This question already has an answer here:
Recently, I dumped my memory strings (just because I could) using
sudo cat /dev/mem | strings. Upon reviewing this dump, I noticed some very interesting things:
.symtab .strtab .shstrtab .note.gnu.build-id .rela.text .rela.init.text .rela.text.unlikely .rela.exit.text .rela__ksymtab .rela__ksymtab_gpl .rela__kcrctab .rela__kcrctab_gpl .rela.rodata .rodata.str1.8 .rela__mcount_loc .rodata.str1.1 .rela__bug_table .rela.smp_locks .modinfo __ksymtab_strings .rela__tracepoints_ptrs __tracepoints_strings __versions .rela.data .data.unlikely .rela__verbose .rela__jump_table .rela_ftrace_events .rela.ref.data .rela__tracepoints .rela.gnu.linkonce.t6
These lines all seem to be related in some way: they are all (very) near each other in the memory, they all have similar
.<name> prefixes, and they all seem to refer to each other.
What would cause these strings to appear, and why?