find source code matched with machine address

Question

Hello everyone,

I am debugging a crash dump and I am clear at which address the process crashes. The source code is written in C#. My question is any quick way to find the matched source code related to the crash address?

thanks in advance, George

Answer 1

Any decent IDE that includes a debugger will do this automatically. Otherwise, you typically need to build your project with debugging information (debug symbols) enabled (which isn't recommended for production, as it makes your program bigger and easier to reverse engineer), and debugger commands like where or trace will list the program lines you're at.

Answer 2

You need the symbol files (.pdb) from the build.

Also enable use of MS' symbol server so VS and WinDBG will automatically get the correct symbol files.

Answer 3

this blog is a mine of useful information on crash dump analysis.

Here's where it starts on debugging a managed app's crash dump it is worth noting that it refers back to previous articles and assumes you have read and understood them. It also assumes you a slightly familiar with Son of Strike, an incredibly useful but somewhat arcane debugging extension for working with managed code.