Welcome to MSDN Blogs Sign in | Join | Help

June 2008 - Posts

Join us on Facebook

We’ve set up a new Facebook group named “Windows Debugging” as a community for Windows Debugging industry experts. If Windows debugging is an interest of yours, please consider joining the group! Many of the regular contributors to this blog will be there Read More...
Posted Monday, June 30, 2008 8:16 PM by ntdebug | 0 Comments

How it Works: DLL Injection

Introduction Hi everyone, this is Bob again. I recently worked on an issue where the interaction of two threads in Winlogon led to a bugcheck. One thread was a Winlogon thread initializing GDI. The interesting thing about this scenario is how the other Read More...
Posted Friday, June 20, 2008 7:01 PM by ntdebug | 7 Comments
Filed under: ,

Designing the Perfect Breakpoint

Written by Jeff Dailey. When it comes to live debugging, the breakpoint is king. Oftentimes solving a very complex problem in a production environment involves doing a local, non-production debug one of my own test machines. I’ll typically debug the process Read More...
Posted Wednesday, June 11, 2008 6:32 PM by ntdebug | 4 Comments
Filed under: ,

Windbg Tip: KN, .Frame , DV, and DT - It's so easy

Written by Jeff Dailey. Hello NTDebuggers, many of us take for granted some of the simple commands in the debugger that make life easy. I was thinking of several in particular that go great together. The first command would be kn . Kn will show the current Read More...
Posted Friday, June 06, 2008 2:25 PM by ntdebug | 3 Comments
Filed under: ,

How to debug WOW64 applications?

Hello, my name is Venkatesh Ganga, and I’m an Escalation Engineer on the Microsoft Platform Global Escalation Services team. Recently, I worked on an issue where registry reflection was not happening while installing 32bit Office under the system account. Read More...
Posted Tuesday, June 03, 2008 9:20 PM by ntdebug | 2 Comments
Filed under: ,

NTDebugging Puzzler 0x00000007: Interlocked functions

Today, we will have some fun with interlocked functions. The following section of code is reentrant. A “well meaning” developer used interlocked functions to avoid serializing on a global table lock. Initial smoke testing shows that the code works fine. Read More...
Posted Monday, June 02, 2008 9:47 PM by ntdebug | 19 Comments
Filed under: ,
 
Page view tracker