Questions tagged [windbg]

WinDbg is a user and kernel mode debugger for Windows. It can be used to debug both native and managed code.

WinDbg is a GUI-based, user- and kernel-mode debugger for Windows. It is part of the "Debugging Tools for Windows", a free download available from Microsoft.

WinDbg can be used to debug managed code by loading one or more extension DLLs. SOS.dll is available as part of the .NET framework. PSSCOR2.dll and SOSEX.dll are additional extensions for debugging managed code.

2892 questions
24
votes
3 answers

Detailed memory usage analysis of windows crash dump file?

We have received a native (full) crash dump file from a customer. Opening it in the Visual Studio (2005) debugger shows that we had a crash caused by a realloc call that tried to allocate a ~10MB block. The dump file was unusually large (1,5 GB --…
Martin Ba
  • 37,187
  • 33
  • 183
  • 337
24
votes
1 answer

Specifying a command line for Windbg's Open Executable

When I use Windbg's "Open Executable..." functionality to use Windbg to step through an executable's execution, is it possible for me to specify command line parameters to be used when running the executable? If so, how do I go about doing it?
dlanod
  • 8,664
  • 8
  • 54
  • 96
23
votes
5 answers

How to analyze memory usage in windbg

This is a .NET v4 windows service application running on a x64 machine. At some point after days of running steadily the windows service memory consumption spikes up like crazy until it crashes. I was able to catch it at 1.2 GB and capture a memory…
Mark
  • 5,223
  • 11
  • 51
  • 81
22
votes
1 answer

How to install WinDbg when VS 2015 is already installed?

I'm trying to install WinDbg from this page, just under the Debugging Tools for Windows 10 (WinDbg) section. However, when I download the executable and run it, it tells me that You must uninstall the Windows Software Development Kit - Windows…
James Ko
  • 32,215
  • 30
  • 128
  • 239
21
votes
4 answers

WinDbg x64: Cannot debug a crash dump - failed to load data access DLL

I attached WinDbg to a running process and had the process crashed (I have a separate question re. that case). Once the program crashed, WinDbg stopped and allowed me to debug the program. I took a crash dump for further investigation with a command…
net_prog
  • 9,921
  • 16
  • 55
  • 70
21
votes
3 answers

What do the different columns in the "!heap -flt -s xxxx" windbg command represent

I've been doing some work on high memory issues, and I've been doing a lot of heap analysis in windbg, and I was curious what the different columns really mean in "!heap -flt -s xxxx" command. I read What do the 'size' numbers mean in the windbg…
Zipper
  • 7,034
  • 8
  • 49
  • 66
21
votes
3 answers

Setting break point using source code line number in WinDBG

I am aware of setting breakpoint base on function name in WinDBG using bp, bm commands is there a way to set break point break on source code line number say 20 means it should set breakpoint at line 20 Thanks in advance
Vineel Kumar Reddy
  • 4,588
  • 9
  • 33
  • 37
21
votes
1 answer

WINDBG, how to view the contents of an array?

I'm using WINDBG to analyze a dump file for a program that exhibits a bit too high memory usage. One of the objects involved is holding an object array, referencing a lot of objects I'd like to look at, to try to find out why they were…
Lasse V. Karlsen
  • 380,855
  • 102
  • 628
  • 825
21
votes
2 answers

ASP.NET Hang - Generic Dictionary concurrency issues causes GC deadlock

In the last month our ASP.NET web app has stopped responding to requests and we have had to reset the app pool to get it back up. We are having trouble identifying the exact cause of the issue, as there are no errors in the server's event log. The…
David Masters
  • 8,069
  • 2
  • 44
  • 75
21
votes
2 answers

Forcing WinDbg to load symbols of an unloaded module

I'm debugging a module for which I have only the .exe and a .pdb without private symbols. During the debug session I need to inspect an internal struct. Obviously this struct does not appear in the PDB since it's private - but fortunately I have an…
Amir Gonnen
  • 3,525
  • 4
  • 32
  • 61
20
votes
1 answer

Why does VS and Windbg print "this" pointer as "0xcccccccc" even in debug version?

I tried to use windbg to print "this" pointer when entering a member function, like below. class IBase { int m_i; public: IBase() :m_i(23) {} virtual int FuncOne(void) = 0; virtual int FuncTwo(void) = 0; }; class DerivedOne : public…
Troskyvs
  • 7,537
  • 7
  • 47
  • 115
20
votes
3 answers

What does prefix to MoveNext mean in the stackstace?

The .NET application crashes with the stack trace: Call Stack: Layouts!Layouts.Ribbon.SizeAndPositionControlViewModel+OnLayoutSelectionChanged>d__5.MoveNext()…
Vishnu Pedireddi
  • 2,142
  • 4
  • 25
  • 34
19
votes
5 answers

Why can't WinDBG find the mscordacwks.dll?

I'm trying to use WinDBG to analyze a crash dump from one of our production machines. The root of my problem seems to be that I have a different build of the .NET framework than the production machine, only I don't know how to fix the problem. When…
Jonathan Beerhalter
  • 7,229
  • 16
  • 68
  • 78
19
votes
1 answer

Get sizeof (type) in Windbg

I need the size of a variable and I want that value from Windbg command line. It's hard and useless to compile the code and add a C++ sizeof() only to get that value. From documentation I see that Windbg can filter after value dt /s. but displayng…
vlg789
  • 751
  • 6
  • 20
19
votes
3 answers

what does '0n0' mean?

What does 0n0 mean in windbg ? My windbg is showing all local variables with 0n1500 etc..
mousey
  • 11,601
  • 16
  • 52
  • 59