address of a variable

[Hartmut Birr]

Hi,

if I have address of a variable in the bss section from ntoskrnl, how can I
find out the name? Searching into the map file doesn't help. Possible the
address is a pointer into a structure.

- Hartmut

[Filip Navara]

Hartmut Birr wrote:
> Hi,
>
> if I have address of a variable in the bss section from ntoskrnl, how can I
> find out the name? Searching into the map file doesn't help. Possible the
> address is a pointer into a structure.

nm ntoskrnl.nostrip.exe | grep VariableName

[Filip Navara]

Filip Navara wrote:
> Hartmut Birr wrote:
> > Hi,   
> > if I have address of a variable in the bss section from ntoskrnl, how 
> > can I
> > find out the name? Searching into the map file doesn't help. Possible 
> > the
> > address is a pointer into a structure.
>
> nm ntoskrnl.nostrip.exe | grep VariableName

Oops, sorry. I should read twice before answering...
Wouldn't "addr2line --exe=ntoskrnl.nostrip.exe c00c2560" work?

Regards,
Filip

[Hartmut Birr]

> > > Hi,   
> > > if I have address of a variable in the bss section from
>
> ntoskrnl, how
> > > can I
> > > find out the name? Searching into the map file doesn't
>
> help. Possible
> > > the
> > > address is a pointer into a structure.
> >
> > nm ntoskrnl.nostrip.exe | grep VariableName
>
> Oops, sorry. I should read twice before answering...
> Wouldn't "addr2line --exe=ntoskrnl.nostrip.exe c00c2560" work?

Addr2line points me to invb\invb.c , what is totally wrong.

- Hartmut

[Filip Navara]

Hartmut Birr wrote:
> Addr2line points me to invb\invb.c , what is totally wrong.

Are you using DBG=1 build?

Regards,
Filip