NAME
kkvvmm - kernel memory interface
DESCRIPTION
The kvm(3) library provides a uniform interface for accessing kernel vir-
tual memory images, including live systems and crashdumps. Access to live systems is via /dev/mem while crashdumps can be examined via the core file generated by savecore(8). The interface behaves identically in both cases. Memory can be read and written, kernel symbol addresses can be looked up efficiently, and information about user processes can be gathered. kkvvmmooppeenn() is first called to obtain a descriptor for all subsequent calls. CCOOMMPPAATTIIBBIILLIITTYYThe kvm interface was first introduced in SunOS. A considerable number
of programs have been developed that use this interface, making backwardcompatibility highly desirable. In most respects, the Sun kvm interface
is consistent and clean. Accordingly, the generic portion of the inter-
face (i.e., kkvvmmooppeenn(), kkvvmmcclloossee(), kkvvmmrreeaadd(), kkvvmmwwrriittee(), and kkvvmmnnlliisstt()) has been incorporated into the BSD interface. Indeed, manykvm applications (i.e., debuggers and statistical monitors) use only this
subset of the interface. The process interface was not kept. This is not a portability issuesince any code that manipulates processes is inherently machine depen-
dent.Finally, the Sun kvm error reporting semantics are poorly defined. The
library can be configured either to print errors to stderr automatically, or to print no error messages at all. In the latter case, the nature of the error cannot be determined. To overcome this, the BSD interfaceincludes a routine, kvmgeterr(3), to return (not print out) the error
message corresponding to the most recent error condition on the given descriptor.SEE ALSO
kvmclose(3), kvmgetargv(3), kvmgetenvv(3), kvmgeterr(3),
kvmgetloadavg(3), kvmgetprocs(3), kvmnlist(3), kvmopen(3),
kvmopenfiles(3), kvmread(3), kvmwrite(3)
BSD June 4, 1993 BSD