The docs have been restructured for better navigation. Found a broken link or have feedback to share? Let us know
here.
Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

KCLocateAddress

Description

Given an address, report where it lives in the kernelcache: the region that covers it, the KEXT that owns that region, and the collection the KEXT came from. Answered from the cache layout, so it works for an address in a KEXT nobody has loaded.

Available from the KC Index context menu, under Locate.

Locate > Address
The "Locate > Address" entry in the KC Index context menu

Choosing the action asks for an address, then selects the matching region in the index, expanding whatever folders it takes to show it.

This is the one to reach for with an address out of a panic log or a stack trace, before deciding what to load.

See Kernelcache Workflow.

Last updated

Was this helpful?