Method and system for analyzing system crash

By acquiring and analyzing Ramdump information within the system, the problem of needing to save symbol files and relying on external software for parsing in existing technologies is solved, thus achieving efficient system crash analysis.

CN122064516APending Publication Date: 2026-05-19QISDA SUZHOU
View PDF 0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
QISDA SUZHOU
Filing Date
2025-12-29
Publication Date
2026-05-19

AI Technical Summary

Technical Problem

Existing technologies require saving symbol files of various versions and rely on external software to parse Ramdump data when the system crashes, which is time-consuming and affected by network conditions.

Method used

The system obtains parameter sets through the system interface, captures Ramdump information and useful information and stores them in a specified partition, and uses the useful information to analyze the data to find clues to system crashes, eliminating the need for symbol file saving and external software parsing.

Benefits of technology

It enables direct capture and analysis of Ramdump data within the system, avoiding version mismatch errors and network dependencies, improving parsing efficiency and saving storage space.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122064516A_ABST
    Figure CN122064516A_ABST
Patent Text Reader

Abstract

The invention provides a method and system for analyzing system crash, and the method for analyzing the system crash comprises the following steps: firstly, obtaining a parameter group through a system interface; then, marking a parameter group; then, when the system crashes, grabbing the Ramdump information and the useful information in the parameter group; thirdly, storing the Ramdump information and the useful information into a specified partition; analyzing data in the Ramdump information by using the useful information so as to find clues of system crash; in this way, the Ramdump data can be directly grabbed and analyzed without additionally storing and keeping symbol files of various versions and without an analysis function provided by additional external software.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to a method and system for resolving system crashes, and more particularly to a method and system for resolving system crashes without relying on additional software. Background Technology

[0002] As a device system, various failures are inevitable, and system crashes are one of them. When a system crash occurs, developers need to rely on various debugging mechanisms to analyze and locate the problem. Some platforms already provide a Ramdump mechanism, which can save the entire contents of RAM when a system crashes, and then parse the data to reconstruct some clues about when the problem occurred.

[0003] The existing mechanisms and processes vary slightly depending on the platform, but the general principles are similar. The mechanisms and processes are as follows: During compilation, the symbol files (vmlinux and elf) corresponding to this version of the software are saved, typically on a server computer. When the system crashes, the running device captures the data stored in RAM at the crash site; this capture action is called Ramdump, and the captured data is called Ramdump data. The Ramdump data is then parsed using the parsing function provided by external software on the computer. The existing mechanisms and processes require saving a copy of the symbol file for each version of the software on the server. When external parsing is needed, the entire Ramdump data and symbol file often need to be uploaded, which is time-consuming and affected by network conditions.

[0004] Therefore, it is necessary to design a new method and system for analyzing system crashes in order to overcome the above-mentioned defects. Summary of the Invention

[0005] The purpose of this invention is to provide a method and system for parsing system crashes, which can directly capture and analyze Ramdump data without the need for additional storage and preservation of symbol files for different versions or the need for parsing functions provided by additional external software.

[0006] To achieve the above objectives, the present invention provides a method for analyzing system crashes, comprising the following steps: obtaining a parameter group using a system interface; recording the parameter group; when the system crashes, capturing Ramdump information and useful information from the parameter group; storing the Ramdump information and useful information in a designated partition; and using the useful information to analyze the data in the Ramdump information to find clues about the system crash.

[0007] Preferably, the steps include: starting the system; when the system is running, finding the location address through the system interface via system functions; and obtaining the parameter group through the location address.

[0008] Preferably, the steps include: when the system crashes, reading the information value of the location address; storing the information value, the Ramdump information, and the useful information into the designated partition.

[0009] Preferably, the steps include: when the system crash is resolved, reading the information value, the Ramdump information, and the useful information of the specified partition; calling the resolution unit to analyze the information value, the Ramdump information, and the useful information to find clues about the system crash.

[0010] Preferably, the parsing unit, the Ramdump information, and the useful information are all stored in the system.

[0011] Preferably, the steps include: providing a UI interface through the system; and obtaining the Ramdump information and useful information through the UI interface after the system crashes to find clues about the system crash.

[0012] Ideally, the system is based on a Linux or Android platform.

[0013] The present invention also provides a system with a crash analysis function, comprising: a system interface; a control unit coupled to the system interface; and a storage unit coupled to the control unit; wherein the control unit uses the system interface to obtain a parameter group, and the control unit marks the parameter group; when the system crashes, the control unit captures Ramdump information and useful information from the parameter group, the control unit stores the Ramdump information and the useful information in a designated partition of the storage unit, and the control unit uses the useful information to analyze the data in the Ramdump information to find clues to the system crash.

[0014] Preferably, the system is based on a Linux or Android platform. When the system is running, the control unit finds the location address through the system interface via system functions; the control unit obtains the parameter group through the location address.

[0015] Preferably, the system also includes a parsing unit coupled to the control unit. When the system crashes, the control unit reads the information value of the location address; the control unit stores the information value, the Ramdump information, and the useful information into the designated partition of the storage unit; when the system crashes, the control unit reads the information value, the Ramdump information, and the useful information from the designated partition of the storage unit; the control unit calls the parsing unit to analyze the information value, the Ramdump information, and the useful information to find clues about the system crash.

[0016] Compared with existing technologies, this invention provides a method and system for analyzing system crashes. The system for analyzing system crashes includes a system interface, a control unit, and a storage unit. The control unit is coupled to both the system interface and the storage unit. The control unit uses the system interface to obtain a parameter set and marks the parameter set. When a system crash occurs, the control unit captures Ramdump information and useful information from the parameter set. The control unit stores the Ramdump information and useful information in a designated partition of the storage unit. The control unit uses the useful information to analyze the data in the Ramdump information to find clues about the system crash. Thus, it eliminates the need for additional storage and management of symbol files for different versions and eliminates the need for external software to provide parsing functions, enabling direct capture and analysis of Ramdump data. Attached Figure Description

[0017] Figure 1 This is a schematic diagram of a system with a breakdown resolution function proposed according to an embodiment of the present invention.

[0018] Figure 2 This is a schematic diagram of a method for analyzing system crashes according to an embodiment of the present invention.

[0019] Figure 3 This is a block diagram illustrating a method for resolving system crashes according to an embodiment of the present invention. Detailed Implementation

[0020] To provide a better understanding of the purpose, structure, features and functions of the present invention, detailed descriptions are provided below with reference to specific embodiments.

[0021] Reference Figure 1 As shown, Figure 1This is a schematic diagram of a system with crash parsing functionality according to an embodiment of the present invention. The embodiment of the present invention provides a system 100 with parsing functionality, which includes a system interface 11, a control unit 12, and a storage unit 13. The control unit 12 is coupled to both the system interface 11 and the storage unit 13. The control unit 12 uses the system interface 11 to obtain a parameter set and marks the parameter set. When the system crashes, the control unit 12 captures Ramdump information and useful information from the parameter set, stores the Ramdump information and useful information in a designated partition of the storage unit 13, and uses the useful information to analyze the data in the Ramdump information to find clues about the system crash. Thus, it is possible to directly capture and analyze Ramdump data of system crash log information without the need for additional storage and management of symbol files for different versions or the need for parsing functionality provided by additional external software.

[0022] Reference Figure 1 As shown, the system 100 with parsing capabilities is based on a Linux or Android platform, with different system interfaces 11 corresponding to different platforms. The system 100 with parsing capabilities searches for parameter groups using the system function `kallsyms_lookup_name` on either Linux or Android. Specifically, the system 100 with parsing capabilities has a kernel log, which is a circular buffer containing global variables that record location-related information within the circular buffer. Assuming one of these global variables is A, when the system 100 with parsing capabilities boots on a Linux or Android platform, during its runtime phase, the control unit 12 uses the system function `kallsyms_lookup_name` and system interface 11 to find the location address of A. The control unit 12 then retrieves the parameter group using this location address. This eliminates the need for saving and managing symbol files, avoids version matching errors during parsing due to differing symbol information between versions, and saves significant storage space.

[0023] Reference Figure 1 As shown, when the system 100 with parsing function crashes, the control unit 12 reads the information value of the location address; the control unit 12 stores the information value, Ramdump information, and useful information into a designated partition of the storage unit 13. In specific implementation, when the system 100 with parsing function crashes, the control unit 12 reads the current information value from address A and stores the information value, Ramdump information, and useful information into a designated partition for parsing during the parsing phase. In this way, the original location address search process is moved from the parsing phase to the runtime phase, improving parsing efficiency.

[0024] Reference Figure 1 As shown, the system 100 with parsing function also includes a parsing unit 14, which is coupled to the control unit 12. When the parsing system crashes, the control unit 12 reads the information values, Ramdump information, and useful information from a designated partition of the storage unit 13. The control unit 12 calls the parsing unit 14 to analyze the information values, Ramdump information, and useful information to find clues about the system crash. In specific implementation, during the parsing phase, the parsing unit 14 directly reads the information values, Ramdump information, and useful information, avoiding the time-consuming process of uploading Ramdump information and symbol information, which could lead to parsing failure under poor network conditions.

[0025] Reference Figure 1 As shown, the system 100 with parsing capabilities also includes a UI interface 15, which is coupled to the control unit 12. The UI interface 15 can be a device-side interface or a mobile interface, depending on the actual situation, and is not limited thereto. The system 100 with parsing capabilities provides the UI interface 15. When the system crashes, the control unit 12 obtains Ramdump information and useful information through the UI interface 15 to find clues about the system crash. Users can check whether a kernel crash has occurred on the UI interface 15 and directly display the Ramdump kernel log.

[0026] Reference Figure 1 As shown, the parsing unit 14, Ramdump information, and useful information of the system 100 with parsing function are all stored in the system. In specific implementation, the parsing unit 14 parses the Ramdump information and useful information on the device side. The parsing process can be performed directly on the device side, so it does not depend on the computer environment and has low requirements for user operation.

[0027] Refer to together Figure 2 As shown, Figure 2This is a schematic diagram of a method for analyzing system crashes according to an embodiment of the present invention. The embodiment of the present invention also provides a method 101 for analyzing system crashes, which includes the following steps: First, step S110 is executed to obtain a parameter group using system interface 11; next, step S112 is executed to mark the parameter group; next, step S114 is executed to capture Ramdump information and useful information from the parameter group when the system crashes; next, step S116 is executed to store the Ramdump information and useful information in a designated partition; next, step S118 is executed to analyze the data in the Ramdump information using the useful information to find clues about the system crash. Thus, it is possible to directly capture and analyze Ramdump data without the need for additional storage and management of symbol files for different versions or the need for additional external software to provide parsing functions.

[0028] In a preferred implementation, the system 100 with parsing capabilities is started. When the system 100 is running, the location address is found through the system interface 11 via system functions, and the parameter set is obtained through the location address. Specifically, the system 100 with parsing capabilities is started on a Linux or Android platform. During the running phase of the system 100 with parsing capabilities, the control unit 12 finds the location address of A through the system function kallsyms_lookup_name and the system interface 11, and the control unit 12 obtains the parameter set through the location address. This eliminates the need for saving and managing symbol files, avoids version matching errors during parsing due to different versions of symbol information, and saves significant storage space.

[0029] In a preferred implementation, when the system 100 with parsing capabilities crashes, the information value of the location address is read; the information value, Ramdump information, and useful information are stored in a designated partition. Specifically, when the system 100 with parsing capabilities crashes, the current information value of the location address is read, and the information value, Ramdump information, and useful information are stored in a designated partition for parsing during the parsing phase. In this way, the original location address search process is moved from the parsing phase to the runtime phase, improving parsing efficiency.

[0030] In a preferred implementation, when the system 100 with parsing capabilities crashes, it reads the information value, Ramdump information, and useful information from a specified partition; it then calls the parsing unit 14 to analyze the information value, Ramdump information, and useful information to find clues about the system crash. Specifically, the parsing unit 14, Ramdump information, and useful information are all stored in the system. During the parsing phase, the parsing unit 14 directly reads the information value, Ramdump information, and useful information on the device side for parsing. The parsing process can be performed directly on the device side, avoiding the time-consuming process of uploading Ramdump information and symbol information requiring external processing software or web page processing, which could lead to parsing failures under poor network conditions. Furthermore, it is not dependent on a computer environment and has low operational requirements for the user.

[0031] A preferred implementation involves providing a user interface (UI) through the system. When the system 100 with parsing capabilities crashes, the UI 15 retrieves Ramdump information and other useful information to help find clues about the system crash. Specifically, the UI 15 can be a device-side interface or a mobile interface. After a system crash, the control unit 12 retrieves Ramdump information and other useful information through the UI 15 to help find clues about the system crash.

[0032] Reference Figure 1 and Figure 3 As shown, Figure 3 This is a block diagram illustrating a method for parsing system crashes according to an embodiment of the present invention. Stage 1: Compilation stage. The system 100 with parsing capabilities omits the compilation stage, eliminating the need for additional storage and management of symbol files. Stage 2: Runtime stage. Useful information is found and marked using the system interface 11. When the system 100 crashes, Ramdump information and other useful information are captured and stored in a designated partition. Stage 3: Parsing stage. The useful information saved at the time of the crash is directly retrieved from the designated partition of the device, and the data in the Ramdump is analyzed using this useful information. Thus, it is possible to directly capture and analyze Ramdump data without the need for additional storage and management of symbol files for different versions or the need for parsing functions provided by external software.

[0033] In summary, this invention provides a method and system for analyzing system crashes. The method includes the following steps: First, obtaining a parameter group using a system interface; next, marking the parameter group; then, when the system crashes, capturing Ramdump information and useful information from the parameter group; next, storing the Ramdump information and useful information in a designated partition; and finally, using the useful information to analyze the data in the Ramdump information to find clues about the system crash. Thus, it eliminates the need for additional storage and management of symbol files for different versions and eliminates the need for external software to provide parsing functions, enabling direct capture and analysis of Ramdump data.

[0034] Although the invention has been described in conjunction with the accompanying drawings, the embodiments disclosed in the drawings are intended to illustrate preferred embodiments of the invention and should not be construed as limiting the invention. The scale in the schematic drawings does not represent the actual proportions of the components, in order to clearly describe the required parts.

[0035] The present invention has been described in the above-described embodiments; however, these embodiments are merely examples for implementing the present invention. It must be noted that the disclosed embodiments do not limit the scope of the present invention. Conversely, any modifications and refinements made without departing from the spirit and scope of the present invention are within the scope of patent protection of the present invention.

Claims

1. A method for analyzing system crashes, characterized in that, The steps include the following: Obtain the parameter set using the system interface; Mark this parameter group; When the system crashes, capture the Ramdump information and useful information from this parameter group; Store the Ramdump information and the useful information into the specified partition; as well as Use this useful information to analyze the data in the Ramdump message to look for clues about the system crash.

2. The method for analyzing system crashes as described in claim 1, characterized in that, The steps include the following: Start the system; When the system is running, the location address is found through system functions at the system interface; and The parameter group is obtained through this location address.

3. The method for analyzing system crashes as described in claim 2, characterized in that, The steps include the following: When the system crashes, read the information value of that location address; Store the information value, the Ramdump information, and the useful information into the specified partition.

4. The method for analyzing system crashes as described in claim 3, characterized in that, The steps include the following: When the system crashes, read the information value, the Ramdump information, and the useful information of the specified partition. The parsing unit is invoked to analyze the information value, the Ramdump information, and the useful information to find clues to the system crash.

5. The method for analyzing system crashes as described in claim 4, characterized in that, The parsing unit, the Ramdump information, and the useful information are all stored in this system.

6. The method for analyzing system crashes as described in claim 1, characterized in that, The steps include the following: This system provides a user interface; When the system crashes, the Ramdump information and useful information can be obtained through the UI to find clues about the system crash.

7. The method for analyzing system crashes as described in claim 1, characterized in that, The system is based on the Linux or Android platform.

8. A system with a crash parsing function, characterized in that, include: System interface; The control unit is coupled to the system interface; as well as The storage unit is coupled to the control unit; The control unit uses the system interface to obtain a parameter group and marks the parameter group. When the system crashes, the control unit captures the Ramdump information and useful information in the parameter group, stores the Ramdump information and useful information in a designated partition of the storage unit, and uses the useful information to analyze the data in the Ramdump information to find clues about the system crash.

9. The system with parsing crash function as described in claim 8, characterized in that, The system is based on a Linux or Android platform. When the system is running, the control unit finds the location address through the system interface via system functions; the control unit then obtains the parameter set through the location address.

10. The system with parsing crash function as described in claim 9, characterized in that, It also includes a parsing unit coupled to the control unit. When the system crashes, the control unit reads the information value of the location address; the control unit stores the information value, the Ramdump information, and the useful information into the designated partition of the storage unit; when the system crashes, the control unit reads the information value, the Ramdump information, and the useful information from the designated partition of the storage unit; the control unit calls the parsing unit to analyze the information value, the Ramdump information, and the useful information to find clues about the system crash.