bookmark command — Glaurung

use it for

Bookmarks mark addresses you want to revisit. The delete action takes the bookmark ID printed by list.

Run glaurung bookmark --help on your installed version before putting the command in a script. Glaurung is still pre-1.0.

input: A project plus add, list, or delete. Add takes a VA and free-form note.
output: Dated address bookmarks stored in the project.
mode: writes state. add and delete update the project.

command shape

short form

$ glaurung bookmark PROJECT {add|list|delete} ...

The installed parser is authoritative: glaurung bookmark --help

before the examples

The examples use the checked-in hello-c-clang-debug fixture and a project named hello.glaurung.

$ glaurung kickoff samples/binaries/platforms/linux/amd64/export/native/clang/debug/hello-c-clang-debug --db hello.glaurung

run it

The note belongs to the bookmark, not to the instruction itself.

run

from the engine checkout

$ glaurung bookmark hello.glaurung add 0x1150 argument loop

output

captured result captured 2026-08-31

bookmark #1  0x1150  argument loop

captured 2026-08-31.

Read the result: Use comment when the note describes the code. Use a bookmark when the note describes your workflow.

List prints the ID required by delete.

run

from the engine checkout

$ glaurung bookmark hello.glaurung list --va 0x1150

output

captured result captured 2026-08-31

id  va       when                 note
--------------------------------------------------
1   0x1150   2026-08-31 20:09:05  argument loop

captured 2026-08-31.

Read the result: Use the numeric ID for deletion. The VA is an address in the analyzed image and can have more than one workflow bookmark.

used above

These are the flags used by the examples. Run glaurung bookmark --help for the complete parser help.

before you rely on it

keep working