Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
Search all memory sections from a core dump for a particular string
readelf -l core | perl -ne 'if (/^\s*LOAD\s+\S+\s+(\S+)\s+\S+\s+(\S+)/) { print "printf \"=== $1 ===\\n\"\nfind $1, +$2, \"Search\"\n" }' > searchmem.gdb
gdb executable core < searchmem.gdb
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment