Method extractFailureInfo

src/pystack/_pystack/corefile.cpp:352–379

}

CoreCrashInfo
CoreFileExtractor::extractFailureInfo() const
{
    Elf* elf = d_analyzer->d_elf.get();
    CoreCrashInfo result{};

    LOG(DEBUG) << "Extracting failure info structure";

    LOG(DEBUG) << "Checking for NT_SIGINFO section";
    // Check first if we have a NT_SIGINFO section, as more information can be retrieved from it
    for (const auto& note_data : getNoteData(elf, NT_SIGINFO, ELF_T_XWORD)) {
        if (parseCoreSiginfo(note_data, &result) != StatusCode::ERROR) {
            LOG(DEBUG) << "NT_SIGINFO found";
            return result;
        }
    }

    // Fallback to the NT_PRSTATUS section (even old kernels should always produce this).
    LOG(DEBUG) << "Checking for NT_PRSTATUS section";
    for (const auto& note_data : getNoteData(elf, NT_PRSTATUS, ELF_T_XWORD)) {
        if (parseCorePrstatus(note_data, &result) != StatusCode::ERROR) {
            LOG(DEBUG) << "NT_PRSTATUS found";
            return result;
        }
    }
    LOG(DEBUG) << "Failed to locate the NOTE data for the failure info in the core file";
    return {};
}

CorePsInfo
CoreFileExtractor::extractPSInfo() const