Re: How to get object virtual address from a kernel core dump

[Arun Sudhilal <getarunks@xxxxxxxxx>]

Hello Zach,

On Fri, Mar 18, 2016 at 3:28 PM, Mohammad Y. Zachariah <eng.myz@xxxxxxxxx> wrote:

Hello everyone,

I'm taking the way of analysing kernel core dumps as a learning approach using 'crash tool'. One of the interesting crash commands is 'struct' which can print kernel struct definition and/or the actual contents of the structure.

According to struct help page, I need the virtual address of the struct in order to view/print its contents, for example:

    crash> mm_struct.pgd ffff810022e7d080 -px
      pgd_t *pgd = 0xffff81000e3ac000
      -> {
           pgd = 0x2c0a6067
         }

My question is how to find the mm_struct address "ffff810022e7d080" in the above example in the first place??

crash tool has a 'ps'  command, which outputs all the task and their task struct address.

Thanks,

Arun

Thank you for your help in advance.

Zach

_______________________________________________
Kernelnewbies mailing list
Kernelnewbies@xxxxxxxxxxxxxxxxx
http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies

_______________________________________________
Kernelnewbies mailing list
Kernelnewbies@xxxxxxxxxxxxxxxxx
http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies