Re: magic file entry to understand core dumps
Aaron Ucko (UCKO@vax1.rockhurst.edu)
Sat, 20 Jul 1996 15:05:54 -0600 (CST)
>>JM> core: ELF 32-bit LSB core file i386 (386 and up) Version 1
>>
>>He wanted an addition to the magic file to show the program which
>>dumped core, as the a.out entry does. However, a quick check shows
>>that it isn't a simple offset... anyone have better knowledge of the
>>format?
>>
>>
>
>Like I said, a cheesy program would be worthwhile...gdb does it, but you
>first have to know the program which cored for gdb to spit out the command
>line..
I normally just use "strings core" and look for the probable executable
name...not ideal, but it works.
--
Aaron Ucko (ucko@vax1.rockhurst.edu; finger for PGP public key) | Geek Code
3.1 [for explanation, finger hayden@mankato.msus.edu]: GCS/M/S/C d- s+: a18
C++(+++)>++++ UL++>+++ P++(+++) L+++(++++)>+++++ E- W+(-) N++(+) o+ K- w---
O M-@ V-(--) PS++(+++) PE- Y+ PGP(+) t(+) !5 X-- R(-) tv-@ b++(+++) DI+ D--
G++(+++) e>+++++(*) h!>+ r-(--)>+++ y? | "That's right," he said. "We're
philosophers. We think, therefore we am." -- Terry Pratchett, _Small Gods_