Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results
Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.More Info on Driver Writing and Debugging
The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
!pte extension does not work as expected
Carlo_Cianfarani
Member Posts: 240
Hi, it seems !pte extension in WinDbg does not work as expected. For example if I pass it the address 0x00000000FFEE1000 it actually extends the lower part "FFEE1000" adding 8 "F" in front:
lkd> !pte 0x00000000FFEE1000
VA ffffffffffee1000
PXE at FFFFF6FB7DBEDFF8 PPE at FFFFF6FB7DBFFFF8 PDE at FFFFF6FB7FFFFFF8 PTE at FFFFF6FFFFFFF708
contains 00000000001E8063 contains 00000000001E7063 contains 00000000001E9063 contains 0000000000000000
pfn 1e8 ---DA--KWEV pfn 1e7 ---DA--KWEV pfn 1e9 ---DA--KWEV not valid
Is it actually the expected behavior ? Thanks.
Howdy, Stranger!
| Upcoming OSR Seminars | ||
|---|---|---|
| OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead! | ||
| Kernel Debugging | 13-17 May 2024 | Live, Online |
| Developing Minifilters | 1-5 Apr 2024 | Live, Online |
| Internals & Software Drivers | 11-15 Mar 2024 | Live, Online |
| Writing WDF Drivers | 26 Feb - 1 Mar 2024 | Live, Online |
Comments
I don't see that happening for me:
0: kd> !pte 0x00000000FFEE1000 VA 00000000ffee1000Upgrade the version of WinDbg? Also, Local KD is kind of weird, might want to switch to kernel debugging a VM (or at least using LiveKD)
-scott
OSR
I tried also with LiveKD but I get the same issue. Which version of WinDbg are you running ?
10.0.22621.382
-scott
OSR
Scott,
does that version of WinDBG also run on Win 7 x64 ?
Surely not. Why do you need to run it on Win7? You can use a different OS for your host and target (i.e. you can kernel debug a Win7 machine from a Win11 host)
-scott
OSR
Ok yes, you're definitely right.