Interdata_v6/usr/doc/man/man5/core.5

.th CORE V
.sh NAME
core \*- format of core image file
.sh DESCRIPTION
UNIX
writes out a core image of a terminated
process when any of various errors occur.
See
.it "signal (II)"
for the list of reasons;
the most common are memory violations, illegal
instructions, address errors, and user-generated
quit signals.
The core image is called ``core'' and is written in the process's
working directory (provided it can be; normal
access controls apply).
.s3
The first 1536 bytes of the core image
are a copy of the system's per-user
data for the process, including the registers
as they were at the time of the fault.
The
remainder represents the actual contents of
the user's core area when the core image
was written.
If the text segment
is write-protected and shared,
it is not dumped; otherwise the entire
address space is dumped.
.s3
The format of the
information in the first 1536 bytes
is described by
the
.it user
structure of the system
(see /usr/sys/user.h).
.s3
In general the debugger
.it "ddt (I)"
is sufficient to deal with core images.
.sh "SEE ALSO"
ddt (I), signal (II)