dwarf-expert

Analyze DWARF debug files and answer format questions for versions 3-5.

Updated Feb 13, 2026
One-click install
npx skills add https://github.com/fjor1025/InfoSec-Framework --skill dwarf-expert-fjor1025
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dwarf-expert
Source: https://github.com/fjor1025/InfoSec-Framework/tree/main/ClaudeSkills/plugins/dwarf-expert/skills/dwarf-expert
Command: npx skills add https://github.com/fjor1025/InfoSec-Framework --skill dwarf-expert-fjor1025

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides deep expertise in understanding and interacting with DWARF debug information, enabling users to analyze compiled binaries, debug complex code, and ensure the integrity of debug data.

Core Features & Use Cases

  • DWARF Standard Expertise: Answers questions about DWARF versions 3-5, including DIEs, attributes, and formats.
  • Debug Data Analysis: Parses and interprets DWARF sections using tools like dwarfdump and llvm-dwarfdump.
  • Code Interaction: Assists in writing, modifying, or reviewing code that parses or generates DWARF data.
  • Use Case: You're debugging a C++ program and need to understand the structure of a specific data type defined in its DWARF information. This Skill can help you extract and interpret that information.

Quick Start

Use the dwarf-expert skill to find all DW_TAG_subprogram entries in the binary located at /path/to/my/binary.

Frequently Asked Questions about dwarf-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I parse DWARF debug information from a compiled binary?

DWARF debug information works by storing data type structures and program scopes in DIEs (Debugging Information Entries) with specific attributes, allowing tools like `dwarfdump` to map compiled binary addresses back to original source code lines and variables.

What's the best way to understand DWARF version differences when analyzing debug data?

Understanding DWARF version differences requires analyzing the specific formats and attributes defined in standards v3 through v5, as each version introduces distinct changes to how Debugging Information Entries represent data structures and program scopes.

Can I use llvm-dwarfdump to extract specific data type structures from a C++ program?

Yes, you can use `llvm-dwarfdump` to extract specific data type structures from a C++ program by locating and interpreting the relevant DW_TAG entries and attributes that define the layout and scope of your types within the binary.

How do I write code that parses or generates DWARF data correctly?

Writing code that parses or generates DWARF data correctly involves understanding the DWARF standard v3-v5, properly reading DIEs and attributes, and verifying your parser output against tools like `dwarfdump` and `readelf` to ensure structural integrity.

Why does readelf show incomplete DWARF debug sections for my binary?

Incomplete DWARF debug sections in `readelf` often occur when the binary was compiled without debug flags or uses a newer DWARF version format that the parsing tool does not fully support, requiring a compatible tool like `llvm-dwarfdump` for accurate verification.