Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    text
    copied!<p>As you probably figured out, Apple only has to release parts of the kernel which are taken from other open-source projects, and that doesn't include the userland libraries that they build on top of the kernel. <code>CoreSymbolication/CoreSymbolication.h</code> sounds a lot like a userspace header for Obj-C though, so you can probably build the kernel DTrace utilities without it. (Although I could very well be wrong.)</p> <p>I would guess it's being used for symbol identification in the userland <code>dtrace(1m)</code> command. If only there was a tool that could help us figure this out... :-D</p> <pre><code># dtrace -n 'pid$target:CoreSymbolication::entry {}' -c 'dtrace -ln syscall::write:entry' dtrace: description 'pid$target:CoreSymbolication::entry ' matched 246 probes ID PROVIDER MODULE FUNCTION NAME 147 syscall write entry dtrace: pid 88089 has exited CPU ID FUNCTION:NAME 2 6538 CSSymbolOwnerGetRegionWithName:entry 2 5014 CSSymbolOwnerForeachRegionWithName:entry 2 5078 CSRegionForeachSymbol:entry 2 6495 CSSymbolicatorGetSymbolOwnerWithUUIDAtTime:entry 2 6493 CSSymbolicatorForeachSymbolOwnerWithUUIDAtTime:entry 2 6494 CSSymbolicatorForeachSymbolOwnerWithCFUUIDBytesAtTime:entry 2 5048 CSSymbolOwnerGetDataFlags:entry 2 6538 CSSymbolOwnerGetRegionWithName:entry 2 5014 CSSymbolOwnerForeachRegionWithName:entry 2 5078 CSRegionForeachSymbol:entry 2 5092 CSSymbolIsExternal:entry 2 5092 CSSymbolIsExternal:entry ... </code></pre> <p>It looks like the library is in use by the <code>dtrace</code> command, anyway.</p>
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload