29 results about "Core dump" patented technology

Providing issue resolution in a cluster system by monitoring system operation to detect occurrence of a system error, and automatically generating, upon detection of the error condition, a core file for a user node. The core file captures a current memory state of a respective node, where the current memory state comprises system statistics, system information, and logs. An intelligent core debugger extracts information from a core file to generate a core file report that is sent to a vendor for a quick determination of whether sufficient information is in the report to allow the vendor to recommend a fix, or whether further information from is required, including the core file itself, if necessary. This prevents the need to send an entire core file to a vendor in every instance of a system fault.

The embodiment of the invention provides a core dump file generation method and device, electronic equipment and a medium, and relates to the technical field of data processing.The method comprises the steps that in response to abnormity of a target process, a thread causing the abnormity of the target process is determined as a target thread from threads of the target process; retrieving a virtual memory address from a register occupied by the target thread and a stack memory area of the target thread; determining a target address of a data page which belongs to a heap memory area and has mapping from the retrieved virtual memory address; and generating a core dump file containing the data page mapped by the target address. By applying the scheme provided by the embodiment of the invention, the validity of the core dump file can be improved while the size of the core dump file is reduced.

The invention discloses a core dump crash reason positioning method and device, equipment and a storage medium, relates to the technical field of code fault positioning, and discloses a core dump crash reason positioning method, which comprises the following steps of: obtaining a program source code and running log information, and analyzing a core dump file to obtain crash state information; constructing an address-function-code mapping relation through the crash state information and the program source code; positioning a fault code in the program source code according to the address-function-code mapping relation to obtain a program call chain and a fault code block; and positioning a core dump crash reason according to the fault code block, the program call chain and the running log information. Through the technical means of fusing the crash state information, the program source code and the running log information and constructing the address-function-code mapping relation, the technical effect of accurately positioning the core dump crash reason is achieved.

The invention relates to a method for generating a CoreDump file on the basis of a firmware field stored during abnormal power failure, and the method is applied to a host and comprises the steps that a Telemetry Log is read from a storage device, and the Telemetry Log comprises firmware field data; analyzing and unpacking the firmware field data to generate a packaging configuration file and a data sub-block file; and obtaining a core dump file based on the packaging configuration file and the data sub-block file. By the adoption of the technical scheme, when the storage device is powered on again due to abnormal power failure, debugging analysis can be conducted even if firmware is not completely stored on site, and the debugging efficiency of the storage device is greatly improved.

The invention relates to the technical field of computers, and discloses an application program monitoring method, domain control equipment and a crash monitoring system.The application program monitoring method comprises the steps that when an application program is abnormal in the running period, a core dump file is generated and stored in a specified directory, and the core dump file is stored in the specified directory; under the condition that the new core dump file is generated by the specified directory, the stack information is obtained according to the core dump file and the symbol file to generate the stack information file, and the alarm information is generated according to the stack information file, so that the stack information can be stored in time, the fault processing efficiency is improved, and the stability of the system is improved.

The invention discloses a data dump management and control method and device, relates to the technical field of data dump, and mainly aims to effectively manage and control dump operation on abnormal field data so as to successfully dump the field data for abnormal positioning. According to the main technical scheme, the method comprises the steps that in response to a target exception, triggering a core dump function, of a target program, at least one target parameter value corresponding to the target exception is collected, and the at least one target parameter value affects the core dump function to conduct core dump operation on exception field data of the target exception; based on the at least one target parameter value, whether core dump operation is accepted or not is judged; if not, preventing the core dump function from performing core dump operation on the abnormal field data of the target abnormality, and performing dump operation on part of target field data suitable for target abnormality positioning in the abnormal field data; and if so, performing core dump operation on the abnormal field data of the target abnormality through a core dump function.

The invention provides an efficient kernel dump problem analyzing and positioning method and device, and belongs to the field of computer software. The method comprises the following steps: acquiring a kernel dump file through a Kexec tool; analyzing the obtained core dump file of the kernel by using a crash tool; analyzing the basic information output by the crash report, calling a stack by a function, and checking the reason causing the system crash; comparing the stack contents in the plurality of core dump files, and calculating the similarity among the stack contents to find the same abnormal point or call sequence; the similarity is compared with a preset threshold value, and if the similarity is higher than the threshold value, it is indicated that further anomaly detection is needed. According to the scheme, the analysis and positioning efficiency of the kernel dump problem is improved, the troubleshooting time is shortened, rapid identification and positioning of abnormal points are realized, and the accuracy of anomaly detection is improved.

The embodiment of the invention provides a memory repeated release detection method and device, electronic equipment and a storage medium, and the method comprises the steps: extracting abnormal features related to memory repeated release from a target file, and updating an abnormal feature template based on the extracted abnormal features; the target file is a core dump file generated by system kernel crash; the abnormal feature template comprises abnormal entries, and each abnormal entry comprises an abnormal feature tag used for describing related information of the abnormal features; based on the abnormal feature template, risk scanning is conducted on the kernel source code, a risk calling list is generated, the risk calling list comprises risk calling points in the kernel source code, and the risk calling points comprise memory allocation function calling points and / or memory release function calling points; the risk calling point hits the abnormal feature tag; and according to the risk calling list, carrying out instrumentation on the risk calling points, and carrying out verification in the target environment. According to the method, the memory repeated release vulnerability of the system kernel can be automatically detected, and the quick response requirement can be met.

The invention provides an anomaly analysis method and device for an embedded application, electronic equipment and a storage medium, and the method comprises the steps: obtaining a target core dump file which is from a target core dump platform and corresponds to a target embedded application; determining a target loading process according to the target core dump platform and a target visual platform needing to load the target core dump file; and according to the target loading process, loading the target core dump file to the target visual platform, so as to perform anomaly analysis on the target embedded application through the target visual platform. Through application of the method and the device, the target core dump file can be automatically loaded to the target visual platform, so that the purpose of not needing manual repeated and tedious configuration can be realized, and the technical effect of effectively reducing the manual operation intensity in embedded application exception analysis is achieved; the problem that the abnormality analysis of the embedded application is tedious in the prior art is solved.

An embedded system in a host computer is provided. During operation, the embedded system can detect an event in the embedded system. Here, the event can trigger the generation of a memory snapshot of the embedded system. The embedded system can then determine a set of memory segments of a memory in the embedded system for inclusion in the memory snapshot. Subsequently, the embedded system can insert a set of descriptors corresponding to the set of memory segments into the memory. Here, a respective descriptor indicates a memory segment associated with a core dump from the embedded system. The embedded system can send a notification to the host computer to generate the memory snapshot comprising the set of memory segments based on the set of descriptors.

A method for core dump for a terminated (e.g., “crashed”) application includes instantiating helper processes and performing a multi-threaded streaming of chunks of memory contents to respective helper processes. A set of backend storage resources of respective types is established to receive the core dump. Each helper process performs the following for the respective stream: (1) instantiating a set of writer threads for writing data to the respective different types of backend storage resources, (2) buffering the stream in a sequence-preserving manner, and (3) by each of the writer threads, independently reading buffered chunks and writing them to a respective backend storage resource with preservation of chunk identity to enable later reconstruction of complete memory contents. The time required to generate a core dump for a large memory-intensive application can be shortened, reducing application restart time and promoting application availability.

The invention provides a data filtering method and electronic equipment, and relates to the technical field of communication, and the method comprises the steps: obtaining a virtual memory region set corresponding to a target program under the condition of determining that the target program is abnormal to trigger core dump; acquiring data filtering demand information corresponding to each virtual memory region in the virtual memory region set; acquiring a first filtering rule corresponding to the data filtering demand information in a filtering rule set; and filtering the data set corresponding to each virtual memory area by adopting the first filtering rule to obtain a core dump file corresponding to the target program. According to the technical scheme, the leakage risk of data with security requirements in the core dump file can be reduced, the size of the core dump file can be reduced, the troubleshooting time can be shortened, and the transmission and analysis efficiency of the core dump file can be improved.

An embedded system in a host computer is provided. During operation, the embedded system can detect an event in the embedded system. Here, the event can trigger the generation of a memory snapshot of the embedded system. The embedded system can then determine a set of memory segments of a memory in the embedded system for inclusion in the memory snapshot. Subsequently, the embedded system can insert a set of descriptors corresponding to the set of memory segments into the memory. Here, a respective descriptor indicates a memory segment associated with a core dump from the embedded system. The embedded system can send a notification to the host computer to generate the memory snapshot comprising the set of memory segments based on the set of descriptors.

This disclosure provides an anomaly detection method, apparatus, electronic device, and storage medium. The method includes: when a target core dump file is detected to be stored, querying first process information of the target process in the target agent based on the target core dump file; when the first process information is not found, querying second process information of the target process from the server based on the target core dump file, wherein the second process information is collected by other agents and uploaded to the server; querying the process file of the target process in the target agent based on the second process information, generating a core event based on the target core dump file and the process file; and sending the core event to the server so that the server can analyze the target core dump file based on the process file to obtain target stack data of the target process, wherein the target stack data is used to determine the cause of the anomaly in the target process. This disclosure improves the reliability of anomaly detection.

The invention discloses an embedded log system design method and system suitable for secondary equipment of a power system. The method comprises the following steps: intercepting communication data of secondary equipment and peripheral equipment of the power system, storing the communication data in a network message file, setting an annular buffer between a peripheral interface and an application process to receive external driving data, and realizing inter-process message communication by adopting a shared memory; when the system detects an exception or an alarm, backing up the intercepted network message file, backing up log files in the annular buffer and task process running process and message data in a database and a shared memory, analyzing a core dump file, and compressing and backing up the core dump file; monitoring the utilization rate of system resources, and when the utilization rate exceeds a set threshold value, performing exception management on each process, and compressing collected log files; and analyzing and displaying the log file by using a log analysis tool. According to the scheme of the invention, the whole-process log management of the abnormity of the secondary equipment is realized, and the problem backtracking and positioning are facilitated.

The invention discloses a core dump data processing method and a core dump analysis system, which can obtain detailed core dump information which can be obtained by an intrusive scheme in a non-intrusive mode without increasing the load of a developer, and comprises the following steps: obtaining a core dump file, the core dump file comprises a memory snapshot formed by an exception when the application program runs in a user container attached with a mirror image version tag, and the user container is created based on a released mirror image; transmitting the core dump file as a standard input to a pipeline command script; the mirror image label and the core dump related parameters are used as command line parameters to be transmitted to a pipeline command script; the pipeline command script uploads the core dump file, the mirror image label and the core dump related parameters; according to the mirror image version label, pulling a version solidification mirror image with the same mirror image version label, and constructing an analysis container based on the version solidification mirror image; and the analysis container performs analysis according to the core dump file and the core dump related parameters.

This application provides a method and apparatus for transferring core dump files, addressing the problem of complex file transfer processes between lower-level network servers in multi-level sub-internal networks in existing technologies. The method is applied to a server located in a multi-level sub-internal network and includes: when a core dump file exists, obtaining the destination IP address of the target server for storing the core dump file from a storage configuration file; if it is determined based on the destination IP address that the server cannot communicate with the target server, broadcasting a request message to the server in the upper-level network and determining the IP address of the next-hop server from the response message corresponding to the received request message; sending the core dump file and storage configuration file to the next-hop server based on the IP address of the next-hop server; if it is determined based on the destination IP address that the server can communicate with the target server, sending the core dump file to the target server based on the destination IP address.

A method for core dump for a terminated (e.g., “crashed”) application includes instantiating helper processes and performing a multi-threaded streaming of chunks of memory contents to respective helper processes. A set of backend storage resources of respective types is established to receive the core dump. Each helper process performs the following for the respective stream: (1) instantiating a set of writer threads for writing data to the respective different types of backend storage resources, (2) buffering the stream in a sequence-preserving manner, and (3) by each of the writer threads, independently reading buffered chunks and writing them to a respective backend storage resource with preservation of chunk identity to enable later reconstruction of complete memory contents. The time required to generate a core dump for a large memory-intensive application can be shortened, reducing application restart time and promoting application availability.

The invention discloses a system exception crash processing method and device, and relates to the technical field of exception processing. The method comprises the steps of obtaining a process number of a target application program by calling a core dump module in a system when it is detected that the target application program in the system crashes abnormally; on the basis of the process number, detecting to obtain abnormal crash field information corresponding to each execution thread in the target application program; and dumping the abnormal crash field information in a text mode to obtain a target abnormal crash report corresponding to the target application program. According to the embodiment of the invention, the abnormal crash field capture processing of the application program can be realized more comprehensively and flexibly, so that the abnormal crash capture efficiency of the whole system can be effectively improved.

Disclosed is a power loss protection method. In some implementations, the method includes initiating a timer to indicate a progress of a power loss protection procedure that performs a data transfer upon occurrence of a power loss interrupt event, initiating a first data transfer operation to transfer a first amount of data to a memory device, and upon an indication by the timer that the power loss protection procedure has reached a predetermined progress level, continuing the first data transfer operation until the first amount of data is transferred to the memory device, or upon an indication by the timer that the power loss protection procedure has failed to reach the predetermined progress level, discontinuing the first data transfer operation and performing a second data transfer operation to transfer a second amount of data to the memory device, wherein the second amount is less than the first amount.

The invention relates to a process abnormity diagnosis method and device, a storage medium and electronic equipment. The method comprises the steps of calling a target script when a plurality of processes in a system crashes; transmitting a target parameter to the target script, wherein the target parameter is used for indicating whether to start a core dump function of the target script; when the core dump function is used, first crash data of a first process in the multiple processes is stored as a first dump file under a storage directory, a temporary lock is used for locking the storage directory, the first process is the first process in the multiple processes, and the temporary lock is used for forbidding other processes to store the crash data under the storage directory; and a diagnosis report is generated for each of the other processes, and data recorded in the diagnosis report is less than the first dump file. The technical problem that the system stability is reduced due to resource competition among multiple scripts is solved.

The invention provides an information recording method, system and device, equipment, a storage medium and a program product. The method is applied to a control unit in the information recording system, and the information recording system further comprises a host and PCIe system equipment. The method comprises the steps that a first signal is generated in response to a host restart signal generated when a host rams the machine; the first signal is sent to the host and the PCIe system equipment, so that the PCIe system equipment responds to the link interruption signal and records core dump information; wherein the first signal is used for indicating an uplink between the PCIe system equipment and the host to reestablish a link, and generating a link interruption signal; after a preset duration, generating a second signal; and sending the second signal to the PCIe system equipment, so that the PCIe system equipment responds to the second signal to reset. The method is used for achieving the effects of recording the core dump information under the condition that the PCIe system host rams the machine and improving the fault diagnosis efficiency.

The present invention discloses a method and system for assisting in locating software vulnerabilities for the ARM architecture, belonging to the field of information technology. It includes: running the software to be analyzed and triggering a vulnerability to cause it to crash, extracting the core dump file and the instruction sequence executed before the crash, where the core dump file stores the memory layout information and register information when the thread crashes; scanning the core dump file, performing reverse execution in combination with the instruction sequence executed before the crash, and restoring the memory address information and register information of each instruction before the crash; starting from the crash point, combining the restored information, and reverse-tracking the instructions that have a data dependency relationship with the data at the crash point to obtain the instruction sequence that directly or indirectly causes the thread to crash. The present invention helps software developers and security analysts quickly locate the program defects that cause the thread to crash; effectively reduces the complexity of the source data used for analyzing the crashed program, and simplifies the user analysis process.

The present invention discloses a method, computing device, and storage medium for generating a core dump file. The method comprises: monitoring the status of a target program, wherein the target program has a preload library embedded therein; if an exception occurs in the target program, copying the current process of the target program to generate a new process corresponding to the current process; obtaining associated data of the current process based on the new process; and dumping the associated data to generate a core dump file. According to the technical solution of the present invention, a lightweight core dump file with a certain degree of confidentiality can be generated without root privileges.

The invention provides a core dump file generation method and device, equipment and a storage medium, the method is applied to first network equipment in an equipment cluster system, and the same disk state table and core dump file table are maintained in each network equipment in the equipment cluster system. The disk state table records the residual capacity of a local disk of each network device, and the core dump file table is used for recording file information of each core dump file; and if the target process of the first network equipment fails and the residual capacity of the disk is smaller than the preset capacity, sending a file generation notification to second network equipment of which the residual capacity of the disk is not smaller than the preset capacity, so that the second network equipment generates a core dump file according to fault information in the file generation notification. According to the embodiment of the invention, cross-device generation of the core dump file can be realized, and the defect that the core dump file cannot be generated due to insufficient residual capacity of a local disk is avoided.

The application provides a core dump file generation method and device and electronic equipment. In response to a core dump event of a target process, a memory snapshot and basic core dump information of the target process are obtained. Based on a plurality of preset core dump parameter templates and the basic core dump information, a target core dump parameter template corresponding to the target process is determined. Based on the target core dump parameter template and the basic core dump information, storage parameters of a core dump file of the target process are determined. Based on the storage parameters and the memory snapshot, the core dump file of the target process is generated. In this way, the parameters in the target core dump parameter template can represent the basic characteristics and the instant scene characteristics of the target process. Therefore, the storage parameters generated based on the template can quickly identify the process execution scene corresponding to the core dump file, provide related services, and improve the efficiency of identifying and analyzing the core dump file of the target process.

Providing issue resolution in a cluster system by monitoring system operation to detect occurrence of a system error, and automatically generating, upon detection of the error condition, a core file for a user node. The core file captures a current memory state of a respective node, where the current memory state comprises system statistics, system information, and logs. An intelligent core debugger extracts information from a core file to generate a core file report that is sent to a vendor for a quick determination of whether sufficient information is in the report to allow the vendor to recommend a fix, or whether further information from is required, including the core file itself, if necessary. This prevents the need to send an entire core file to a vendor in every instance of a system fault.

The application provides a kind of debugging log information management method, device and equipment and storage medium, the method monitors the process running state of each functional module in target operating system, if the process running state of functional module is abnormal state, the running identifier of functional module is modified as fault identifier, whether target core dump file is monitored and added, if there is new, the running identifier of target functional module to which target core dump file belongs is modified as fault identifier, based on the module identifier information of each functional module and the running identifier of functional module, generate global configuration table;If the occupied space of debugging log is greater than preset space threshold, according to global configuration table, determine the first target debugging log corresponding to the target functional module of which running identifier is fault identifier from the stored debugging log, and delete other debugging logs except the first target debugging log.This embodiment of the application can realize intelligent management of log, and preferentially retain high-value log.

Techniques can include: executing a first process that performs processing including: creating a first socket associated with a first file descriptor; and binding the first socket, as referenced using the first file descriptor, to a port having a port number; the first process crashing including abnormally terminating execution; and in response to the first process crashing, performing second processing including: core dump processing of memory used by the first process; and starting execution of a second process prior to completing the core dump processing for the first process, wherein the second process performs third processing including: creating a second file descriptor of the second process, wherein the second file descriptor is associated with the first socket that is i) referenced using the first file descriptor, and ii) bound to the port; and the second process taking over communications to the port using the second file descriptor and the first socket.