David Wilder wrote:
Right, but something is fundamentally wrong with your
crash -d 2 gave me the header..
Elf64_Phdr:
p_type: 4 (PT_NOTE)
p_offset: 288 (120)
p_vaddr: 0
p_paddr: 0
p_filesz: 1048 (418)
p_memsz: 1048 (418)
p_flags: 0 ()
p_align: 0
Elf64_Phdr:
p_type: 1 (PT_LOAD)
p_offset: 1336 (538)
p_vaddr: c000000000000000
p_paddr: 0
p_filesz: 32768 (8000)
p_memsz: 32768 (8000)
p_flags: 7 (PF_X|PF_W|PF_R)
p_align: 0
Elf64_Phdr:
p_type: 1 (PT_LOAD)
p_offset: 34104 (8538)
p_vaddr: c000000000008000
p_paddr: 8000
p_filesz: 33521663 (1ff7fff)
p_memsz: 33521663 (1ff7fff)
p_flags: 7 (PF_X|PF_W|PF_R)
p_align: 0
Elf64_Phdr:
p_type: 1 (PT_LOAD)
p_offset: 33555767 (2000537)
p_vaddr: c00000002fd0f001
p_paddr: 2fd0f001
p_filesz: 3492745215 (d02f0fff)
p_memsz: 3492745215 (d02f0fff)
p_flags: 7 (PF_X|PF_W|PF_R)
p_align: 0Looks like that address is in a hole between PT_LOAD segments 2 and 3.
p_paddr p_filesz
First segment:
0 8000
Second segment: 8000
1ff7fff
Third segment: 2fd0f001 d02f0fff
It cannot have a p_paddr address that is not page-aligned,
nor can you have a p_filesz that is not page-aligned.
Dave