windbg Questions

1

I'm running a 32bit application and it fails on shortage of memory (bad_alloc is thrown). However, when I'm looking in the dump file I can see that most of the memory is in "busy internal&quot...
Live asked 22/8 at 8:53

5

Solved

I am trying to use windbg to research a hang dump file created on an x64 machine for our x86 process. This is a 4.0 x86 application, so just to get an unmanaged stack, I had to do the following: ....
Hopson asked 7/5, 2013 at 15:12

2

Recently I start facing issue on few servers where CPU start consuming more resources than usual trend. I am trying to find out the root cause for this and took the dump of w3wp process from Task M...
Reavis asked 20/2, 2017 at 13:41

2

Solved

Is there a Windbg/NTSD command to tell me if a process I have attached to in a live debugging session is a 32-bit one or a 64-bit one? Could you please tell me for both: An unmanaged process? ...
Gable asked 9/4, 2017 at 15:55

3

Solved

What does 0n0 mean in windbg ? My windbg is showing all local variables with 0n1500 etc..
Heatherheatherly asked 26/4, 2011 at 22:7

1

For a previous employer, while performing dump analysis, I have regularly used heap_stat.py, based on PYKD library for Windbg. I believe heap_stat.py script only works for C/C++ development. Is the...
Marchant asked 13/6, 2023 at 14:56

4

Solved

How can I Save Output of a command in WinDbg to a Text File?
Raimes asked 17/6, 2009 at 9:38

1

I want to put a breakpoint on a certain register that will fire whenever the register holds the value specified. In the following example: mov eax,10 mov ebx,12 inc eax dec eax Pseudocode: bp @eax...
Helsa asked 2/10, 2022 at 15:35

0

I am trying to debug a memory leak with WinDbg Preview (the Windows Store application). I can execute !heap -s to obtain the list of heaps, then !heap -stat -h <address_of_a_heap> to get stat...
Articular asked 4/5, 2022 at 11:2

1

Solved

I am trying to convert a 2 tier symbol store into a 3-tier symbol store using the convertstore.exe tool as described by Microsoft. However, I get error messages which do not tell me much. Depending...
Phototelegraphy asked 10/2, 2022 at 15:31

2

Solved

I have followed Tess Ferrandez' blog for setting up a custom theme in WinDbg. I have also started launching WinDbg automatically with -c ".cmdtree c:\mycmdtree.txt" This correctly opens my cmdtre...
Knob asked 16/4, 2010 at 18:3

4

Solved

Via Adplus I attached a process (in my iis I ran a website) C:\Program Files (x86)\Debugging Tools for Windows (x86)>ADPlus -crash -pn w3wp .exe -o C:\dumps Below is the code to reproduce sta...
Subsellium asked 4/5, 2012 at 16:33

2

Solved

I am using VS.NET 2010. I compiled a very simple .NET 4.0 application. using System; using System.Collections.Generic; using System.Linq; using System.Text; namespace TestWindbg { class Program ...
Plyler asked 1/8, 2012 at 23:15

2

Solved

I am following this stackoverflow post What do the different columns in the "!heap -flt -s xxxx" windbg command represent I am trying to understand the information printed out for one of...
Parthenopaeus asked 24/10, 2012 at 23:2

2

Solved

I've a problem on a preproduction server and I thought it was the right time to try the time travel debugger added to the WinDbg Preview. But it seems impossible to get it outside a dev machine: I...
Warren asked 14/6, 2021 at 14:3

5

Solved

I enumerate all threads in a process through the CreateToolhelp32Snapshot function. I would like to get some basic stack information for each thread. More specifically I would like to get stack bot...
Quackery asked 12/10, 2010 at 19:42

4

Solved

Our nightly build process was broken for a long time, such that it generated PDB files that were a few hours different in age than the corresponding image files. I have since fixed the problem. Ho...
Polanco asked 13/4, 2009 at 18:19

0

My environment: Qt5.14.2 + QtCreator4.14.2 + MSVC2017 When I debug programs in QtCreator with CDB, I cannot see the variable's value from using cursor pointing to the variable, but says "Expre...
Weeny asked 31/3, 2021 at 9:58

3

Solved

I'm trying to analyze some mini crash dumps. I'm using Windows 10 Pro Build 1607 and WinDbg 10.0.14321.1024. I have my symbol file path set to SRV*C:\SymCache*https://msdl.microsoft.com/download/s...
Menon asked 5/9, 2016 at 17:29

1

Solved

I recently learned about the process for debugging managed code in Windbg with sos. I've looked through numerous examples and from what I've seen, this should work. But it doesn't. This is a .net c...
Barrios asked 9/12, 2020 at 3:0

4

I'm trying to filter the output of a command, e.g the output of lm is too long. Something similar to lm | find "some_string". Does windbg support that? I can't find any document online talking ab...
Fiddler asked 10/2, 2017 at 7:5

5

Solved

When using WinDbg, where should the private symbol files (pdb?) be placed? My situation is: I have a DLL which I want to debug. I have the source code and symbol files for this DLL. This DLL is ca...
Construction asked 23/1, 2009 at 3:3

14

Solved

Does anyone know how to get ahold of windbg without having to download the entire 620MB WDK ISO? All I can find on the net to download the debugger is this link, which says you have to get t...
Hakan asked 29/4, 2010 at 9:46

2

Solved

In windbg, is there a way to convert an address to a symbol + offset? eg: 66ef0c17 = MSPTLS!LssbFIsSublineEmpty+0x115f
Exonerate asked 15/9, 2015 at 14:32

4

Solved

I'm using Qt Creator 2.01 32-bit with Qt 4.7.1 on Windows 7 64-bit. I compiled my Qt library using Microsoft Visual C++ 2010. Now I want to use CDB with Qt Creator (or GDB if that works, or whateve...
Reborn asked 15/3, 2011 at 22:7

© 2022 - 2024 — McMap. All rights reserved.