在执行时,strace -ttT date
我会在可执行文件发布后立即错过很多系统调用。在 execve() 之后没有进一步的系统调用将date
ELF 从 HDD 复制到内存,这是否发生在内核中?我以为我会在 HDD 控制器上看到很多 IOCTL,每个字节都会按块加载到内存中?
16:00:00.505197 execve("/bin/date", ["date"], [/* 30 vars */]) = 0 <0.038088>
16:00:00.543671 brk(0) = 0x11b9000 <0.000074>
16:00:00.543915 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) <0.000077>
16:00:00.544187 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f4083a000 <0.000076>
16:00:00.544416 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000018>
16:00:00.544543 open("/etc/ld.so.cache", O_RDONLY) = 3 <0.000059>