature = "endian_fd"))]