windbg Questions

3

I'm doing some crash dump debugging, where I am looking a dump taken from a production server. The machine I'm running WinDbg on must have a slightly different version of the .NET runtime installed...
Shadowgraph asked 4/9, 2015 at 19:31

2

Solved

Is there a way to get the path of the pdb file currently used by windbg? Either by a native command, or, preferably, using the plugin API. So, ideally I want to be able to do something like: pr...
Cottontail asked 12/9, 2013 at 5:28

1

Solved

As we learned recently, Microsoft has stripped type information from symbols in some versions of ntdll. Imagine I have the source code of a library and I would like to publish public symbols, but ...
Omland asked 26/8, 2015 at 20:46

2

Solved

Problem I have a Windows application that we developed for in house use. Thanks to Windows Error Handling, the window stays open and I can easily generate a crash dump from the task manager. I ha...
Memoir asked 7/8, 2015 at 23:53

3

How do I determine which are the foreground .NET threads from WinDBG ? Using the !threads command the SOS extenstion tells us the count of the foreground threads but not which ones.
Anya asked 28/4, 2009 at 11:22

1

Solved

I am just debugging a Windows application which is crashing. After starting the app, attaching to it with WinDbg, and then letting it crash, the following appeared in the WinDbg command window: (1...
Hamstring asked 23/7, 2015 at 11:41

1

Solved

Windbg should understand the MS exception protocol used to pass thread names to a debugger. I can't get this to work. Looking on the net there are many examples showing "~" thread lists with no th...
Charleen asked 22/7, 2015 at 6:15

1

I'm following this tutorial: link. At step 8, when I say .load sos in the Immediate Window, it just pukes expected expression. System: Win 7 x64, Visual Studio 2012 Premium. I have an installed De...
Transilient asked 4/6, 2013 at 20:31

1

Solved

I have a full memory dump of a process taken through Task Manager. Can I determine what the time was on the machine at that moment?
Seldan asked 15/7, 2015 at 17:14

2

Solved

I've got a crash-dump file (my 32-bit windows application has crashed on a customer computer). Exception code is 0xE06D7363. So, I found this article from MSDN blogs about decoding the exception pa...
Goebbels asked 1/2, 2012 at 12:35

2

Solved

I want to debug a program in kernel mode, and I want to break on the entry point of the program like ollydbg. But I can't break it with bp because the program is not start and the symbol can't be l...
Mall asked 8/7, 2015 at 14:12

2

I read a post about Visual Studio 2012 being able to support Windbg commands in the immediate window. This requires that one chooses the "Windows User Mode Debugger" option while choosing the Trans...

1

I am having a bit of trouble trying to find some unmanaged memory allocation from a .dmp file. I have been trying to follow the tips - here but I am hitting a bit of a wall !address -summary give...
Collen asked 16/6, 2015 at 8:6

2

Solved

I tried to set a breakpoint using WinDbg at a source code of a c# application, but it didn’t work. Is there a way to set a breakpoint at a source code of managed application when I use WinDbg? Rep...
Outlast asked 12/7, 2012 at 23:9

1

I am debugging the following C program in Windbg: int main() { size_t size = 500*1024*1024; void *p = malloc(size); memset(p, 'a', size); printf("%p", p); } I compiled the program using: cl ...
Eructate asked 5/6, 2015 at 15:22

2

Solved

I've spent several days trying to speed up loading of symbols when debugging crash dumps using WinDbg, and I'm unable to get past a particular problem. The issue is that when symbols for a module...
Letters asked 5/6, 2015 at 14:10

2

I need to debug a 32-bit managed application using WinDbg, however WinDbg stubbornly refuses to load the SOS.dll extension. After many Internet searches and things tried I'm stumped. I have experie...
Gonium asked 17/3, 2014 at 17:32

3

Solved

I have a problem with symbol files. I experimented with the symbol file path and set the path as follows: srv*c:\symbols*http://msdl.microsoft.com/download/symbols;C:\Users\myuser\Desktop\driver2\...
Walkup asked 15/8, 2013 at 19:52

2

Solved

Is there any extension command could to do so? I just want to the the whole command line including all parameters.
Nest asked 3/6, 2011 at 8:40

1

Solved

There is a lot of information available about the .NET LOH and it has been explained in various articles. However, it seems that some articles lack a bit of precision. Outdated information In Bri...
Rubinstein asked 20/5, 2015 at 22:4

1

Solved

I have several hundred instances of MyClass present in managed heap. Some of these are in large-object heap. Below is how various heap structure looks 0:000> !EEHeap -gc Number of GC Heaps: 1 ...
Labile asked 17/5, 2015 at 14:54

1

Solved

I have a x64 crash dump of a managed (C#) application that p/invokes to native code. The dump was taken after the native code attempted to dereference a bad memory location, and after the .NET mars...
Limassol asked 11/5, 2015 at 16:26

5

Solved

In looking at a DateTime struct in the debugger via SOS.dll, I see... 0:096> !DumpVC 000007feed1ddff8 000000028036d890 Name: System.DateTime MethodTable: 000007feed1ddff8 EEClass: 000007fe...
Excruciation asked 25/5, 2012 at 18:2

1

Solved

I am trying to do Windows kernel debugging so I have set up two machines for this purpose: HOST - DEBUGGER - The computer that runs the windbg debugger TARGET - DEBUGEE - The computer being debug...
Hop asked 5/5, 2015 at 9:36

9

Solved

I started learned windbg and I found this good post How to use WinDbg to analyze the crash dump for VC++ application? Now I want to follow the instructions and do it step by step. Here is the prob...
Maladjusted asked 17/2, 2011 at 12:13

© 2022 - 2024 — McMap. All rights reserved.