Basically, I have a user mode program that calls kernel32.CreateProcessA() which internally calls kernel32.CreateProcessInternalW(). Within this function, I'm interested in what is happening inside...

There's an old question asking whether C# is JIT compiled every time and the answer by famous Jon Skeet is: "no, it's compiled only once per application" as long as we're talking about desktop appl...

When I run gflags on windows 7, it should come up with UI but it doesn't. I see a brief black command window which then exits and gflags UI never comes up. It probably work from command prompt but ...

you know how you can use gflags wih +ust to get the call stack paired with each allocation. you can then use !heap in windbg to diagnose leaks? I want to do this with large allocations made throug...

The C#/.NET application I am working on is suffering from a slow memory leak. I have used CDB with SOS to try to determine what is happening but the data does not seem to make any sense so I was ho...

I am trying to get to the bottom of what the CLR exception that is in my dump file but I am having an issue trying to execute: 0:000> .loadby sos clr The call to LoadLibrary(C:\ProgramData\dbg\...

I'm having a problem with some of my apps. It's a wcf-based app running under IIS6 in Windows 2003 Server (x86): In Event Log I get such an error from "W3SVC-WP" source (EventID=2262): ISAPI 'C:\...

I am attempting to invoke a C++ function in a process that I attach to, via the Windows debugger CDB. The function is defined as: void LockerImpl<IsForMMAPV1>::dump() const { ... } The sy...

Edit 2: If it's not possible, I will award the bounty to an answer that proves it (I mean provides some credible sources that back the claim that it's not possible). Let's say I have a pointer t...

I have the following dump of delegate object: Name: MyEventHandler MethodTable: 132648fc EEClass: 1319e2b4 Size: 32(0x20) bytes Fields: MT Field Offset Type VT Attr Value Name 790fd0f0 4000...

I am doing remote debugging of windows vista using VmWare , but i encounter the *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrpamp.exe " also , if i give "!pro...

We have a .NET background processing application (console app) that executes some arbitrary workloads (basically internal users supply .NET DLLs implementing "Execute" interface). Background proces...

I have a crash dump and I suspect GDI leaks to be a cause of the crash From the full crash dump is there anyway to find out the number of GDI handles used by my process when it crashed?

I'm debugging a potential GDI Handle Leak. Thanks to @Alois Kraus, there is a WinDbg script which performs a handle count. From my debugging sessions, especially for .NET, I find that usually, it'...

I have a C++ project which I use with travis-ci. Right now, I build it using boost.build, and on travis, when I run the unit tests, I do it through gdb, so that I get a backtrace in the event of a ...

This is a .NET v4 windows service application running on a x64 machine. At some point after days of running steadily the windows service memory consumption spikes up like crazy until it crashes. I ...

I have a managed code Windows Service application that is crashing occasionally in production due to a managed StackOverFlowException. I know this because I've run adplus in crash mode and analyzed...

I'm debugging a Winforms application for a memory leak. In the dump file provided by the customer there is a large discrepancy between the unknown memory usage and the .NET Heap size. (Approximatel...

In user mode debugging, I usually break with the following command: sxe ld Something.dll I tried the same in kernel mode, but it is not working. Is there a different command?

I'm running Qt Creator 2.3.0, based on Qt 4.7.4, on Windows 7 64-bit. When I run the app from Qt Creator (ctrl+r), everything works great. However, when I debug (F5), executing each line takes fore...

I tried to use windbg to print "this" pointer when entering a member function, like below. class IBase { int m_i; public: IBase() :m_i(23) {} virtual int FuncOne(void) = 0; virtual int FuncTwo...

I made C++ application to use with WinDbg, and intentionally add access violation run-time error. Application was compiled as release build, and then I copied exe from release folder to desktop. ...

The Question There are plenty of manual ways to make WinDBG find mscordacwks.dll without a symbol store (putting the file in the path somewhere, putting it in the same folder as windbg.exe, puttin...

I'm trying to install the Windows Debugging Tools via the Windows SDK and after two attempts I am at a loss for what to do. I start the installation and receive no errors at all but the debugging t...

Dumps obtained from Windows Error Reporting typically have a useless current context set on the faulting thread, with a stack deep in WerpReportFault. The actual context at the time of the exceptio...