Re: Custom core file

[Nikolay Martyanov <nmartyanov at ptsecurity dot com>]

On 09/28/2016 06:31 PM, duane@duaneellis.com wrote:
> > > So, I guess, dump/restore approach works only in two cases:
> > > a) debugging live process you have attached to (it's not my case, as I
> > > perform postmortem debug)
> > > b) already has loaded core file, which provides a context via saved CPU
> > > state - and it is the way I chose to follow.
> For step (B) - first load a dummy (tiny) standard core file - that gives
> you a debug context, think of it as a shim.
>
> Then proceed with adding your symbols and using dump/restore to load
> your image.
At first I tried to restore memory in a case of fake core file 
(according to your advice). Looks like it's impossible, cause it still 
asks for a process. `Restore` doesn't work with core file debugging, I 
guess.

But now I have one other idea =)