Reading living process memory without interrupting it

后端 未结 5 1250
独厮守ぢ
独厮守ぢ 2020-12-04 14:41

I would like to explore the memory of a living process, and when I do so, the process must not get disturbed - so attaching gdb to the process (which would stop it) is not a

5条回答
  •  时光说笑
    2020-12-04 15:18

    You'll have to use /proc/pid/mem to read process memory. I wouldn't recommend trying to read /proc/kcore or any of the kernel memory functions (which is time consuming).

提交回复
热议问题