Re: Reversing klogd's EIP Resolution.
Hi Keith, > Your best option is to convert dput+77 back to 8 digit hex and run the > resulting log through ksymoops. +77/328 is offset 77, the next label > that klogd knows about is 328 bytes later, ignore the /328. AFAIK > klogd prints offsets in decimal but check the source code of > sysklogd/ksym.c to be sure. Many thanks for your answer. It's `+%x/%d' so the offset is hex, the size is decimal. Ralph. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] Please read the FAQ at http://www.tux.org/lkml/
Re: Reversing klogd's EIP Resolution.
On Sat, 09 Sep 2000 19:20:15 +0100, Ralph Corderoy <[EMAIL PROTECTED]> wrote: >01:52:30 EIP:0010:[dput+77/328] > >I believe I should be able to look up dput in the System.map klogd is >using, add on the offset, and then look that number up in the real >System.map. Is this doable? Your best option is to convert dput+77 back to 8 digit hex and run the resulting log through ksymoops. +77/328 is offset 77, the next label that klogd knows about is 328 bytes later, ignore the /328. AFAIK klogd prints offsets in decimal but check the source code of sysklogd/ksym.c to be sure. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] Please read the FAQ at http://www.tux.org/lkml/
Reversing klogd's EIP Resolution.
Hi, We've a machine that has been suffering Oops over the last few days after weeks of stability. I'll post more on that later. My current problem is a bunch of Oops that klogd has resolved the addresses on. Problem is, I've just worked out the machine has /boot/System.map as the wrong map. Given 01:52:30 EIP:0010:[dput+77/328] I believe I should be able to look up dput in the System.map klogd is using, add on the offset, and then look that number up in the real System.map. Is this doable? If so, can someone please explain what the `+77/328' indicates above and what number that means I should add onto the 0xc0130b14 value dput has in the wrong map. My background is ARM and PowerPC architectures, where as this is x86. Thanks, Ralph. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] Please read the FAQ at http://www.tux.org/lkml/