Efficient and Practical Capturing of Crash Data on Embedded Systems
summary
minicoredumper is a userspace toolchain that captures targeted crash snapshots via the kernel's core_pattern pipe without kernel patches, parsing ELF headers, reading /proc maps and mem, and creating sparse tarballs with in-memory compression. Example: a 500 MB address space (109 threads) yields a usable crash bundle unpacked ~1.3–2.3 MB but compressed to ~72–108 KB. Ancillary pieces are libminicoredumper (registers per-process symbols or text) and core-inject (reinjects external blobs); live snapshots can freeze peers for ~40–80 ms.
AI-written summary · about
chapters (9)
- 0:00Crash data capture intro
- 3:51Core dumps essentials
- 10:36Mini Core Dumper project
- 21:12Live demo: Firefox core dump
- 25:29Mini Core Dumper benefits
- 27:39Custom crash library
- 33:42Multi-process live dumps
- 38:19Project status and future
- 39:22Q&A: security & systemd
related talks
13mRamdump for Trusted VMs: Efficient Crash Debugging Without Reboot Device
28mMinidump to debug end user device crashes
49mKernel dump analysis made quick and easy!
34mPostmortem Debugging with Coresight
46mMeminspect - Kernel memory selection and inspection mechanism
19mKdump memory usage
20mDebugging RISC-V Kernel Crashes: KDUMP, vmcore, and Crash Utility Enhancements
26mStateless Linux Kernel Crashdumps