Questions on Debug Engine options

WINDBG
1

"DEBUG_ENGOPT_ALLOW_NETWORK_PATHS
Network shares can be used for loading symbols and extensions. This option
prevents the engine from disallowing network paths when debugging some
system processes and should be used with caution. This option cannot be set
if DEBUG_ENGOPT_DISALLOW_NETWORK_PATHS is set. "

There is a message of caution here. What is the possible danger ? The
unavailibility of a remote system ?

“DEBUG_ENGOPT_NETWORK_PATHS
Bitwise OR of DEBUG_ENGOPT_ALLOW_NETWORK_PATHS and
DEBUG_ENGOPT_DISALLOW_NETWORK_PATHS.”

DEBUG_ENGOPT_ALLOW_NETWORK_PATHS and DEBUG_ENGOPT_DISALLOW_NETWORK_PATHS
from their descriptions seem contradictory to me. How is the result of a
bitwise OR of these two to be interpreted ?

//Daniel

2

The “no network symbols” option is a safety feature that you can engage to help reduce the chance that you’ll deadlock your debugger session, if you are debugging a process that is on the critical path for I/O or authentication to a remote symbol store. A typical example of where you might find this useful would be if you are debugging the LSA, as you can’t (newly) authenticate to a remote network share without running code in LSASS.

  • S (Msft)

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@resplendence.com
Sent: Saturday, September 22, 2012 12:53 AM
To: Kernel Debugging Interest List
Subject: [windbg] Questions on Debug Engine options

"DEBUG_ENGOPT_ALLOW_NETWORK_PATHS
Network shares can be used for loading symbols and extensions. This option prevents the engine from disallowing network paths when debugging some system processes and should be used with caution. This option cannot be set if DEBUG_ENGOPT_DISALLOW_NETWORK_PATHS is set. "

There is a message of caution here. What is the possible danger ? The unavailibility of a remote system ?

“DEBUG_ENGOPT_NETWORK_PATHS
Bitwise OR of DEBUG_ENGOPT_ALLOW_NETWORK_PATHS and DEBUG_ENGOPT_DISALLOW_NETWORK_PATHS.”

DEBUG_ENGOPT_ALLOW_NETWORK_PATHS and DEBUG_ENGOPT_DISALLOW_NETWORK_PATHS
from their descriptions seem contradictory to me. How is the result of a bitwise OR of these two to be interpreted ?

//Daniel

WINDBG is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer