[Crash-utility] [PATCH] Expanded search capability for crash
Dave Anderson
anderson at redhat.com
Fri Feb 25 17:26:04 UTC 2011
----- Original Message -----
> This patch adds options to crash's search command that allow searches
> for character strings (-c), unsigned hexadecimal integer values (-w),
> and unsigned hexadecimal short values (-h). The integer and short
> values are searched on integer and short alignments respectively.
>
> Strings are searched across contiguous page boundaries, which can cause
> possibly confusing behavior since contiguity is affected by the type of
> search. For example, a page-crossing string found in a user virtual
> address search might not be found in a kernel virtual address search if
> the kernel pages mapped to the user address space are not contiguous.
>
> The patch is for crash-5.1.2 and has been tested on an x86_64 system.
>
>
> Some last minute caveats on with search due to the parser (worth putting
> in help?):
>
> All numbers are interpreted as hex numbers, regardless of starting
> character.
>
> Double quotes are magic to crash's parser, so strings of almost anything
> can be enclosed in "", for example: "can't".
>
> Single quotes mean nothing, so searching for 'dog' is the same as
> searching for "'dog'".
Queued for crash-5.1.3 -- really nice addition, Bob.
Thanks,
Dave
More information about the Crash-utility
mailing list