content: linux coredumps #545
Open
+326
−0
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Deploying interrupt with
|
| Latest commit: |
cf79987
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://81a3bc5b.interrupt.pages.dev |
| Branch Preview URL: | https://blake-linux-coredumps.interrupt.pages.dev |
### Summary Add an article covering the cause, layout, and use of Linux coredumps in `memfaultd`.
bahildebrand
force-pushed
the
blake/linux-coredumps
branch
from
502a76a to
cf79987
Compare
gminn
reviewed
Feb 11, 2025
Comment on lines
+90
to
+91
| expands to the PID of the crashing process. More information on the available | ||
| expansions can be found in the `man core`[^man_core] page. |
There was a problem hiding this comment.
Are there any other expansions that you think are useful, or are these basically the only two you use?
|
|
||
|  | ||
|
|
||
| The above image gives us a very high level view of the layout of a coredump. The |
There was a problem hiding this comment.
Since you have a good chunk of info on the header, lets give it its own section:
Suggested change
| The above image gives us a very high level view of the layout of a coredump. The | |
| ### ELF Header | |
| The above image gives us a very high level view of the layout of a coredump. To start, the |
| } Elf32_Phdr; | ||
| ``` | ||
|
|
||
| Here is a brief breakdown of the fields in the program header: |
There was a problem hiding this comment.
Since p_flags is omitted:
Suggested change
| Here is a brief breakdown of the fields in the program header: | |
| Here is a brief breakdown of the fields we care about in the program header: |
| The first two fields of the segment are fairly self explanatory, they represent | ||
| the size of both the name and the descriptor. The `name` field is a string that | ||
| represents the type of note. The `desc` field is a structure that contains the | ||
| actual data of the note. The type field tells us what type of note we are |
There was a problem hiding this comment.
Suggested change
| actual data of the note. The type field tells us what type of note we are | |
| actual data of the note. The `type` field tells us what type of note we are |
| represent either the stack, heap, or any other segment of memory that was loaded | ||
| into the process. | ||
|
|
||
| ## `procfs` Shallow Dive |
There was a problem hiding this comment.
I'm thinking this section would fit better after core_pattern, or within core_pattern? Feels slightly out of place here
Comment on lines
+275
to
+279
| Now you're probably wondering, why did we go through all of this trouble to end | ||
| up with a file that's largely the same as what the kernel would have produced? | ||
| Well for one it allows us to add metadata to the coredump, but it also sets the | ||
| stage for more advanced coredump handling in the future that we'll cover in the | ||
| the next article. |
There was a problem hiding this comment.
This is really great, I like the anticipation of reader questions a lot
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Add an article covering the cause, layout, and use
of Linux coredumps in
memfaultd.