Just a very short note, we managed to finish our gpn5-project for creating an asmsource to find the entry-points of preloaded libraries.
More doc and details to follow, just get it for now: smallelf-0.1.tar.bz2
Interresting but, unlike you say, there is no documentation, just comments here and there. Well, your tricks consist to read /proc/self/maps, search library's address and exec a symbol from this library ? Thats what I understood, is It wrong?