Re: Reversing klogd's EIP Resolution.

From: Keith Owens (kaos@ocs.com.au)
Date: Sat Sep 09 2000 - 14:43:44 EDT

Next message: Giuliano Pochini: "How to put something in /proc"

Previous message: Linux Now: "ECN configuration not working"
In reply to: Ralph Corderoy: "Reversing klogd's EIP Resolution."
Next in thread: Ralph Corderoy: "Re: Reversing klogd's EIP Resolution."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Sat, 09 Sep 2000 19:20:15 +0100,
Ralph Corderoy <ralph@inputplus.demon.co.uk> wrote:
> 01:52:30 EIP: 0010:[dput+77/328]
>
>I believe I should be able to look up dput in the System.map klogd is
>using, add on the offset, and then look that number up in the real
>System.map. Is this doable?

Your best option is to convert dput+77 back to 8 digit hex and run the
resulting log through ksymoops. +77/328 is offset 77, the next label
that klogd knows about is 328 bytes later, ignore the /328. AFAIK
klogd prints offsets in decimal but check the source code of
sysklogd/ksym.c to be sure.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Next message: Giuliano Pochini: "How to put something in /proc"
Previous message: Linux Now: "ECN configuration not working"
In reply to: Ralph Corderoy: "Reversing klogd's EIP Resolution."
Next in thread: Ralph Corderoy: "Re: Reversing klogd's EIP Resolution."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b29 : Sat Sep 09 2000 - 14:49:02 EDT