4

I am trying to debug a segfault without code a binary in a nonstandard path (specifically in /frs/alg/alg/bin/) and I was noticing that the decompiled code has fewer symbols than when debugging under gdb. I am assuming that the debug symbols are detached, but Where should I look to find them?

Improve this question
0

1 Answer 1

Reset to default
3

Presumably the binary has detached debug information; if gdb is able to find this without any particular configuration, it should be in one of

  • a build-id based file under /usr/lib/debug/.build-id;
  • a .debug file alongside the binary;
  • a .debug file in /frs/alg/alg/bin/.debug;
  • a .debug file in /usr/lib/debug/frs/alg/alg/bin.

The binary might have a debug link pointing at the detached information; look for a .gnu_debuglink section in the binary. To find its build-id (if any), look for a section named .note.gnu.build-id or something along those lines.

Improve this answer
1
  • In my case the file had to end in a .dbg for some reason, a .debug didn't work
    – GenuinePlaceholder
    Sep 5 at 21:01

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .