address of a variable

[Hartmut Birr]

Hi,    

if I have address of a variable in the bss section from ntoskrnl, how can I
find out the name? Searching into the map file doesn't help. Possible the
address is a pointer into a structure.    

- Hartmut

[Filip Navara]

Hartmut Birr wrote:

>  Hi,    
>
> if I have address of a variable in the bss section from ntoskrnl, how can I
> find out the name? Searching into the map file doesn't help. Possible the
> address is a pointer into a structure.    
>   
>  
nm ntoskrnl.nostrip.exe | grep VariableName

[Filip Navara]

Filip Navara wrote:

>   Hartmut Birr wrote:
>
> >   Hi,   
> >  if I have address of a variable in the bss section from ntoskrnl, how 
> >  can I
> >  find out the name? Searching into the map file doesn't help. Possible 
> >  the
> >  address is a pointer into a structure.     
> >  
>  nm ntoskrnl.nostrip.exe | grep VariableName 
Oops, sorry. I should read twice before answering...
Wouldn't "addr2line --exe=ntoskrnl.nostrip.exe c00c2560" work?

Regards,
Filip

[Hartmut Birr]

> >  > Hi,   
> > > if I have address of a variable in the bss section from  
>  ntoskrnl, how 
> >  > can I
> > > find out the name? Searching into the map file doesn't  
>  help. Possible 
> > >   the
> > >  address is a pointer into a structure.     
> > >  
> >  nm ntoskrnl.nostrip.exe | grep VariableName 
>  
>  Oops, sorry. I should read twice before answering...
>  Wouldn't "addr2line --exe=ntoskrnl.nostrip.exe c00c2560" work?
>   
Addr2line points me to invb\invb.c , what is totally wrong.

- Hartmut

[Filip Navara]

Hartmut Birr wrote:

>  Addr2line points me to invb\invb.c , what is totally
> wrong.
>   
>  
Are you using DBG=1 build?

Regards,
Filip