Normally Luke would group the same functions together but since I don’t have debugging symbols I had to eyeball nearby addresses to guess if it’s the same place. And what do we see? Not one bottleneck but two of them!

Why does it make sense to group them together just because they are close?

  • Since two, or more addresses are part of the same function why would you not group them together? Mar 2 at 22:09
  • Why does it make sense to have "close addresses" instead of "same address"? If it's the same function, it should have the same address... I think...
    – misaki
    Mar 3 at 2:04
  • The func A from the lib has calls to strcmp@0xDEADBEEF and strlen@ 0xDEADBEADin it that are expensive. Since you analyze the lib, you want to see the performance metrics on func A level. Since there are no symbols, the tool cannot say that 0xDEADBEEF and 0xDEADBEED are both part of func A so you have to do the grouping based on proximity. That's my understanding for the grouping (I would probably do the same) but ofc you could ask the author for his clarification. Mar 3 at 6:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.