Hello everyone,
I'm taking the way of analysing kernel core dumps as a learning approach using 'crash tool'. One of the interesting crash commands is 'struct' which can print kernel struct definition and/or the actual contents of the structure.
According to struct help page, I need the virtual address of the struct in order to view/print its contents, for example:
crash> mm_struct.pgd ffff810022e7d080 -px
pgd_t *pgd = 0xffff81000e3ac000
-> {
pgd = 0x2c0a6067
}
My question is how to find the mm_struct address "ffff810022e7d080" in the above example in the first place??