Show HN: Heap Explorer (opens in new tab)

(github.com)

73 pointsbkallus1y ago5 comments

I wrote a little LD_PRELOAD library that makes it easy to inspect and interact with a running program's glibc heap.

It's fun to pause processes, free a bunch of their allocations, then resume them. Most of the time, the processes continue as though nothing happened, but sometimes they do interesting things :)

5 comments

dzaima1y ago

Would be nice to mention how to determine those *_OFFSET constants. For reference, on my linux mint (glibc 2.39) system this gives them:

    gdb /lib/x86_64-linux-gnu/libc.so.6 -ex 'p &main_arena' -ex 'p malloc'

Also, can attach to an existing process via:

    sudo gdb -p <PID_OF_PROCESS> -ex 'call (void*) dlopen("/path/to/libheap_explorer.so", 2)' -ex 'p explore_heap()'

jamesy0ung1y ago

If you are using a Mac, heapster is a different but also interesting tool for learning about what goes on inside the heap

https://blackwinghq.com/blog/posts/playing-with-libmalloc/

heinrichhartman1y ago

Can you modify this to listen to a signal (e.g. SIGUSR) instead, for triggering the REPL?

bkallusOP1y ago

I went with SIGINT because it's more fun to press ctrl-c than to pgrep and kill. If you'd rather use SIGUSR1, just change SIGINT to SIGUSR1 line 654.

heinrichhartman1y ago

OK. RTFM. You already did! Wonderful.

j / k navigate · click thread line to collapse

Show HN: Heap Explorer (opens in new tab)

(github.com)

73 pointsbkallus1y ago5 comments

I wrote a little LD_PRELOAD library that makes it easy to inspect and interact with a running program's glibc heap.

It's fun to pause processes, free a bunch of their allocations, then resume them. Most of the time, the processes continue as though nothing happened, but sometimes they do interesting things :)

5 comments

dzaima1y ago

Would be nice to mention how to determine those *_OFFSET constants. For reference, on my linux mint (glibc 2.39) system this gives them:

    gdb /lib/x86_64-linux-gnu/libc.so.6 -ex 'p &main_arena' -ex 'p malloc'

Also, can attach to an existing process via:

    sudo gdb -p <PID_OF_PROCESS> -ex 'call (void*) dlopen("/path/to/libheap_explorer.so", 2)' -ex 'p explore_heap()'

jamesy0ung1y ago

If you are using a Mac, heapster is a different but also interesting tool for learning about what goes on inside the heap

https://blackwinghq.com/blog/posts/playing-with-libmalloc/

heinrichhartman1y ago

Can you modify this to listen to a signal (e.g. SIGUSR) instead, for triggering the REPL?

bkallusOP1y ago

I went with SIGINT because it's more fun to press ctrl-c than to pgrep and kill. If you'd rather use SIGUSR1, just change SIGINT to SIGUSR1 line 654.

heinrichhartman1y ago

OK. RTFM. You already did! Wonderful.

j / k navigate · click thread line to collapse