Re: Custom core file

Nikolay Martyanov
2016-09-28T16:37:32Z

On 09/28/2016 06:31 PM, duane@duaneellis.com wrote:
>>> So, I guess, dump/restore approach works only in two cases:
>>> a) debugging live process you have attached to (it's not my case, as I
>>> perform postmortem debug)
>>> b) already has loaded core file, which provides a context via saved CPU
>>> state - and it is the way I chose to follow.
> For step (B) - first load a dummy (tiny) standard core file - that gives
> you a debug context, think of it as a shim.
Is it a common case for GDB? Can this "fake" context bring me some
erroneous debug info?
I had such an idea, but due to doubt I mentioned above, decided not even
to try. Now I will =)

Thanks,
Nikolay
<http://www.securitylab.ru/>