crash提供了vm命令来输出进程的vma相关的信息。
输出当前当进程的vma列表
crash> vm PID: 3319 TASK: ffff889760358000 CPU: 6 COMMAND: "kvm" MM PGD RSS TOTAL_VM ffff893ada165000 ffff893a8c4e2000 45772k 9535832k VMA START END FLAGS FILE ffff893a7eab1960 55b4b8274000 55b4b90d6000 8000875 /sf/bin/qemu-system-x86_64 ffff893a7eab1ed0 55b4b92d5000 55b4b9476000 8100875 /sf/bin/qemu-system-x86_64 ffff893cb6d533f0 55b4b9476000 55b4b956d000 8100877 /sf/bin/qemu-system-x86_64 ffff893a7eab1c18 55b4b956d000 55b4b9597000 8100077 ffff888bb1fbc828 7efa95dcf000 7efa95dd0000 8100070 ffff88ddadc64658 7efa95dd0000 7efa965d0000 8100077 ffff88d5d679bed0 7efa965d0000 7efa965d1000 8100070 ...
查看指定进程的vma列表
crash> vm -p 2085 PID: 2085 TASK: ffff88dcca1fa000 CPU: 61 COMMAND: "supervisor" MM PGD RSS TOTAL_VM ffff88dea7232000 ffff88ddab4aa000 1960k 16960k VMA START END FLAGS FILE ffff88dcc9122658 400000 40e000 8000875 /sf/bin/supervisor VIRTUAL PHYSICAL 400000 5e6cdf6000 401000 5e57277000 ... 40c000 5e6efca000 40d000 5e7ad44000 VMA START END FLAGS FILE ffff88dcc9123308 60d000 60e000 8100871 /sf/bin/supervisor VIRTUAL PHYSICAL 60d000 5be9452000 VMA START END FLAGS FILE ffff88dcc9123960 60e000 60f000 8100873 /sf/bin/supervisor VIRTUAL PHYSICAL 60e000 5c00fdd000 VMA START END FLAGS FILE ffff88dcc91222b8 2381000 23a6000 8100073 VIRTUAL PHYSICAL 2381000 5c181b3000 2382000 5bdd057000 2383000 5c30e4f000 ... VMA START END FLAGS FILE ffff88dcc9123d00 7fa1cecdd000 7fa1cece0000 8000075 /lib/x86_64-linux-gnu/libdl-2.23.so VIRTUAL PHYSICAL 7fa1cecdd000 5e4ad82000 7fa1cecde000 5e6359c000 7fa1cecdf000 5e58939000 VMA START END FLAGS FILE ffff88dcc91223a0 7fa1cece0000 7fa1ceedf000 8000070 /lib/x86_64-linux-gnu/libdl-2.23.so VIRTUAL PHYSICAL 7fa1cece0000 FILE: /lib/x86_64-linux-gnu/libdl-2.23.so OFFSET: 3000 7fa1cece1000 FILE: /lib/x86_64-linux-gnu/libdl-2.23.so OFFSET: 4000 7fa1cece2000 FILE: /lib/x86_64-linux-gnu/libdl-2.23.so OFFSET: 5000 7fa1cece3000 FILE: /lib/x86_64-linux-gnu/libdl-2.23.so OFFSET: 6000 ... VMA START END FLAGS FILE ffff88dcc91236a8 7fa1cf0a1000 7fa1cf2a1000 8000070 /lib/x86_64-linux-gnu/libc-2.23.so VIRTUAL PHYSICAL 7fa1cf0a1000 FILE: /lib/x86_64-linux-gnu/libc-2.23.so OFFSET: 1c0000 7fa1cf0a2000 FILE: /lib/x86_64-linux-gnu/libc-2.23.so OFFSET: 1c1000 7fa1cf0a3000 FILE: /lib/x86_64-linux-gnu/libc-2.23.so OFFSET: 1c2000 ... 7fa1cf29f000 FILE: /lib/x86_64-linux-gnu/libc-2.23.so OFFSET: 3be000 7fa1cf2a0000 FILE: /lib/x86_64-linux-gnu/libc-2.23.so OFFSET: 3bf000 VMA START END FLAGS FILE ffff88dcc9123790 7fa1cf2a1000 7fa1cf2a5000 8100071 /lib/x86_64-linux-gnu/libc-2.23.so VIRTUAL PHYSICAL 7fa1cf2a1000 5b9e194000 7fa1cf2a2000 5c77e48000 7fa1cf2a3000 5c14c49000 7fa1cf2a4000 5be52cf000 VMA START END FLAGS FILE ffff88dcc9123a48 7fa1cf2a5000 7fa1cf2a7000 8100073 /lib/x86_64-linux-gnu/libc-2.23.so VIRTUAL PHYSICAL 7fa1cf2a5000 5c65e5e000 7fa1cf2a6000 5c22353000 VMA START END FLAGS FILE ffff88dcc9122570 7fa1cf2a7000 7fa1cf2ab000 8100073 VIRTUAL PHYSICAL 7fa1cf2a7000 5bbfd52000 7fa1cf2a8000 5c0957a000 7fa1cf2a9000 (not mapped) 7fa1cf2aa000 5c7a4ea000 ...
查看指定进程的指定vma的的内容
下面查看进程2085的vma:ffff88dcc9122570的信息：
crash> vm -P ffff88dcc9122570 2085 PID: 2085 TASK: ffff88dcca1fa000 CPU: 61 COMMAND: "supervisor" VMA START END FLAGS FILE ffff88dcc9122570 7fa1cf2a7000 7fa1cf2ab000 8100073 VIRTUAL PHYSICAL 7fa1cf2a7000 5bbfd52000 7fa1cf2a8000 5c0957a000 7fa1cf2a9000 (not mapped) 7fa1cf2aa000 5c7a4ea000
或者使用2085进程的task_struct结构体的地址ffff88dcca1fa000：
crash> vm -P ffff88dcc9122570 ffff88dcca1fa000 PID: 2085 TASK: ffff88dcca1fa000 CPU: 61 COMMAND: "supervisor" VMA START END FLAGS FILE ffff88dcc9122570 7fa1cf2a7000 7fa1cf2ab000 8100073 VIRTUAL PHYSICAL 7fa1cf2a7000 5bbfd52000 7fa1cf2a8000 5c0957a000 7fa1cf2a9000 (not mapped) 7fa1cf2aa000 5c7a4ea000
查看某个进程的vma结构体的内容
crash> vm -x -v 2085 PID: 2085 TASK: ffff88dcca1fa000 CPU: 61 COMMAND: "supervisor" struct vm_area_struct { vm_start = 0x400000, vm_end = 0x40e000, vm_next = 0xffff88dcc9123308, vm_prev = 0x0, vm_rb = { __rb_parent_color = 0xffff88dcc9123329, rb_right = 0x0, rb_left = 0x0 }, rb_subtree_gap = 0x400000, vm_mm = 0xffff88dea7232000, vm_page_prot = { pgprot = 0x25 }, vm_flags = 0x8000875, shared = { rb = { __rb_parent_color = 0xffff893cb8ff5f28, rb_right = 0x0, rb_left = 0x0 }, rb_subtree_last = 0xd }, anon_vma_chain = { next = 0xffff88dcc91226d0, prev = 0xffff88dcc91226d0 }, anon_vma = 0x0, vm_ops = 0xffffffff81e36e00 <generic_file_vm_ops>, vm_pgoff = 0x0, vm_file = 0xffff88ddae938c00, ... } ... struct vm_area_struct { vm_start = 0x7ffe1cb03000, vm_end = 0x7ffe1cb05000, vm_next = 0x0, vm_prev = 0xffff88dcc831e9f8, vm_rb = { __rb_parent_color = 0xffff88dcc831ea18, rb_right = 0x0, rb_left = 0x0 }, rb_subtree_gap = 0x0, vm_mm = 0xffff88dea7232000, vm_page_prot = { pgprot = 0x25 }, vm_flags = 0x8040075, shared = { rb = { __rb_parent_color = 0x0, rb_right = 0x0, rb_left = 0x0 }, rb_subtree_last = 0x0 }, anon_vma_chain = { next = 0xffff88dcc831fd78, prev = 0xffff88dcc831fd78 }, anon_vma = 0x0, vm_ops = 0xffffffff81e3a100 <special_mapping_vmops>, vm_pgoff = 0x0, vm_file = 0x0, vm_private_data = 0xffffffff81e00f20 <vdso_mapping>, ... }
