Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

5
  • You'd need to use a kernel debugger. Commented Apr 1, 2015 at 17:23
  • I figured as much, but the commands and set up for this particular operation are unknown to me. Commented Apr 1, 2015 at 17:46
  • 1
    This question seems predicated on the false premise that there is one single "system heap", with "process portions" in multiple processes, in the first place. There is not. Each process has its own heap(s), managed in application memory by its own heap manager(s), layered on top of page-level allocation. You need a clearer idea of what data structure you want to analyze, because the one that you are surmising does not exist. You also need to state which operating system kernel you want to analyze. They are far from all the same, internally; nor are their tools the same. Commented Apr 1, 2015 at 19:20
  • Let us assume Linux, and that I want to iterate over each process heap. I assume that all process heaps are handled by a centralized heap manager. Obviously each heap is kept separate as a data structure, but I am assuming that they can be collectively queried somehow. Commented Apr 1, 2015 at 19:22
  • Maybe the search command in the crash utility? Commented Jun 6, 2020 at 11:14