Nicolas Alvarez wrote:

>> Nicolas Alvarez wrote:

>>>> (I never really understood why programs produce core dumps. I mean, 
>>>> seriously. What chance is there of anybody *ever* deducing anything 
>>>> useful from this data? 10^-78?)
>>>
>>> The original programmer with access to the sourcecode *can* deduce 
>>> data from it.
>>
>> I seriously doubt it...
> 
> Load a core dump on a debugger along with the executable containing 
> debugging info and the sourcecode, and you can pinpoint the line of code 
> that caused the crash, and see the contents of variables at the moment 
> of the crash. That's why coredumps are so big sometimes, they contain 
> all of the process's memory.

You mean even though the memory layout is completely different every 
time the program is run, the debugger can somehow work out which octet 
means what?

Post a reply to this message