Kernel module to dump Used heap/stack of a user process

王哲 wangzhe5004 at gmail.com
Mon May 14 06:14:32 EDT 2012


2012/5/14 Dhyan <linuxdhyan at gmail.com>

> Dear All,
>
>  I am writing a kernel module which will accept  user process id (PID) as
> input and dump all the address space of that user process,like  stack,heap
> segment.
>
> I took mm->start_brk as start of heap ,mm->brk as end of heap,then i am
> seeing, even though user process is not using 33 pages heap size shows as
> 33 pages
>  (mm->brk -mm->start_brk) . (This i verified using /proc/pid/maps) .Stack
> also behaves in similar way,
>
> *So is there any way i can find out the really used heap staring from
> mm->start_brk,So that i can dump only the used heap*
>
> --
> Thanks
> Dhyan
>
> I am a kernelnewby and used to write a same kernel module.and hope to help
> you.
>
   please see the link
   http://blog.163.com/zhe_wang_2009/blog/static/17228212120123493614715/

>
> _______________________________________________
> Kernelnewbies mailing list
> Kernelnewbies at kernelnewbies.org
> http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20120514/45ccd020/attachment.html 


More information about the Kernelnewbies mailing list