[Fwd: [Crash-utility] crash warnings]

[Dave Anderson]

David Wilder wrote:

>
> crash -d 2 gave me the header..
> Elf64_Phdr:
>                  p_type: 4 (PT_NOTE)
>                p_offset: 288 (120)
>                 p_vaddr: 0
>                 p_paddr: 0
>                p_filesz: 1048 (418)
>                 p_memsz: 1048 (418)
>                 p_flags: 0 ()
>                 p_align: 0
> Elf64_Phdr:
>                  p_type: 1 (PT_LOAD)
>                p_offset: 1336 (538)
>                 p_vaddr: c000000000000000
>                 p_paddr: 0
>                p_filesz: 32768 (8000)
>                 p_memsz: 32768 (8000)
>                 p_flags: 7 (PF_X|PF_W|PF_R)
>                 p_align: 0
> Elf64_Phdr:
>                  p_type: 1 (PT_LOAD)
>                p_offset: 34104 (8538)
>                 p_vaddr: c000000000008000
>                 p_paddr: 8000
>                p_filesz: 33521663 (1ff7fff)
>                 p_memsz: 33521663 (1ff7fff)
>                 p_flags: 7 (PF_X|PF_W|PF_R)
>                 p_align: 0
> Elf64_Phdr:
>                  p_type: 1 (PT_LOAD)
>                p_offset: 33555767 (2000537)
>                 p_vaddr: c00000002fd0f001
>                 p_paddr: 2fd0f001
>                p_filesz: 3492745215 (d02f0fff)
>                 p_memsz: 3492745215 (d02f0fff)
>                 p_flags: 7 (PF_X|PF_W|PF_R)
>                 p_align: 0
>
> Looks like that address is in a hole between PT_LOAD segments 2 and 3.

Right, but something is fundamentally wrong with your
vmcore:

                  p_paddr  p_filesz
First segment:          0      8000
Second segment:      8000   1ff7fff
Third segment:   2fd0f001  d02f0fff

It cannot have a p_paddr address that is not page-aligned,
nor can you have a p_filesz that is not page-aligned.

Dave

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/crash-utility/attachments/20060504/a71731e2/attachment.htm>