2,971 questions
0
votes
0
answers
86
views
Debugging an issue with broken critical section
Let's say we have a multithreaded Windows service. Spontaneously, application (one of its main threads) gets stuck, and I'm able only to analyze a crash dump (see excerpt with thread in question below)...
- 299
0
votes
0
answers
63
views
can debugdiag report .mht file contains sensitive data
We are using Debugdiag when analyzing memory dumps,
The dump itself may contains sensitive customer data.
The question, is the report being generated by debugdiag, can contain sensitive data?
e.g the ...
- 4,888
-2
votes
1
answer
130
views
How to tell "cdb" to drop all unneeded information (mostly about "Debugger Extensions Gallery" and just give the required information?
I'm trying to write a Python script, in order to perform dump analysis (as heap_stat.py was doing before).
In order to make this work, I'm thinking of using "cdb.exe", the Windbg commandline....
- 17.6k
0
votes
1
answer
106
views
Dump Analysis in WinDbg - high memory consumption
In a dump file I see many System.Int64[] objects totalling ~4.5 GB. All are unrooted except one.
Visual Studio reports the rooted instance is referenced by the static variable NtProcessInfoHelper....
- 422
0
votes
1
answer
107
views
WinDbg cannot find libc.so and libcoreclr
I am trying to debug a .Net memory dump taken from an Ubuntu system in WinDbg. When I try to load the dump I get the following errors:
Module name Error
libc.so The system ...
- 9,635
0
votes
1
answer
108
views
Unable to find required GLIBC private symbols
I am trying to analyze a memory dump obtained with dotnet-dump from a Ubuntu container in WinDbg to find an unmanaged memory leak.
I have been able to load the dump, but whenever I try to run !heap -s,...
- 9,635
0
votes
0
answers
324
views
In WinDBG, issuing .excr command shows “Unable to get exception context, HRESULT 0x8000FFFF” instead of the expected registers information
I am following a very basic tutorial on WinDBG (windbg tutorial ytb [not guaranteed broken link in the future]).
Is being quite a nightmare, at least from my knowledge base.
My context is Windows 11....
- 487
0
votes
0
answers
150
views
Getting a fatal error in Windbg on strat up of target virtual machine
I just setup this WinDbg debugging configuration yesterday and I'm getting a fatal error of memory corruption. The target machine is VMWare Workstation 17.5.x over a COM port named pipes. Secure boot ...
- 363
0
votes
1
answer
133
views
WinDbg Connects to Remote Debugger But Cannot Load Module
I am running WinDbg on my development Win10 machine and connecting via pipe to my Win10 VM. WinDbg is definitely talking to my VM and indicates as such with "Debuggee is running". If I break ...
- 15.8k
0
votes
0
answers
42
views
Debug KMD on Windows 11 ARM64
I generated Default KMD for ARM64 In Visual Studio on my Windows 10 64. Just to get remote debugger working.
Built for test signing.
I Previsioned the Target Arm64 System.
I Can run Windbg in Kernal ...
0
votes
0
answers
43
views
I cannot execute extension plugin methods in WinDBG even after loading the correct versions of the SOS.dll and mscordacwks.dll
I am analyzing a .NET dump taken from a remote machine and analyzing it in a development machine. I have loaded the correct versions of the SOS.dll and mscordacwks.dll, the same as the clr.dll ...
- 23
-1
votes
1
answer
66
views
How to programmatically auto-detach WinDbg from a process after it exits (in headless VM environments)?
We have an internal test automation tool that runs tests on VMs. For each test:
-A new process is spawned.
-After execution, it ends with sys.exit(return_code) to trigger the next test.
Recently, I ...
- 1
1
vote
1
answer
174
views
Zero values for stack base and stack limit addresses in NT_TIB struct (Kernel Mode Windows)
When running the !pcr command in Windbg, the NT_TIB structure shows zeros for StackBase and StackLimit. I am debugging drivers on Windows 7 x32 Ultimate using Windbg via COM port. OS is running on ...
- 11
1
vote
1
answer
113
views
Unrecognized command 'xxx' because managed hosting failed or was disabled
I am trying to debug a .NET 8 application. I loaded the SOS extension
.load C:\Users\<username>\.dotnet\tools\.store\dotnet-sos\9.0.621003\dotnet-sos\9.0.621003\tools\net8.0\any\win-x64\sos.dll
...
- 61.3k
0
votes
1
answer
81
views
Use WinDbg LINQ with C/C++ objects
I have an array of structs stores as pointer + length and would like to print a deep field of each.
I can do it using .for and temporary registers:
.for (r $t0 = 0; @$t0 < @@c++(length); r $t0 = @$...
- 3,331
