windbg

Recognizing synchronization object hanging two 3rd party executables

I'm using a 3rd party tool, which uses a 4th party plugin. Occasionally, the tool will hang when launched. Looking at the stack traces, I can see a few threads are waiting on WaitForSingleObject, and my bet is that they're blocking each other. Some of the threads start at the 3rt party tool, and some at the 4th party plugin. What I'd li...

Windows debugging - WinDbg

Hi, I got the following error while debuggging a process with its core dump. 0:000> !lmi test.exe Loaded Module Info: [test.exe] Module: test Base Address: 00400000 Image Name: test.exe Machine Type: 332 (I386) Time Stamp: 4a3a38ec Thu Jun 18 07:54:04 2009 Size: 27000 CheckSum: 54c30 Characte...

How to configure WinDbg to be one of the optional debuggers when application hit a user defined break point?

Hi, when an application on my machine encounter a user defined break point it windows opens a dialog that let me choose a debugger to attach to the process. Currently it offers me to choose one of the two versions of visual studio that installed on my machine (2008 or 2010) I want to add to the options WinDbg. Is it possible? ...

Why isn't !locks working for me?

I'm using windbg (the latest available from the MSDN download page). I'm trying to debug a deadlock in my app, and !locks would be very useful. However, it's not working: 0:023> !locks NTSDEXTS: Unable to resolve ntdll!RTL_CRITICAL_SECTION_DEBUG type NTSDEXTS: Please check your symbols I don't know why it's upset. I've got symbols ...

!gcroot output leads nowhere

I am troubleshooting memory fragmentation in an app pool, as evidenced by a small number of Free objects consuming the most space on the heap: 0x000007ff00256728 6,543 3,890,208 System.Collections.Hashtable+bucket[] 0x000007ff002649a8 7,297 22,979,560 System.Byte[] 0x000007ff001e0d90 251,347 30,374,304 System.String 0...

windbg and symbols

When I set a breakpoint on one of the methods that appears on top of the stack (!CLRStack), I get lots of these messages for every DLL that the debuggee is referencing including the .NET Framework ones. ERROR: Module load completed but symbols could not be loaded Further digging into this shows that windbg is not loading every .pdb fil...

How to solve this error that is shown on Windbg?

Hello, I've loaded a .exe and it gave this error: Microsoft (R) Windows Debugger Version 6.12.0002.633 X86 Copyright (c) Microsoft Corporation. All rights reserved. CommandLine: "C:\Users\Public\SoundLog\Code\Código Python\SoundLog\dist\SoundLog.exe" Symbol search path is: *** Invalid *** **********************************************...

How to fix this exception shown in windbg execution?

Hello, after running the .exe thought WinDBG, this was the exception information provided by pressing "k" when the exception occured: ChildEBP RetAddr 0012e2f4 6f9fbb1c KERNELBASE!RaiseException+0x58 0012e354 6fba88f4 mscorwks!RaiseTheExceptionInternalOnly+0x2a8 0012e36c 6fba8966 mscorwks!RaiseTheException+0x4e 0012e394 6fba8997 msco...

Where is the method call in the EXE file?

Introduction After watching this video from LIDNUG, about .NET code protection http://secureteam.net/lidnug_recording/Untitled.swf (especially from 46:30 to 57:30), I would to locate the call to a MessageBox.Show in an EXE I created. The only logic in my "TrialApp.exe" is: public partial class Form1 : Form { public Form1() { ...

If program crashes from within cygwin, the post mortem debugger does not trigger

Running a (seg)faulty native windows binary from within a cygwin shell leads to restart the binary for several times. Since I want to analyze the bug I activated windbg as the post mortem debugger (yes, as administrator), but somehow cygwin interferes and windbg does not get triggered. OS: 64bit Windows7 (happened on WindowsXP as well)...

Is it possible to implement a GC.GetAliveInstancesOf<T>() (for use in debugging)?

Hi, I know this was answered before, but I'd like to pose a somewhat different question. Is there any conceivable way to implement GC.GetAliveInstancesOf(), that can be evaluated in Visual Studio Debug Watch window? Sasha Goldstein shows one solution in this article, but it requires every class you want to query inherit from a specific...

Help catching AV with WinDbg and ADPlus 7.0

I want to catch Memory Access Violation in SQL Server Compact Edition like this described at http://debuggingblog.com/wp/2009/02/18/memory-access-violation-in-sql-server-compact-editionce/ The suggested config is: <ADPlus> <Settings> <RunMode>CRASH</RunMode> <Option>Quiet</Option> <ProcessName>MyApp.exe</ProcessName> ...

How do I effectively use psscor2 with Visual Studio 2008 to remote debug into a running process?

I am able remote debug into a process that is running both native and managed code on a VM from my host machine. Also, on the VM I have been using the psscor2 extension with windbg to analyze the .net heaps. I find my self jumping back and forth between Visual Studio 2008 in my host and WinDbg in the VM while attempting to locate and f...

Silverlight SOS (Son of Strike) documenation

Is there any microsoft or even non-official documentation for SOS for Silverlight. Other than a few web posts I have seen zero documentation for it on MSDN. Even official documentation for the CLR version of SOS seems hard to find, this ancient article mentions a sos.htm file that is included in the windows SDK but it doesn't appear to...

Downloading PDB file for machine not connected to the internet

For deubgging some process I will need to download the PDB files for some operating system dll files (OLE32, NTDLL, etc.) That server is not connected to the internet. I know the following method to get the PDB. Get full dump of the process Copy the dump to another machine where internet connection is available Use .reload to downlo...

How can I work out what events are being waited for with WinDBG in a kernel debug session

I'm a complete WinDbg newbie and I've been trying to debug a WindowsXP problem that a customer has sent me where our software and some third party software prevent windows from logging off. I've reproduced the problem and have verified that only when our software and the customers software are both installed (although not necessarily ru...

C++ debugging help for C# programmer

I'm embarrassed to post this but it's been awhile since I worked in C++, been with C# for awhile. I'm converting old (not written by me) vs2003 and 05 C++ code to vs 08. In addition to lots of lumps during conversion, I want to add debug logging so I can monitor what is going on when I attach with windbg. I've searched the archives here ...

WinDbg address summary failed

I'm getting following error when looking at full memory crash dump file taken on user machine (Windows Server 2008 SP2): 0:000> !address -summary Failed to map Heaps (error 80004005) I'm running WinDbg 6.12.0002.633 X86 on Windows XP Pro (SP3). SOS and other commands seems to work. Appreciate any advice. Thanks, Michal ...

How to get field names and offsets of a struct using dbghlp and pdb

I would like to dump the fields and offsets of structures in the same way as windbg's dt command. Let's say for example I would like to dump the _PEB structure which is in the Microsoft Public symbols (since windbg's DT command works). From MSDN documentation I understood that the SymFromName function should be able to do this, below th...

Analyzing .dmp files

Hello All, I am trying to solve a c++ exe run time error issue that happens only in production. I am new to C++ and windbg but I am pasting the enalysis here. I would greatly appreciate if some one can point me to as to how and under what condition this error occurs and more importantly how do I figure out which line of code is causing...