NativeSymbolSource

Namespace: Dotsider.Core.Analysis.Models

Assembly: Dotsider.Core.dll

Where a binary’s native symbols came from. The three primary sources carry names and (mostly) sizes; the three fallback sources recover only function boundaries from unwind data and are lower fidelity — they can miss leaf and thunk functions.

public enum NativeSymbolSource

Fields

Dsym

A macOS dSYM bundle (DWARF plus nlist stabs).

Returns: NativeSymbolSource

Dsym = 2

Dwarf

DWARF debug info in an unstripped ELF binary or a .dbg sidecar.

Returns: NativeSymbolSource

Dwarf = 1

EhFrameFallback

ELF .eh_frame unwind info — function boundaries only.

Returns: NativeSymbolSource

EhFrameFallback = 5

FunctionStartsFallback

Mach-O LC_FUNCTION_STARTS — function boundaries only.

Returns: NativeSymbolSource

FunctionStartsFallback = 6

MachONlist

The Mach-O symbol table (nlist) of the binary itself.

Returns: NativeSymbolSource

MachONlist = 3

NativePdb

A matched Windows native PDB (MSF container).

Returns: NativeSymbolSource

NativePdb = 0

PdataFallback

PE .pdata exception directory — function boundaries only.

Returns: NativeSymbolSource

PdataFallback = 4

ReadyToRun

A crossgen2 ReadyToRun image’s method entry-point tables: named, sized function ranges (one per hot/funclet/cold runtime function) recovered directly from the R2R sections.

Returns: NativeSymbolSource

ReadyToRun = 7

WebAssembly

A WebAssembly module’s function/code sections, optionally named from dotnet.native.js.symbols, the Wasm name section, or exports.

Returns: NativeSymbolSource

WebAssembly = 8