Gdb search core dump memory

Question

I am new to gdb and I am trying to figure out if there is a way to do this: I have a reference and want to know where all this reference is been used in a core dump heap memory, something like a search for all occurrences of this reference in heap memory. Sorry if this question makes no sense or seems too simple.

steve · Accepted Answer · 2014-02-06 01:43:19Z

5

So first you need to find out where the memory has been mapped. This can be done with either "info files" or "maintenance info sections". After you have the mappings you can use the gdb find command on each of these mappings. The gdb find command has the following syntax:

find begin-address end-address address-to-search-for

answered Feb 6, 2014 at 1:43

steve

6,0401 gold badge23 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

evolvedmicrobe Over a year ago

is there anyway to automate this to scan all areas of memory?

caltuntas Nov 28 at 8:01

You can use github.com/hugsy/gef, GDB extension which provides a "search-pattern" (hugsy.github.io/gef/commands/search-pattern) command searches the value in all segments or you can write you own gdb python extension that can do the same thing.

Collectives™ on Stack Overflow

Gdb search core dump memory

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related