Accelerated Linux Core Dump Analysis, Second Edition, Revised and Extended
Accelerated Linux Core Dump Analysis, Second Edition, Revised and Extended
Training Course Transcript with GDB and WinDbg Practice Exercises
About the Book
The full transcript of Software Diagnostics Services training. Learn how to analyze Linux process and kernel crashes and hangs, navigate through core memory dump space and diagnose corruption, memory leaks, CPU spikes, blocked threads, deadlocks, wait chains, and much more. This training uses a unique and innovative pattern-oriented diagnostic analysis approach to speed up the learning curve. The training consists of 30 practical step-by-step exercises using GDB and WinDbg debuggers highlighting almost 40 memory analysis patterns diagnosed in 64-bit core memory dumps from x64 and ARM64 platforms. The training also includes source code of modeling applications, a catalog of relevant patterns from Software Diagnostics Institute, and an overview of relevant similarities and differences between Windows and Linux memory dump analysis useful for engineers with Wintel background. In addition to the fully revised x64 Linux process dump analysis exercises using GDB, the second edition now includes x64 Linux kernel core dump analysis using crash tool and ARM64 Linux process dump analysis using WinDbg. The new revised and extended edition includes additional kernel core dump analysis exercises.
Table of Contents
About the Author 7
Presentation Slides and Transcript 9
Core Dump Collection 31
Practice Exercises 41
Exercise 0 (x64, GDB) 46
Exercise 0 (A64, WinDbg Preview, WinDbg, Docker) 48
Exercise A1 (x64, GDB) 64
Exercise A1 (A64, WinDbg Preview) 76
Exercise A2D (x64, GDB) 93
Exercise A2D (A64, WinDbg Preview) 97
Exercise A2C (x64, GDB) 101
Exercise A2C (A64, WinDbg Preview) 104
Exercise A2S (x64, GDB) 109
Exercise A3 (x64, GDB) 113
Exercise A3 (A64, WinDbg Preview) 116
Exercise A4 (x64, GDB) 121
Exercise A4 (A64, WinDbg Preview) 127
Exercise A5 (x64, GDB) 134
Exercise A5 (A64, WinDbg Preview) 137
Exercise A6 (x64, GDB) 142
Exercise A6 (A64, WinDbg Preview) 157
Exercise A7 (x64, GDB) 184
Exercise A8 (x64, GDB) 190
Exercise A8 (A64, WinDbg Preview) 205
Exercise A9 (x64, GDB) 229
Exercise A9 (A64, WinDbg Preview) 244
Exercise A10 (x64, GDB) 258
Exercise A10 (A64, WinDbg Preview) 271
Exercise A11 (x64, GDB) 280
Exercise A11 (A64, WinDbg Preview) 289
Exercise A12 (x64, GDB) 297
Exercise A12 (A64, WinDbg Preview) 307
Exercise K1 (x64, GDB) 317
Exercise K2 (x64, GDB) 367
Exercise K3 (x64, GDB) 382
Exercise K4 (x64, GDB) 395
Exercise K5 (x64, GDB) 420
Selected Q&A 429
App Source Code 435
App0 437
App1 438
App2D 439
App2C 441
App2S 443
App3 445
App4 447
App5 449
App6 451
App7 453
App8 455
App9 458
App10 460
App11 / App12 462
K2 464
K3 465
K4 467
K5 469
Selected Analysis Patterns 471
NULL Pointer (Data) 473
Incomplete Stack Trace 474
Stack Trace 475
NULL Pointer (Code) 476
Spiking Thread 477
Dynamic Memory Corruption (Process Heap) 478
Execution Residue (User Space) 479
Coincidental Symbolic Information 481
Stack Overflow (User Mode) 482
Divide by Zero (User Mode) 483
Local Buffer Overflow (User Space) 484
C++ Exception 485
Paratext 486
Active Thread 488
Lateral Damage 489
Critical Region 490
Other books by this author
The Leanpub 60 Day 100% Happiness Guarantee
Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
Now, this is technically risky for us, since you'll have the book or course files either way. But we're so confident in our products and services, and in our authors and readers, that we're happy to offer a full money back guarantee for everything we sell.
You can only find out how good something is by trying it, and because of our 100% money back guarantee there's literally no risk to do so!
So, there's no reason not to click the Add to Cart button, is there?
See full terms...
Earn $8 on a $10 Purchase, and $16 on a $20 Purchase
We pay 80% royalties on purchases of $7.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98. You earn $8 on a $10 sale, and $16 on a $20 sale. So, if we sell 5000 non-refunded copies of your book for $20, you'll earn $80,000.
(Yes, some authors have already earned much more than that on Leanpub.)
In fact, authors have earnedover $13 millionwriting, publishing and selling on Leanpub.
Learn more about writing on Leanpub
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them