How to get object virtual address from a kernel core dump

Mohammad Y. Zachariah eng.myz at gmail.com
Fri Mar 18 05:58:49 EDT 2016


Hello everyone,

I'm taking the way of analysing kernel core dumps as a learning approach
using 'crash tool'. One of the interesting crash commands is 'struct' which
can print kernel struct definition and/or the actual contents of the
structure.

According to struct help page, I need the virtual address of the struct in
order to view/print its contents, for example:

    crash> mm_struct.pgd ffff810022e7d080 -px
      pgd_t *pgd = 0xffff81000e3ac000
      -> {
           pgd = 0x2c0a6067
         }

My question is how to find the mm_struct address "ffff810022e7d080" in the
above example in the first place??

Thank you for your help in advance.
Zach
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20160318/aff2cddf/attachment.html 


More information about the Kernelnewbies mailing list