Vulnerability Development: Re: core dump

[Blair.Strang () CHELMER CO NZ (Blair Strang)]

> From: Robert G. Ferrell [mailto:root () RGFSPARC CR USGS GOV]
> In brief, a core dump is an image of the kernel memory; a "snapshot"
> taken at the time a program crash or panic occurs.  Its purpose is to
> allow you to see the state of the operating system when the error took
> place.  If the error was one that is relevant to the state of the
> system, a core dump can be valuable in diagnosing the nature and cause
> of the error condition.
Sounds a bit like you are referring to "crash" dumps as well.

Crash dumps are created when the kernel falls over and dies. (On some
platforms...) AFAIK they include the whole contents of physical memory.
Wizards use them to debug kernel problems.

http://www.piaffe.org/panic/  (one src of info on crash dumps...)

Core dumps on the other hand are left when user-space programs get
fragged. They only include the virtual address space of the process
that crashed, not the contents of kernel-space. (For a large number
of rather good reasons).

Cheers,

    Blair.

--
[ Warning: a .sig virus was detected in this signature. It has
  been cleaned by memesweeper 3.0 ]

--
The information contained in this e-mail and any attachments is confidential
and is intended for the attention and use of the named addressee(s) only.
Any views expressed in this message are those of the individual sender and
may not necessarily reflect the views of Chelmer Limited.