Linux kernel: Parsing coredump Files-Kernel code crashes

Transferred from: http://blog.csdn.net/guowenyan001/article/details/12975221

I. Analysis of core files

1.1 Locate the core file directory and start Mycrash:mycrash

1.2 Viewing the stack information for crashes: BT

1.3 Disassembly of the crash point code, 10 lines: Dis-l extract_http_info+73 10

Second, analysis source file Hinfo.ko

2.1 View Source file information: objdump-s Hinfo.ko > tmp

2.2 Find the content in 1.3 from the TMP file Movb $0x0, (%r12,%rax,1) to determine the code crash location

Third, another method of analysis

3.1 BT View Stack

3.2 MoD View module

3.3 Mod-s Loading module

3.4 Sym Address (3.1 In blue box is address) view crash code location

Linux kernel: Parsing coredump Files-Kernel code crashes