Vulnerability Development mailing list archives
Re: core dump
From: Blair.Strang () CHELMER CO NZ (Blair Strang)
Date: Mon, 17 Jul 2000 15:21:22 +1200
From: Robert G. Ferrell [mailto:root () RGFSPARC CR USGS GOV] In brief, a core dump is an image of the kernel memory; a "snapshot" taken at the time a program crash or panic occurs. Its purpose is to allow you to see the state of the operating system when the error took place. If the error was one that is relevant to the state of the system, a core dump can be valuable in diagnosing the nature and cause of the error condition.
Sounds a bit like you are referring to "crash" dumps as well. Crash dumps are created when the kernel falls over and dies. (On some platforms...) AFAIK they include the whole contents of physical memory. Wizards use them to debug kernel problems. http://www.piaffe.org/panic/ (one src of info on crash dumps...) Core dumps on the other hand are left when user-space programs get fragged. They only include the virtual address space of the process that crashed, not the contents of kernel-space. (For a large number of rather good reasons). Cheers, Blair. -- [ Warning: a .sig virus was detected in this signature. It has been cleaned by memesweeper 3.0 ] -- The information contained in this e-mail and any attachments is confidential and is intended for the attention and use of the named addressee(s) only. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of Chelmer Limited.
Current thread:
- Re: core dump Robert G. Ferrell (Jul 13)
- Re: core dump AnorEXia (Jul 17)
- rodopi security problem?? Matthew Dunham (Jul 17)
- <Possible follow-ups>
- Re: core dump Blair Strang (Jul 16)