On Friday 28 April 2017 11:10 AM, Xunlei Pang wrote: >> + */ >> + get_kaslr_offset(SYMBOL(_stext)); > Looks like acquiring "KERNELOFFSET" in read_vmcoreinfo() should be enough here. Ah..OK..but may be not here..rather in get_kaslr_offset_x86_64() would be better. Not all arch could export this offset. > > We can get kaslr offset directly from the vmcoreinfo because the compressed dumpfile > contains vmcoreinfo as well in case of flag_refiltering, also x86_64 kernel has exported > "vmcoreinfo_append_str("KERNELOFFSET=%lx\n", kaslr_offset());" ~Pratyush