| Casper H.S. Dik 2004-11-29, 7:51 am |
| steven_mark_99@yahoo.com (Mark) writes:
>I am talking about FreeBSD here and following is the u area structure
><sys/user.h>
>struct user {
> struct pcb u_pcb;
> struct sigacts u_sigacts; /* p_sigacts points here (use
>it!) */
> struct pstats u_stats; /* p_stats points here (use
>it!) */
> /*
> * Remaining fields only for core dump and/or ptrace--
> * not valid at other times!
> */
> struct kinfo_proc u_kproc; /* proc + eproc */
> struct md_coredump u_md; /* machine dependent glop */
>};
>What I am asking is in the ELF core for the process where do I find
>this information for the concerned process?
The structure does not make sense for Solaris executables.
There's an ELF notes section which has all this information; in
<sys/elf.h> all the "NT_XXXX" sections are defined.
(Notes with name CORE and one of the NT type codes)
Casper
|