Welcome to MSDN Blogs Sign in | Join | Help

May 2008 - Posts

Beefier Breakpoints Using Debugger Scripts

Written by Ron Stock I recently collaborated with a third-party vendor which required me to track down a problem during the Vista upgrade process. The issue came down to catching a Microsoft component opening a specific registry service key during the Read More...
Posted Friday, May 30, 2008 4:07 PM by ntdebug | 5 Comments
Filed under: ,

Corrupt Page Table Pages Caught in the MDL

Hello all, Scott Olson here again to share another interesting issue I worked on a while back. The issue was that after upgrading to Windows XP Service Pack 2 the system would experience random bug checks with memory corruption. Interestingly, there was Read More...
Posted Thursday, May 22, 2008 8:38 PM by ntdebug | 1 Comments
Filed under: ,

Understanding NTFS Compression

As our group’s file systems expert, I see most of the common problems associated with the use/misuse of NTFS compression. Before you check the “Compress contents to save disk space” checkbox, it might be good to understand how this affects the happy little Read More...
Posted Tuesday, May 20, 2008 8:04 PM by ntdebug | 3 Comments
Filed under: ,

NTDebugging Puzzler 0x00000006: Invalid Handle - can you handle it?

Hi NTDebuggers, this week’s puzzler just so happens to match its number: 0x000000006 = ERROR_INVALID_HANDLE. That said, let me give you a scenario and the challenge will be to provide the best action plan to isolate the problem. This should include an Read More...
Posted Monday, May 19, 2008 7:59 PM by ntdebug | 5 Comments
Filed under: , ,

How to track down High CPU in User Mode Applications - A live debug!

Written by Jeff Dailey. Hello NTDebuggers, I’d like to talk about a common issue we deal with on a regular basis. We are often tasked with finding what functions are using CPU within a user mode process / application. Typically a user will find an application Read More...
Posted Friday, May 16, 2008 2:07 AM by ntdebug | 6 Comments
Filed under: ,

Smoking Gun Pool Corruption

Hello, my name is Ron Stock and I’m an Escalation Engineer on the Microsoft Platforms Global Escalation Services Team. Today I’m going to talk about pool corruption which manifests itself in various ways. It’s usually hard to track down because the culprit Read More...
Posted Tuesday, May 13, 2008 10:52 PM by ntdebug | 3 Comments
Filed under: , ,

Tracking down MmSt paged pool usage

A trend that I’ve noticed recently are cases involving paged pool depletion with high MmSt tag usage that remains after trying KB304101 (PoolUsageMaximum) . These pool allocations are used by the memory manager for section object prototype PTEs. There Read More...
Posted Thursday, May 08, 2008 8:25 PM by ntdebug | 3 Comments
Filed under: , ,

Work Queues and Dispatcher Headers

Introduction Hi everyone, Bob here again with a description of Work Queues and Dispatcher Headers. For those of you that look at dumps, you may have noticed that there are always threads waiting at KeRemoveQueue . You may have wondered what this function Read More...
Posted Wednesday, May 07, 2008 10:55 PM by ntdebug | 1 Comments
Filed under: ,

NTDebugging Puzzler 0x00000005 (Better late than never)

Hello NTDebuggers, from time to time we see the following problem. It’s another access violation, and the debug notes below are from a minidump. Here is what we need to know… · Generally speaking what happened to cause this AV? · What method you would Read More...
Posted Tuesday, May 06, 2008 6:00 PM by ntdebug | 10 Comments
Filed under: , ,

How to have a colorful relationship with your dump files

Hello NTDebuggers… I look at a lot of dump files every day. This being the case I like to take full advantage of the customizable look and feel of windbg. I actually have an association setup between DMP files and a CMD file that loads my customized COLOR Read More...
Posted Friday, May 02, 2008 7:33 PM by ntdebug | 3 Comments
Filed under:
 
Page view tracker