FUNCTION::SYMDATA(3stap)

πŸ’– NAME πŸ’–

okay so bestie, gather round: function::symdata β€” it returns the kernel symbol and the module offset for the address. that's the whole gig. that's the vibe. 🫢


✨ SYNOPSIS ✨

symdata:string(addr:long)

like, that's it. she's lowkey simple. πŸ’…


πŸŽ€ ARGUMENTS πŸŽ€

  • addr β€” the address you want translated. that's the one job. the address. to translate. hand it over. 🫴

🌸 DESCRIPTION 🌸

okay so here's the tea, and it's actually kinda elegant ngl. πŸ¦‹

If the address is known, you get back the (function) symbol name that's associated with it, plus the offset from the start of the symbol, plus the size of the symbol, plus the module name β€” and the module name comes wrapped in brackets. cute little parentheses moment. πŸŽ€

If the symbol is unknown but the module is known? no worries, she pivots: you get the offset inside the module, plus the size of the module. still useful! still slaying! πŸ”₯

And if any element just... isn't known? it gets omitted. no drama, no placeholder, it's simply not there. ✨

And if the symbol name itself is unknown β€” like truly unknown β€” she returns the hex string for the given address. raw. unfiltered. hex. πŸ’€

fr fr, the rule is: unknown stuff gets left out, and a fully-unknown symbol means you're getting hex back. don't be surprised when it happens. πŸ™ˆ

πŸ‘‘ SEE ALSO πŸ‘‘

iykyk. go read it. πŸ“š


okay that's the whole page bestie, periodt πŸ’–βœ¨

this was pulled straight out of the SystemTap Tapset Reference (version field says Ver, no number, iconic of them honestly) and it's dated September 2026 β€” so like, from the future. main character energy. 🌈⭐

πŸ“¦ where this page comes from