• Roman Kisel's avatar
    binfmt_elf, coredump: Log the reason of the failed core dumps · fb97d2eb
    Roman Kisel authored
    Missing, failed, or corrupted core dumps might impede crash
    investigations. To improve reliability of that process and consequently
    the programs themselves, one needs to trace the path from producing
    a core dumpfile to analyzing it. That path starts from the core dump file
    written to the disk by the kernel or to the standard input of a user
    mode helper program to which the kernel streams the coredump contents.
    There are cases where the kernel will interrupt writing the core out or
    produce a truncated/not-well-formed core dump without leaving a note.
    
    Add logging for the core dump collection failure paths to be able to reason
    what has gone wrong when the core dump is malformed or missing.
    Report the size of the data written to aid in diagnosing the user mode
    helper.
    Signed-off-by: default avatarRoman Kisel <romank@linux.microsoft.com>
    Link: https://lore.kernel.org/r/20240718182743.1959160-3-romank@linux.microsoft.comSigned-off-by: default avatarKees Cook <kees@kernel.org>
    fb97d2eb
coredump.c 32.1 KB