Dump memory of a process

前端 未结 3 2042
故里飘歌
故里飘歌 2020-12-23 18:44

When reading the /proc/$PID/maps you get the mapped memory regions. Is ther a way to dump one of this regions?

$ cat /proc/18448/maps
...[snip]...
0059e000-         


        
3条回答
  •  执笔经年
    2020-12-23 18:52

    You can attach gdb to the process then dump memory region of length X words starting at location L with this: x/Xw L.

    Attaching gdb when you start your process is simple: gdb ./executable then run. If you need to attach to a running process, start gdb then gdb attach pid where pid is is the process ID you care about.

提交回复
热议问题