ELF binary validation script

elf-validate.sh

#!/bin/bash
set -eu

command -v eu-elflint >/dev/null || (echo "eu-elflint not found, install elfutils"; exit 1)
command -v scanelf >/dev/null || (echo "scanelf not found, install pax-utils"; exit 1)

BINARIES=$(scanelf -EET_EXEC -RBF %F "${1-.}")

ERRS=0
for BINARY in $BINARIES; do
    echo -e "\n$BINARY"

    if [[ "$(scanelf -k '.go.buildinfo' "$BINARY" -q)" == .go.buildinfo* ]]; then
        # go binary
        echo "... is a Golang binary. elflint will return errors"
    fi

    if ! eu-elflint --gnu-ld "$BINARY"; then
        ERRS=$((ERRS+1))
    fi
done

if [ "$ERRS" -gt 0 ]; then
    echo -e "\n$ERRS errors encountered during ELF binary validation"
    exit 1
else
    echo -e "\nELF binaries validated ok"
fi