Re: elf core dump - reading NT_PRPSINFO
Sorry for not clearly specifying. Yes core is a core dump file. I see that fs/binfmt_elf.c does put information about the process that cored in a .note elf section as NT_PRPSINFO. Is there a standard tool to dump this information? Tried googling, could nt find anything :(. -Fredrick On 01/21/2012 09:45 AM, Mulyadi Santosa wrote: Hi :) On Fri, Jan 20, 2012 at 13:57, Fredrickfjohn...@zoho.com wrote: Hi, $ readelf -n core is that core a core dump? Does anyone know how to read this NT_PRPSINFO ? Is hexdump the only way to decode this? Are there any tools to dump this data ? if it is indeed core dump, I think simply pass it to gdb, e.g: gdbprogram elf binary the above core name and start playing with it e.g dumping stack trace. NB: IMHO NT_PRPSINFO is just a section that describes the VMAs of the crashed program. Quite likely an ELF documentation will mention about it. Try googling... ___ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
Re: elf core dump - reading NT_PRPSINFO
Hi... On Tue, Jan 24, 2012 at 01:06, Fredrick fjohn...@zoho.com wrote: Sorry for not clearly specifying. Yes core is a core dump file. I see that fs/binfmt_elf.c does put information about the process that cored in a .note elf section as NT_PRPSINFO. Is there a standard tool to dump this information? Tried googling, could nt find anything :(. have you tried elfdump? sorry can't help much about it... -- regards, Mulyadi Santosa Freelance Linux trainer and consultant blog: the-hydra.blogspot.com training: mulyaditraining.blogspot.com ___ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
Re: elf core dump - reading NT_PRPSINFO
Hi :) On Fri, Jan 20, 2012 at 13:57, Fredrick fjohn...@zoho.com wrote: Hi, $ readelf -n core is that core a core dump? Does anyone know how to read this NT_PRPSINFO ? Is hexdump the only way to decode this? Are there any tools to dump this data ? if it is indeed core dump, I think simply pass it to gdb, e.g: gdb program elf binary the above core name and start playing with it e.g dumping stack trace. NB: IMHO NT_PRPSINFO is just a section that describes the VMAs of the crashed program. Quite likely an ELF documentation will mention about it. Try googling... -- regards, Mulyadi Santosa Freelance Linux trainer and consultant blog: the-hydra.blogspot.com training: mulyaditraining.blogspot.com ___ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
elf core dump - reading NT_PRPSINFO
Hi, $ readelf -n core Notes at offset 0x0274 with length 0x04c0: OwnerData size Description CORE 0x0090 NT_PRSTATUS (prstatus structure) CORE 0x007c NT_PRPSINFO (prpsinfo structure) CORE 0x00a0 NT_AUXV (auxiliary vector) CORE 0x006c NT_FPREGSET (floating point registers) LINUX0x0200 NT_PRXFPREG (user_xfpregs structure) LINUX0x0030 Unknown note type: (0x0200) Does anyone know how to read this NT_PRPSINFO ? Is hexdump the only way to decode this? Are there any tools to dump this data ? Thanks, Fredrick ___ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
