Datatypes

GNU build ID of an ELF file

ID gnu_build_id

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Bit string that the linker writes into the .note.gnu.build-id note of an ELF executable or shared library to identify that build. GNU ld computes it with the --build-id option: a SHA-1 hash (160 bits, the default) or an MD5 or XXHASH hash (128 bits) of the output, 128 random bits (uuid style), or a fixed hexadecimal string given by the user. Tools such as file, readelf -n, debuginfod and crash reporters print it as lowercase hexadecimal digits, and debug symbol stores are keyed by it. VirusTotal shows it as the Build id of ELF files. The regexp accepts the 128-bit and 160-bit forms; user-chosen build IDs can have other lengths.

Categories
Software development
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
68/100 · missing: second example, mapping (Wikidata, Schema.org, ...), translation, detector coverage
Metacrafter rules
no detection rule yet
Supported by tools
no tool record lists this type yet

Regular expression

^(?:[0-9a-f]{32}|[0-9a-f]{40})$

Python re syntax.

Examples

ValueDescription
064cb6d5088be6864ecce961a798300f3b202802SHA-1 build ID of an ARM64 Android shared library (libtracernative.so) in its VirusTotal report
064cb6d5088be6864ecce961a798300f3b20280 invalid39 hexadecimal digits

Sources

Use this record