mbox series

[0/5] elf2dmp: improve Win2022, Win11 and large dumps

Message ID 20230913224657.11606-1-viktor@daynix.com
Headers show
Series elf2dmp: improve Win2022, Win11 and large dumps | expand

Message

Viktor Prutyanov Sept. 13, 2023, 10:46 p.m. UTC 
Windows Server 2022 and Windows 11 require more careful kernel PE image
search and handling of PDB than previous Windows versions.
Also, improve support of large ELF dump files, dumps with unaligned
memory ranges and with big number of ranges.

Viktor Prutyanov (5):
  elf2dmp: replace PE export name check with PDB name check
  elf2dmp: introduce physical block alignment
  elf2dmp: introduce merging of physical memory runs
  elf2dmp: use Linux mmap with MAP_NORESERVE when possible
  elf2dmp: rework PDB_STREAM_INDEXES::segments obtaining

 contrib/elf2dmp/addrspace.c |  31 +++++++-
 contrib/elf2dmp/addrspace.h |   1 +
 contrib/elf2dmp/main.c      | 154 ++++++++++++++++++++----------------
 contrib/elf2dmp/pdb.c       |  10 +--
 contrib/elf2dmp/qemu_elf.c  |  66 +++++++++++++---
 contrib/elf2dmp/qemu_elf.h  |   4 +
 6 files changed, 175 insertions(+), 91 deletions(-)