WelcomeWelcome | FAQFAQ | DownloadsDownloads | WikiWiki

Author Topic: Kernel DWARF file of tinycore64?  (Read 2052 times)

Offline stephenomiley

  • Newbie
  • *
  • Posts: 2
Kernel DWARF file of tinycore64?
« on: January 26, 2024, 01:17:42 AM »
Hello there,
I wonder if it's possible to get the Linux kernel elf DWARF file of tinycore64 ?
I tried to find something like debug version of tinycore64,but can't find anything similar.

Online Juanito

  • Administrator
  • Hero Member
  • *****
  • Posts: 14570
Re: Kernel DWARF file of tinycore64?
« Reply #1 on: January 26, 2024, 01:44:46 AM »
There are no debug versions of tinycore available, you’d need to recompile whatever you require with the appropriate debug flags enabled.

Offline stephenomiley

  • Newbie
  • *
  • Posts: 2
Re: Kernel DWARF file of tinycore64?
« Reply #2 on: January 28, 2024, 04:57:43 PM »
Thanks for reply,
I'm a noob to linux so it may be too hard for me to recompile.
Sorry for not telling all the details,and this is what I actully met:
I somehow had to analyse a memory dump of a tinycore64(ver 6.1.2),in the format of .vmem file.
I try to use a tool called volatility3 to do this,and it need some info of symbol table.
After reading the tutorial,I know that I had to use a tool called dwarf2json ,to process a DWARF file of the core.
So I came here and post this.I think I may misunderstood something,is there any method to get the symbol table in an easier way?

Offline curaga

  • Administrator
  • Hero Member
  • *****
  • Posts: 10969
Re: Kernel DWARF file of tinycore64?
« Reply #3 on: January 29, 2024, 12:33:56 AM »
No, such debug artifacts are not kept. You will have to build your own kernel if you need such.
The only barriers that can stop you are the ones you create yourself.