Filter
Top Products
-uthread
Displays all ucreds referenced by the uthread
structures
-file
Displays all ucreds referenced by the file structures
-buf
Displays all ucreds referenced by the buf structures
-ref address
Displays all references to a given ucred
-check address
Checks the reference count of a particular ucred
-checkall
Checks the reference count of all ucreds, with
mismatches marked by an asterisk (*)
For example:
(kdbx) ucred
ADDR OF UCRED ADDR OF Ref Ref Type cr_ref cr_uid cr_gid cr_ruid
=================== ================== ======== ====== ====== ====== =======
0xffffffff863d4960 0xffffffff90420f90 proc 3 0 1 0
0xffffffff8651fb80 0xffffffff9041e050 proc 18 0 1 0
0xffffffff86525c20 0xffffffff90420270 proc 2 0 1 0
0xffffffff86457ea0 0xffffffff90421380 proc 4 1139 15 1139
0xffffffff86457ea0 0xffffffff9041f6a0 proc 4 1139 15 1139
0xffffffff8651b5e0 0xffffffff9041f010 proc 2 0 1 0
0xffffffff8651efa0 0xffffffff9041e1a0 proc 2 1138 10 1138
.
.
.
0xffffffff863d4960 0xffffffff90fb82e0 uthread 3 0 1 0
0xffffffff8651fb80 0xffffffff90fbc2e0 uthread 18 0 1 0
0xffffffff86525c20 0xffffffff90fb02e0 uthread 2 0 1 0
0xffffffff86457ea0 0xffffffff90f882e0 uthread 4 1139 15 1139
0xffffffff86457ea0 0xffffffff90f902e0 uthread 4 1139 15 1139
0xffffffff8651b5e0 0xffffffff90fc02e0 uthread 2 0 1 0
0xffffffff8651efa0 0xffffffff90fac2e0 uthread 2 1138 10 1138
.
.
.
0xffffffff863d5c20 0xffffffff90406790 file 16 0 0 0
0xffffffff863d5b80 0xffffffff904067e8 file 7 0 0 0
0xffffffff863d5c20 0xffffffff90406840 file 16 0 0 0
0xffffffff863d5b80 0xffffffff90406898 file 7 0 0 0
0xffffffff86456000 0xffffffff904068f0 file 15 1139 15 1139
0xffffffff863d5c20 0xffffffff90406948 file 16 0 0 0
.
.
.
(kdbx) ucred -ref 0xffffffff863d5a40
ADDR OF UCRED ADDR OF Ref Ref Type cr_ref cr_uid cr_gid cr_ruid
=================== ================== ======== ====== ====== ====== =======
0xffffffff863d5a40 0xffffffff9041c0d0 proc 4 0 0 0
0xffffffff863d5a40 0xffffffff90ebc2e0 uthread 4 0 0 0
0xffffffff863d5a40 0xffffffff90406f78 file 4 0 0 0
0xffffffff863d5a40 0xffffffff90408730 file 4 0 0 0
(kdbx) ucred -check 0xffffffff863d5a40
ADDR OF UCRED cr_ref Found
Kernel Debugging Utilities 2–35