linux-kernel - Re: Question about core file generation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Thu, 26 Jul 2007 10:38:48 +0800
From:	Carlo Florendo <subscribermail@...il.com>
To:	"Ravinandan Arakali (rarakali)" <rarakali@...co.com>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: Question about core file generation

Ravinandan Arakali (rarakali) wrote:
> Hi,
> When a process dumps core, the do_coredump() initiates the core
> file generation. Is this operation synchronous(does the kernel
> wait for core to be completely written to disk) ?

The operations whereby

(1) a process is in the process of exiting while;
(2) the kernel is doing a coredump

is asynchronous with respect to each other, since the process could have 
received an abort signal while the the kernel initiated the core dump.

> Basically, if I have the parent process waiting for exit of
> child which dumped core, can the parent access the core immediately
> on receipt of "child exit" message ? Is it possible that the
> core is still in the process of being written ? If so, what's
> the event the parent needs to wait for to be assured of a complete
> core.

When a child exits, check if the core dump file is still opened by a handle 
(HINT: lsof).

AFAICS from the kernel code, the core dump data or file routine is mutexed 
to ensure that there is only one process handling the core dump file.

You could check if there are still open file handles on the dump.  If there 
are none, it means that the dump had been completed.

HTH.

Best Regards,

Carlo

-- 
Carlo Florendo
Softare Engineer/Network Co-Administrator
Astra Philippines Inc.
UP-Ayala Technopark, Diliman 1101, Quezon City
Philippines
http://www.astra.ph

--
The Astra Group of Companies
5-3-11 Sekido, Tama City
Tokyo 206-0011, Japan
http://www.astra.co.jp
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/