google/bloaty v1.1

Bloaty McBloatface v1.1

on GitHub

Added

• Source Filtering: Bloaty can now filter the results based on a regex
  match. See "Source filter" in README.md for details. (#177)
• Show only File or VM: It is possible to restrict the output to show only
  "VM SIZE" or "FILE SIZE" by passing --domain=vm or --domain=file. (#165)

Fixed

• Use system deps in CMake build: The CMake build can now use system deps
  for protobuf, capstone, and re2 if they are present. Hopefully this will make
  Bloaty easier to package in package managers. (#155)
• DWARF 4 Support: Fixed one place in Bloaty that was not accepting DWARF 4.
  (#166)
• DWARF fix: Added support for DW_FORM_ref_udata. (#197)
• Big-endian fix: Added missing byte swapping when getting the build ID for
  a big-endian binary. (#182)
• WASM demangling: WASM symbols are now properly demangled. (#149)
• New WASM sections: Added support for new DataCount and Event sections
  in WASM. (#178)
• Scaling fixes: Fixed integer overflow in 32-bit builds, and other issues
  that arise when using Bloaty with many files and/or large files. (#193)
• Improved coverage: Bloaty now properly attributes .eh_frame in object
  files, and attributes ELF headers to the corresponding section. (#168)
• CSV escaping: Bloaty now properly escapes CSV output when a field contains
  a comma or double quote. (#174)

Changed

• File size column moved left: In the default output, the file size now
  appears on the left. This means that all numbers are now on the left, which
  leads to more readable output when viewing in a proportional font or in a
  limited-width window.

  Old:

       VM SIZE                         FILE SIZE
   --------------                   --------------
     0.0%       0 .debug_info        7.97Mi  29.5%
     0.0%       0 .debug_loc         6.40Mi  23.7%
  

  New:

      FILE SIZE        VM SIZE    
   --------------  -------------- 
    30.0%  8.85Mi   0.0%       0    .debug_info
    24.7%  7.29Mi   0.0%       0    .debug_loc
  

  This shouldn't cause breakage, as anything consuming Bloaty's output
  programmatically should be using --csv or --tsv. (#165)

• ELF Segment labels now contain index: Previously ELF segment labels looked
  like LOAD [RW] with segment flags only. Now they also contain the segment
  index, eg. LOAD #1 [RW], so the output can distinguish between different
  segments with the same flags. (#159)

Security

Bloaty should not be considered fully hardened against malicious binaries. This
is one of the major reasons why Bloaty is not offered as an in-process library,
and should only be used through its command-line interface in a dedicated
address space. If you do not trust the input, further process sandboxing is
advisable.

However we do perform fuzzing of the parsers, and fix and crash bugs that are
found by fuzzing.

• Fixed crash bugs found by fuzzing (#173, #175)