Re: Reversing klogd's EIP Resolution.

From: Keith Owens (kaos@ocs.com.au)
Date: Sat Sep 09 2000 - 13:43:44 EST


On Sat, 09 Sep 2000 19:20:15 +0100,
Ralph Corderoy <ralph@inputplus.demon.co.uk> wrote:
> 01:52:30 EIP: 0010:[dput+77/328]
>
>I believe I should be able to look up dput in the System.map klogd is
>using, add on the offset, and then look that number up in the real
>System.map. Is this doable?

Your best option is to convert dput+77 back to 8 digit hex and run the
resulting log through ksymoops. +77/328 is offset 77, the next label
that klogd knows about is 328 bytes later, ignore the /328. AFAIK
klogd prints offsets in decimal but check the source code of
sysklogd/ksym.c to be sure.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Fri Sep 15 2000 - 21:00:12 EST