<div dir="ltr">Hello Zach,<div class="gmail_extra"><br><div class="gmail_quote">On Fri, Mar 18, 2016 at 3:28 PM, Mohammad Y. Zachariah <span dir="ltr"><<a href="mailto:eng.myz@gmail.com" target="_blank">eng.myz@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div>Hello everyone,<br><br></div>I'm taking the way of analysing kernel core dumps as a learning approach using 'crash tool'. One of the interesting crash commands is 'struct' which can print kernel struct definition and/or the actual contents of the structure.<br><br></div>According to struct help page, I need the virtual address of the struct in order to view/print its contents, for example:<br><br> crash> mm_struct.pgd ffff810022e7d080 -px<br> pgd_t *pgd = 0xffff81000e3ac000<br> -> {<br> pgd = 0x2c0a6067<br> }<br><br></div>My question is how to find the mm_struct address "ffff810022e7d080" in the above example in the first place??<br></div></div></div></blockquote><div><br></div><div>crash tool has a 'ps' command, which outputs all the task and their task struct address.</div><div><br></div><div>Thanks,</div><div>Arun</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><br></div>Thank you for your help in advance.<br></div>Zach<br></div>
<br>_______________________________________________<br>
Kernelnewbies mailing list<br>
<a href="mailto:Kernelnewbies@kernelnewbies.org">Kernelnewbies@kernelnewbies.org</a><br>
<a href="http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies" rel="noreferrer" target="_blank">http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies</a><br>
<br></blockquote></div><br></div></div>