Kernel module to dump Used heap/stack of a user process

Dhyan linuxdhyan at gmail.com
Mon May 14 05:56:05 EDT 2012


Dear All,

 I am writing a kernel module which will accept  user process id (PID) as
input and dump all the address space of that user process,like  stack,heap
segment.

I took mm->start_brk as start of heap ,mm->brk as end of heap,then i am
seeing, even though user process is not using 33 pages heap size shows as
33 pages
 (mm->brk -mm->start_brk) . (This i verified using /proc/pid/maps) .Stack
also behaves in similar way,

*So is there any way i can find out the really used heap staring from
mm->start_brk,So that i can dump only the used heap*

--
Thanks
Dhyan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20120514/c4d326ef/attachment.html 


More information about the Kernelnewbies mailing list