[PATCH v2 0/2] Fix KASLR problem on sadump

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Dave, Hatayama-san,

Hatayama-san, thanks for your review, I updated may patch.

These patch series fix a problem that crash cannot open a dumpfile which is
captured by sadump on KASLR enabled kernel.

When KASLR feature is enabled, a kernel is placed on the memory randomly and
therefore crash cannot open a dumpfile because addresses of kernel symbols in
vmlinux are different from actual addresses. In the case of kdump, information
to get actual address is included in the vmcoreinfo, but dumpfile of sadump does
not have such a information.

These patches calculate kaslr offset and phys_base to solve this problem. The
basic idea is getting register (IDTR and CR3) from dump header, and calculate
kaslr_offset/phys_base using them.

changelog:
v2:
- Remove virsh-dump part
- Change get_vec0_addr style
- Some tiny fixes

v1:
https://www.redhat.com/archives/crash-utility/2017-October/msg00004.html

Takao Indoh (2):
  Introduce x86_64_kvtop_pagetable
  Fix a KASLR problem of sadump

 defs.h    |   5 +
 sadump.c  | 458 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-
 sadump.h  |   1 +
 symbols.c |  34 +++++
 x86_64.c  |  26 +++-
 5 files changed, 522 insertions(+), 2 deletions(-)

-- 
2.9.5


--
Crash-utility mailing list
Crash-utility@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/crash-utility



[Index of Archives]     [Fedora Development]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]

 

Powered by Linux