windbg

Debugging Windows Kernel from Linux

与世无争的帅哥 提交于 2019-12-03 11:48:45
问题 I used to debug the Windows Kernel using VirtualKD , WinDBG and a single Virtual Machine. Recently I got a Linux machine, and now I wonder- What's the easiest way to debug the Windows Kernel when your host is unable to run VirtualKD/WinDBG* ? I assume the solution will require two Virtual Machines, but I rather have two instances hosted on my actual machine rather than having an instance residing inside another virtual instance... Is there anyway to make that work? Thanks in advance! *Wine is

How do I stop windbg from being the interactive debugger?

孤者浪人 提交于 2019-12-03 10:20:00
问题 What is the proper way to undo windbg -I on vista/win7? Is it as simple as deleting the registry keys in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug? 回答1: You don't need to delete the entire registry key. Deleting the Debugger value is enough. When an exception occurs, the system first looks to see if there is a debugger registered. If so, it just launches the command line specified. Otherwise, it invokes Windows Error Reporting to collect the crash dump. All

how can i set windbg to automatically download all the symbols?

戏子无情 提交于 2019-12-03 09:04:18
am new to programming and debugging in general. i spent a lot of time offline (without internet), and am reading Inside Windows Debugging book, but from time to time, i found myself in need to a pdb file. i did some digging and i found this URL: http://msdn.microsoft.com/en-us/windows/hardware/gg463028.aspx , but too many versions, i spend some time trying to figure out how to find the right version. i did find the right build, and i did downloaded it, but no luck (took me more than 6 hour to download 200 Mb), but i found myself on the beginning of the circle (pdb are not the right one, even

Are there any WinDBG replacements with a better GUI?

匿名 (未验证) 提交于 2019-12-03 08:41:19
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I'm using WinDBG occasionally to analyze problems in production environment, where VS cannot be installed. There's no doubt it's an extremely powerful tool, but using it is a bit annoying. Even though the product is frequently updated, its GUI goes back to the Win95 days or so, and its usability is accordingly. Having to fight the GUI to layout the windows the way I want, and having to remember all those textual commands, is just quite low a standard for a modern desktop application. AFAIK, WinDBG is pretty much built on top of CDB, which is

WinDbg and .Net x64 Assembly : Step-By-Step Walkthrough for hitting a breakpoint in a C# source

匿名 (未验证) 提交于 2019-12-03 08:30:34
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am having very hard times using WinDbg to track a simple object reference in a C# Forms App. I have found a very nice tuto by Chris Lovett : GCRoot Demo on using "SOS" in VS' Immediate Window Unfortunately, I am debugging an x64 App and recompiling my App into 32-bit will bias the test conditions I am willing to recreate. Trying to load SOS in an x64 Assembly results, as expected, in the following error : Error during command: extension C:\Windows\Microsoft.NET\Framework64\v4.0.30319\sos.dll could not load (error 193) So, as WinDbg seems

Unable to read crash dump in windbg

烂漫一生 提交于 2019-12-03 08:26:04
I have been getting a stackoverflow exception in my program which may be originating from a thirdparty libary, microsoft.sharepoint.client.runtime.dll. Using adplus to create the crash dump, I'm facing the problem that I'm struggling to get any information from it when i open it in windbg. This is what I get as a response: > 0:000> .restart /f Loading Dump File [C:\symbols\FULLDUMP_FirstChance_epr_Process_Shut_Down_DocumentumMigrator.exe__0234_2011-11-17_15-19-59-426_0d80.dmp] User Mini Dump File with Full Memory: Only application data is available Comment: 'FirstChance_epr_Process_Shut_Down'

Can WinDBG be made to find mscordacwks.dll in the symbol store?

一笑奈何 提交于 2019-12-03 07:37:20
The Question There are plenty of manual ways to make WinDBG find mscordacwks.dll without a symbol store (putting the file in the path somewhere, putting it in the same folder as windbg.exe, putting it in my Framework\v folder, specifying the path in WinDBG using .cordll -lp c:\dacFolder , etc.), but they all only fix it for me . I need to fix it more generally for everyone who uses my symbol store . The possible solutions I can imagine are: WinDBG be made to check the symbol store using mscordacwks.dll's subfolder name instead of mscorwks.dll's folder name. SymStore.exe be made to add

Windbg Set Conditional Breakpoints that depends on Call Stack

守給你的承諾、 提交于 2019-12-03 06:19:34
The problem : I need to make a script or an expression that that doesn't break if somewhere on callstack is a function with a specific name. Specific question : How can I get functions on callstack to a list of strings ? Example : Module!MyFunctionWithConditionalBreakpoint Module!Function1 Module!Function2 Module!Function3 Module!MyFunctionWithConditionalBreakpoint Module!Function1 Module!ClassA:MemberFunction Module!Function3 I want Module!MyFunctionWithConditionalBreakpoint to break only if the call cames from Module!ClassA:MemberFunction I need this in unmanaged code . Managed solution is

How do I debug a process that starts at boot time?

送分小仙女□ 提交于 2019-12-03 06:13:50
问题 I am trying to set a breakpoint into a Windows service that starts at boot time. Because of an unfortunate mistake on my end, the service forces the machine into a reboot loop: this means that I can't get to a stable state from which I could deploy a fix, and obviously I can't try to debug the service at a more convenient time. I can use windbg in kernel mode. I'd very much like to break when the service hits the wmain function, but I'm having issues with that. Up to now, I found that I can

What is the best resource for learning the features and benefits of windbg?

我的梦境 提交于 2019-12-03 06:06:14
问题 What is the best resource for learning the features and benefits of windbg? I want to be able to discuss investigate memory issues (handles, objects), performance issues, etc . . . 回答1: These are some I like: Maoni Stephens and Claudio Caldato's article on MSDN Maoni's blog (it is not updated recently but it contains a lot of useful material) Tess Fernandez has a a LOT of info reguarding windbg check out her video from teched in Barcellona. She also has an article called "Learning .NET