Sungju's Slow Life

Personal journal


Find binary path of a process in vmcore

In general, vmcore does not containing user space data which is useful to check process related information. If the vmcore is collected with user space data as well, you can use ps -a <pid> to get some process details like below.

It still doesn’t show binary path, though.

To get binary details, you can use mm_struct.exe_file as shown in the below.

If this steps are too much, you can use psinfo -t <task addr> from my pycrashext extension located at https://github.com/sungju/pycrashext.



Leave a comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.