Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

More Info on Driver Writing and Debugging

The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.

Check out The OSR Learning Library at:

Before Posting...

Please check out the Community Guidelines in the Announcements and Administration Category.

RE: how to break using "sx e ld" at 2nd and 3rd opea tion

Thank you very much, Nathan.

--- 2 more questions. ----

1. When MS-Word call kennel mode driver's function, Can cdb or ntsd break
this? Or Must I use kd or windbg via NULL modem?
2. When I want to get MS-Word's symbols, Can MS provide me this?


-----Original Message-----
From: Nathan Nesbit [mailto:[email protected]]
Sent: Friday, March 08, 2002 3:28 PM
To: Kernel Debugging Interest List
Subject: [windbg] RE: how to break using "sx e ld" at 2nd and 3rd opeation

You can't unload the modules, only the process you are debugging has control
over that.

What you will have to do is to trace through the instructions during a save
and set a breakpoint at a location. Then the breakpoint will be hit
everytime you hit save.

It isn't really clear at what point the failure is occuring, but as a first
guess I would suggest setting the breakpoint on "kernel32!CreateFileW" since
Word would probably start the save operation by getting a handle to the file
it will be writing to...

-----Original Message-----
From: [email protected] [mailto:[email protected]]

Sent: Thursday, March 07, 2002 3:23 PM
To: Kernel Debugging Interest List
Subject: [windbg] how to break using "sx e ld" at 2nd and 3rd opeation


Now I want to debug one problem using cdb (or something debugger).
This problem is that I can't save MS-Word document file in rdp/ica
session when I save MS-Word documents for several times.

I attached cdb to winword.exe, and typed "sx e ld" to break when ca lling
each loaded modules. At fist time, I can break when calling each loaded
modules (winmm.dll, or something..). But this problem is not
caused at first time operation (save file). I need to try this operatio n
for several times to repro. At 2nd or 3rd time, I cannot break as I
expect... I want to unload eac h modules called at the 1st time, but I can
not find this command..

How do I debug such problem? I want to catch a function which caus es this
problem..... But I can't now..


You are currently subscribed to windbg as: [email protected] To
unsubscribe send a blank email to %%email.unsub%%

You are currently subscribed to windbg as: [email protected] To
unsubscribe send a blank email to %%email.unsub%%
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. Sign in or register to get started.

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Writing WDF Drivers 24 January 2022 Live, Online
Internals & Software Drivers 7 February 2022 Live, Online
Kernel Debugging 21 March 2022 Live, Online
Developing Minifilters 23 May 2022 Live, Online