windbg Questions
1
Solved
In OllyDbg it allow you to run until return, e.g you run into a ret or leave instruction.
Does WinDbg support that? I didn't find such a function in the menu.
Sholapur asked 4/9, 2013 at 6:16
1
Solved
I'm using windbg to debug an Windows executable. I want to know how I can see arguments passed to any function using WinDBG.
For example If I wanna know the parameters passed to function Kernel32!...
2
Solved
I'm familiar with the WinDBG paradigm. Been reviewing a lot of dump files using WinDBG x64 version. For the most part dump files were .NET 2.0 applications and psscor2.dll. Current WinDBG version I...
Borg asked 31/8, 2013 at 16:27
1
Can somebody help me with answering my 2 questions below?
What does GCFrame mean in !clrStack output?
What does System.IndexOutOfRangeException..ctor() showing in the stack mean? Does it mean the...
4
Solved
I attached WinDbg to a running process and had the process crashed (I have a separate question re. that case). Once the program crashed, WinDbg stopped and allowed me to debug the program. I took a...
3
Solved
We have an umbraco 4.11 instance with around 400 nodes, running on iis 7.5, .net 4, windows 2008 r2. upon first visit it consumes around 500mb of ram and moves up to around 900mb. Since the site is...
Breakwater asked 3/8, 2013 at 5:52
0
A self-hosted C# ASP.NET WEB.API application stops responding to HTTP GET / POST operations in production. I have a memory dump taken from the production server. The only thing unusual in the dmp i...
2
Does anyone know if there is a cap on the number of DLLs WinDbg can see ? I believe Visual Studio was once capped at 500 but I can't find a source for this claim outside of some second hand account...
1
I am trying to analyze an IIS memory dump usinf Windbg and SOS and ran into an issue with version of files mentioned above. My question is - is there a way I can download the different versio...
1
Any way to make Windbg to break when a specific value is assigned to the eax register? I know one of the functions in my program is returning an specific error, it would be very fast to find the gu...
Lamar asked 6/6, 2013 at 23:27
1
Solved
I'm still a relative novice with C++, and I've run into a problem with at third-party DLL that I'm statically linking to from my native C++ DLL. I'm using Visual Studio 2012 to debug my DLL.
(FWIW...
Shaftesbury asked 28/5, 2013 at 20:9
1
Solved
Looking at a crash dump in windbg, I can see that all current threads are stalled at
> ~2k
ChildEBP RetAddr
00d2fcc8 7d4e27dc ntdll_7d600000!ZwWaitForMultipleObjects+0x15
or SingleObject var...
Corelation asked 23/5, 2013 at 11:42
2
Solved
I want to set a data-write breakpoint on the value of xul.dll+0x7d760, hopefully using a command script.
I can print the base address of xul.dll using lm, and manually set the breakpoint with
ba ...
Inflexible asked 13/5, 2013 at 18:16
1
Solved
I was looking for a debugger for Windows, other than GDB, which is freely accessible. I found WinDbg and it looks quite good so I wanted to give it a try. Now when I go to the MSDN page it offers t...
Baerl asked 10/5, 2013 at 18:27
2
Solved
I got a minidump from the Windows Store Apps submission process (sent by a reviewer) because of a crash in my app. I am having problems loading the symbols for my app, because the error occurs insi...
Jaguarundi asked 9/4, 2013 at 6:21
1
Solved
The following message is copied from WinDBG's output window:
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, 8f9ec9f8, 8f9ec5d0, 87c4fccc}
Probably caused by : Ntfs....
Goulash asked 14/3, 2013 at 9:6
2
Solved
I'm having a very strange issue in trying to debug a minidump file using windbg.
I've tried this both on my own machine & by running windbg on the target machine from where the minidump was tak...
3
We got a high traffic website which generates a lot of I/O. Within 10 minutes it has been reading over 10 gb of data (w3wp in question seen in task manager). For memory and application hangs I have...
Garling asked 25/2, 2013 at 1:8
1
Solved
I'm debugging a crash dump file for a .NET 2.0 assembly in WinDbg.
When I type "lm" into WinDbg, I get a long list of loaded modules like this:
723c0000 72950000 mscorwks (deferred)
.
.
What ...
Indefinite asked 25/2, 2013 at 14:25
1
Solved
What settings do I need to set in Windbg to be able to step into/through MFC source code like I can with Visual Studio?
2
I use windbg to debug the crash dump, in the following output from the windbg, you can see that "first/second chance not available", Why the first/second chance not available here? what does this m...
1
To start with, this is not a general question about how to do heap analysis, as this I'm quite familiar with in earlier versions of Windows.
What I'm wondering however is if anyone has managed to ...
Swats asked 29/1, 2013 at 9:19
2
Solved
In the last month our ASP.NET web app has stopped responding to requests and we have had to reset the app pool to get it back up.
We are having trouble identifying the exact cause of the issue, as ...
1
Solved
How I can obtain file path from handle with windbg/kd in kernel mode?
1
Solved
For example output stack as non-executable, some heap is executable/non-executable..
Rok asked 2/2, 2013 at 21:28
© 2022 - 2024 — McMap. All rights reserved.