Question about library

tonyr81 · 05-03-2008, 04:39 AM

Hi all,
I'd want to know where Linux keep trace about library loaded in memory. I suppose that the system has a table in memory (or just in the file system?) with a summary of the loaded library. Am I wrong?

Thanks for your help

Antonio

xonogenic · 05-03-2008, 11:21 PM

I'm assuming you are looking for something like lsof which relates open files to applications using them. I'm not exactly sure what you are looking for, perhaps some clarity on what you are trying to do would be helpful?

tonyr81 · 05-04-2008, 03:17 AM

My aim is to know which instructions are running in the system and who is the process owner.

Bye bye
Antonio

xonogenic · 05-04-2008, 08:44 AM

yeah I think lsof would probably give you a fairly good view, lsof -u <user id> will show you files opened by that user id. If you read the man page for lsof there are many other options as well.

sundialsvcs · 05-04-2008, 09:44 PM

The library system is actually even fancier than just "shared files," because when several-dozen or several-hundred processes are using the same library it's actually more than "they've all got the same library-file open at the same time." The processes actually share the memory-segment.

tonyr81 · 05-06-2008, 12:57 PM

Quote:

Originally Posted by sundialsvcs

The library system is actually even fancier than just "shared files," because when several-dozen or several-hundred processes are using the same library it's actually more than "they've all got the same library-file open at the same time." The processes actually share the memory-segment.

Right. I'd want to know how to identify the memory area in which libraries are loaded and which process owns them. It would be better to do it from a C program because I've to embed this function in a preexistent work.

sundialsvcs · 05-06-2008, 10:50 PM

pmap is a place to start ... It's not exactly what you are looking for, however.

tonyr81 · 05-13-2008, 02:35 PM

sundialsvcs, thanks for your answer. The main problem of pmap is that I need to know where are located the information about the libraries to use that in a program written by me. This program (that is a part of a larger project) has to hook system calls and to decide which of them can be executed and which has to be stopped. Any idea about where are stored these informations?

Thanks
Antonio

tonyr81 · 05-19-2008, 02:46 PM

I change my question...

How can I identify what kind of instruction is pointed by the address stored in EIP?

Thanks for help

Antonio