From mboxrd@z Thu Jan 1 00:00:00 1970 From: eng.myz@gmail.com (Mohammad Y. Zachariah) Date: Fri, 18 Mar 2016 11:58:49 +0200 Subject: How to get object virtual address from a kernel core dump Message-ID: To: kernelnewbies@lists.kernelnewbies.org List-Id: kernelnewbies.lists.kernelnewbies.org Hello everyone, I'm taking the way of analysing kernel core dumps as a learning approach using 'crash tool'. One of the interesting crash commands is 'struct' which can print kernel struct definition and/or the actual contents of the structure. According to struct help page, I need the virtual address of the struct in order to view/print its contents, for example: crash> mm_struct.pgd ffff810022e7d080 -px pgd_t *pgd = 0xffff81000e3ac000 -> { pgd = 0x2c0a6067 } My question is how to find the mm_struct address "ffff810022e7d080" in the above example in the first place?? Thank you for your help in advance. Zach -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20160318/aff2cddf/attachment.html