3 ms·
> And no, it does not make dealing with debugging info equipped dumps any harder, as long as walking the stack is all you need. I didn't quite get that: the co
by MichaelMoser123 9y ago
> And no, it does not make dealing with debugging info equipped dumps any harder, as long as walking the stack is all you need.
I didn't quite get that: the core dump is just a dump of (some of) the memory mappings of the dumped process. in my experience gdb often does not manage to make sense of it (with ALSR).
(one replacement strategy is to suspend a faulting process with SIGSTOP so that it is possible to attach to it later on)
- AstralStorm 9y agoFor debug equipped binaries, gdb will easily spot code addresses, after walking some stack. The trouble is, if the stack is damaged it ends up being worthless.