Icons for Memory Dump Analysis Patterns (Part 61)
Today we introduce an icon for Hooked Functions (user space) pattern:
B/W
![]()
Color
![]()
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Today we introduce an icon for Hooked Functions (user space) pattern:
B/W
![]()
Color
![]()
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
You must be logged in to post a comment.
July 26th, 2010 at 3:33 pm
Nice but I always picture user space sitting above kernel space. Eg. calling down into the kernel.
July 26th, 2010 at 4:23 pm
I consider calling down as kernel callbacks into user space. Kernel must be on top otherwise .NET would sit on top like a king
A few days ago I was contemplating different diagramming styles for such a matter and will write a blog post later today as this becomes a stylistic controversy. Thanks!
July 27th, 2010 at 4:44 pm
[…] Internals team) and some prefer to put Kernel on top (like me). Marc Sherman in the comment here explains the former style as “calling down into the kernel”. Originally I thought […]