CORE(5) File Formats Manual CORE(5)
core - format of core image file
UNIX writes out a core image of a terminated process when any of vari-
ous errors occur. See signal(2) for the list of reasons; the most com-
mon are memory violations, illegal instructions, bus errors, and user-
generated quit signals. The core image is called `core' and is written
in the process's working directory (provided it can be; normal access
The first 1024 bytes of the core image are a copy of the system's per-
user data for the process, including the registers as they were at the
time of the fault; see the system listings for the format of this area.
The remainder represents the actual contents of the user's core area
when the core image was written. If the text segment is write-pro-
tected and shared, it is not dumped; otherwise the entire address space
In general the debugger adb(1) is sufficient to deal with core images.