Re: elf core dump - reading NT_PRPSINFO

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Hi :)

On Fri, Jan 20, 2012 at 13:57, Fredrick <fjohnber@xxxxxxxx> wrote:
> Hi,
> $ readelf -n core

is that "core" a core dump?

> Does anyone know how to read this NT_PRPSINFO ?
> Is hexdump the only way to decode this?
> Are there any tools to dump this data ?

if it is indeed core dump, I think simply pass it to gdb, e.g:
gdb <program elf binary> <the above core name>
and start playing with it e.g dumping stack trace.

NB: IMHO NT_PRPSINFO is just a section that describes the VMAs of the
crashed program. Quite likely an ELF documentation will mention about
it. Try googling...

Mulyadi Santosa
Freelance Linux trainer and consultant


Kernelnewbies mailing list

[Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Photo]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux Networking]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]

  Powered by Linux