Query: Can gdb analyze ELF64 core files for i386

[vivek goyal <vgoyal at in dot ibm dot com>]

Hi,

I have created a core file (Representing physical memory) for i386
system in ELF64 format. Can gdb open and analyze this file?

I am having some problems in opening the core file. Below mentioned are
all the details. Any idea what is wrong??

Thanks
Vivek


#> gdb vmlinux vmcore

Following is the error message.

*********************************************************************
GNU gdb Red Hat Linux (6.1post-1.20040607.41rh)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i386-redhat-linux-gnu"...Using host
libthread_db library "/lib/tls/libthread_db.so.1".

"/home/vivek/main/del/vmcore" is not a core dump: File format not
recognized
*********************************************************************

Little debugging shows that bfd_check_format() (corelow.c) fails to
recognize the file as bfd_core type.

I had read elf headers using readelf program and following is the
output.

*****************************************************************
[vivek@t42dz30 del]$ readelf -a vmcore
ELF Header:
  Magic:   7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00
  Class:                             ELF64
  Data:                              2's complement, little endian
  Version:                           1 (current)
  OS/ABI:                            UNIX - System V
  ABI Version:                       0
  Type:                              CORE (Core file)
  Machine:                           Intel 80386
  Version:                           0x1
  Entry point address:               0x0
  Start of program headers:          64 (bytes into file)
  Start of section headers:          0 (bytes into file)
  Flags:                             0x0
  Size of this header:               64 (bytes)
  Size of program headers:           56 (bytes)
  Number of program headers:         3
  Size of section headers:           0 (bytes)
  Number of section headers:         0
  Section header string table index: 0

There are no sections in this file.

There are no section groups in this file.

Program Headers:
  Type           Offset             VirtAddr           PhysAddr
                 FileSiz            MemSiz              Flags  Align
  NOTE           0x00000000000000e8 0x0000000000000000
0x0000000000000000
                 0x0000000000000520 0x0000000000000520         0
  LOAD           0x0000000000000608 0x00000000c0000000
0x0000000000000000
                 0x00000000000a0000 0x00000000000a0000  RWE    0
  LOAD           0x00000000000a0608 0x00000000c0100000
0x0000000000100000
                 0x000000001ff00000 0x000000001ff00000  RWE    0

There is no dynamic section in this file.

There are no relocations in this file.

There are no unwind sections in this file.

No version information found in this file.

Notes at offset 0x000000e8 with length 0x00000520:
  Owner         Data size       Description
  CORE          0x00000090      NT_PRSTATUS (prstatus structure)
  CORE          0x00000090      NT_PRSTATUS (prstatus structure)
  CORE          0x00000090      NT_PRSTATUS (prstatus structure)
  CORE          0x00000090      NT_PRSTATUS (prstatus structure)
  CORE          0x00000090      NT_PRSTATUS (prstatus structure)
  CORE          0x00000090      NT_PRSTATUS (prstatus structure)
  CORE          0x00000090      NT_PRSTATUS (prstatus structure)
  CORE          0x00000090      NT_PRSTATUS (prstatus structure)
*************************************************************************