Accelerated Linux Core Dump Analysis, Third Edition
Accelerated Linux Core Dump Analysis, Third Edition
Training Course Transcript with GDB and WinDbg Practice Exercises
About the Book
The full transcript of Software Diagnostics Services training. Learn how to analyze Linux process and kernel crashes and hangs, navigate through core memory dump space and diagnose corruption, memory leaks, CPU spikes, blocked threads, deadlocks, wait chains, and much more. This training uses a unique and innovative pattern-oriented diagnostic analysis approach to speed up the learning curve. The training consists of 47 practical step-by-step exercises using GDB and WinDbg debuggers, highlighting almost 40 memory analysis patterns diagnosed in 64-bit core memory dumps from x64 and ARM64 platforms. The training also includes source code of modeling applications, a catalog of relevant patterns from the Software Diagnostics Institute, and an overview of relevant similarities and differences between Windows and Linux memory dump analysis useful for engineers with a Wintel background. In addition to various improvements, the third edition includes a review of relevant x64 and ARM64 disassembly and a new set of ARM64 GDB exercises.
About the Author
Table of Contents
About the Author
Presentation Slides and Transcript 9
Core Dump Collection 31
x64 Disassembly 41
ARM64 Disassembly 53
Practice Exercises 65
Exercise 0 (x64, GDB) 70
Exercise 0 (A64, GDB) 72
Exercise 0 (A64, WinDbg Preview, WinDbg, Docker) 74
Exercise A1 (x64, GDB) 90
Exercise A1 (A64, GDB) 102
Exercise A1 (A64, WinDbg Preview) 117
Exercise A2D (x64, GDB) 134
Exercise A2D (A64, GDB) 138
Exercise A2D (A64, WinDbg Preview) 141
Exercise A2C (x64, GDB) 145
Exercise A2C (A64, GDB) 148
Exercise A2C (A64, WinDbg Preview) 151
Exercise A2S (x64, GDB) 156
Exercise A2S (A64, GDB) 159
Exercise A3 (x64, GDB) 163
Exercise A3 (A64, GDB) 166
Exercise A3 (A64, WinDbg Preview) 171
Exercise A4 (x64, GDB) 176
Exercise A4 (A64, GDB) 182
Exercise A4 (A64, WinDbg Preview) 188
Exercise A5 (x64, GDB) 195
Exercise A5 (A64, GDB) 198
Exercise A5 (A64, WinDbg Preview) 201
Exercise A6 (x64, GDB) 206
Exercise A6 (A64, GDB) 221
Exercise A6 (A64, WinDbg Preview) 237
Exercise A7 (x64, GDB) 264
Exercise A8 (x64, GDB) 270
Exercise A8 (A64, GDB) 285
Exercise A8 (A64, WinDbg Preview) 303
Exercise A9 (x64, GDB) 327
Exercise A9 (A64, GDB) 342
Exercise A9 (A64, WinDbg Preview) 356
Exercise A10 (x64, GDB) 370
Exercise A10 (A64, GDB) 384
Exercise A10 (A64, WinDbg Preview) 391
Exercise A11 (x64, GDB) 400
Exercise A11 (A64, GDB) 410
Exercise A11 (A64, WinDbg Preview) 421
Exercise A12 (x64, GDB) 430
Exercise A12 (A64, GDB) 440
Exercise A12 (A64, WinDbg Preview) 449
Exercise K1 (x64, GDB) 459
Exercise K2 (x64, GDB) 509
Exercise K3 (x64, GDB) 524
Exercise K4 (x64, GDB) 537
Exercise K5 (x64, GDB) 562
Selected Q&A 571
App Source Code 579
App0 581
App1 582
App2D 583
App2C 585
App2S 587
App3 589
App4 591
App5 593
App6 595
App7 597
App8 599
App9 602
App10 604
App11 / App12 606
K2 608
K3 609
K4 611
K5 613
Selected Analysis Patterns 615
NULL Pointer (Data) 617
Incomplete Stack Trace 618
Stack Trace 619
NULL Pointer (Code) 620
Spiking Thread 621
Dynamic Memory Corruption (Process Heap) 622
Execution Residue (User Space) 623
Coincidental Symbolic Information 625
Stack Overflow (User Mode) 626
Divide by Zero (User Mode) 627
Local Buffer Overflow (User Space) 628
C++ Exception 629
Paratext 630
Active Thread 632
Lateral Damage 633
Critical Region 634
Other books by this author
The Leanpub 60 Day 100% Happiness Guarantee
Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
Now, this is technically risky for us, since you'll have the book or course files either way. But we're so confident in our products and services, and in our authors and readers, that we're happy to offer a full money back guarantee for everything we sell.
You can only find out how good something is by trying it, and because of our 100% money back guarantee there's literally no risk to do so!
So, there's no reason not to click the Add to Cart button, is there?
See full terms...
80% Royalties. Earn $16 on a $20 book.
We pay 80% royalties. That's not a typo: you earn $16 on a $20 sale. If we sell 5000 non-refunded copies of your book or course for $20, you'll earn $80,000.
(Yes, some authors have already earned much more than that on Leanpub.)
In fact, authors have earnedover $13 millionwriting, publishing and selling on Leanpub.
Learn more about writing on Leanpub
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
