Skip to content

stackpulse 0.5.1

Choose a tag to compare

@pablogsal pablogsal released this 21 Jul 14:46
846b4a7

Fixed

  • ELF image-base correlation preserves valid page-rounded executable mapping tails when a following PT_LOAD begins in the shared file page, retains mappings made executable with mprotect, and rejects ambiguous shared-page heads.
  • Empty or overflowing ELF file ranges no longer participate in load-segment correlation, and overflowing module-relative addresses remain unassociated during both recording and spool replay.
  • User samples without usable unwind registers can recover missed mappings from their sampled instruction pointer without treating hypervisor or guest addresses as host user addresses.