kcore
if (rec->opts.kcore &&
if (rec->opts.kcore) {
OPT_BOOLEAN(0, "kcore", &record.opts.kcore, "copy /proc/kcore"),
if (rec->opts.kcore)
if (rec->opts.kcore || record__threads_enabled(rec))
char kcore[PATH_MAX];
scnprintf(kcore, sizeof(kcore), "%s/proc/kcore", machine->root_dir);
fd = open(kcore, O_RDONLY);
bool kcore;
static int kcore__open(struct kcore *kcore, const char *filename)
kcore->fd = open(filename, O_RDONLY | O_CLOEXEC);
if (kcore->fd == -1)
kcore->elf = elf_begin(kcore->fd, ELF_C_READ, NULL);
if (!kcore->elf)
kcore->elfclass = gelf_getclass(kcore->elf);
if (kcore->elfclass == ELFCLASSNONE)
ehdr = gelf_getehdr(kcore->elf, &kcore->ehdr);
elf_end(kcore->elf);
close(kcore->fd);
static int kcore__init(struct kcore *kcore, char *filename, int elfclass,
kcore->elfclass = elfclass;
kcore->fd = mkostemp(filename, O_CLOEXEC);
kcore->fd = open(filename, O_WRONLY | O_CREAT | O_EXCL | O_CLOEXEC, 0400);
if (kcore->fd == -1)
kcore->elf = elf_begin(kcore->fd, ELF_C_WRITE, NULL);
if (!kcore->elf)
if (!gelf_newehdr(kcore->elf, elfclass))
memset(&kcore->ehdr, 0, sizeof(GElf_Ehdr));
elf_end(kcore->elf);
close(kcore->fd);
static void kcore__close(struct kcore *kcore)
elf_end(kcore->elf);
close(kcore->fd);
static int kcore__copy_hdr(struct kcore *from, struct kcore *to, size_t count)
static int kcore__add_phdr(struct kcore *kcore, int idx, off_t offset,
if (!gelf_update_phdr(kcore->elf, idx, &phdr))
static off_t kcore__write(struct kcore *kcore)
return elf_update(kcore->elf, ELF_C_WRITE);
struct kcore kcore;
struct kcore extract;
if (kcore__open(&kcore, kcore_filename))
if (kcore_copy__calc_maps(&kci, from_dir, kcore.elf))
if (kcore__init(&extract, extract_filename, kcore.elfclass, false))
if (kcore__copy_hdr(&kcore, &extract, kci.phnum))
if (copy_bytes(kcore.fd, p->offset, extract.fd, offs, p->len))
kcore__close(&kcore);
struct kcore kcore;
struct kcore extract;
if (kcore__open(&kcore, kce->kcore_filename))
if (kcore__init(&extract, kce->extract_filename, kcore.elfclass, true))
if (kcore__copy_hdr(&kcore, &extract, count))
if (copy_bytes(kcore.fd, kce->offs, extract.fd, offset, kce->len))
kcore__close(&kcore);