/dev/mem，/dev/kmem和/proc/kcore有什么区别? [英] What is the difference between /dev/mem, /dev/kmem and /proc/kcore?

问题描述

/dev/mem，/dev/kmem和/proc/kcore有什么区别?

我可以使用objdump和gdb之类的工具来分解其内容吗?

Can I disassemble its contents using tools like objdump and gdb?

推荐答案

/dev/kmem提供对内核虚拟内存空间的访问，而/dev/mem提供对物理内存的访问.

/dev/kmem gives access to the kernel's virtual memory space, and /dev/mem gives access to physical memory.

/proc/kcore是内核虚拟内存空间的ELF core格式的伪文件.您应该能够使用标准的ELF实用程序(例如objdump和gdb)对其进行检查-尽管您可能最好对其进行常规文件复制并进行处理.

/proc/kcore is a pseudofile in ELF core format, of the kernel's virtual memory space. You should be able to examine it with standard ELF utilities, like objdump and gdb - although you will likely better off to make a regular file copy of it and work on that.

这篇关于/dev/mem，/dev/kmem和/proc/kcore有什么区别?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！