Display memory in WInDbg

NTFSD
1

When I try to DbgPrint the data inside Irp->UserBuffer, nothing is
displayed, so I set a breakpoint and use dd to display the memory
(Irp->UserBuffer = 0x0c0f0000)

kd> dd 0x0c0f0000
0c0f0000 ??? ??? ??? ???
0c0f0010 ??? ??? ??? ???
0c0f0020 ??? ??? ??? ???
0c0f0030 ??? ??? ??? ???
0c0f0040 ??? ??? ??? ???
0c0f0050 ??? ??? ??? ???
0c0f0060 ??? ??? ??? ???
0c0f0070 ??? ??? ??? ???

What do the “?” means?

2

It means that the data is not accessible and hence unknown.

Bartjan.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Eric Chan
Sent: woensdag 20 maart 2002 9:25
To: File Systems Developers
Subject: [ntfsd] Display memory in WInDbg

When I try to DbgPrint the data inside Irp->UserBuffer,
nothing is displayed, so I set a breakpoint and use dd to
display the memory (Irp->UserBuffer = 0x0c0f0000)

kd> dd 0x0c0f0000
0c0f0000 ???????? ???????? ???????? ????????
0c0f0010 ???????? ???????? ???????? ????????
0c0f0020 ???????? ???????? ???????? ????????
0c0f0030 ???????? ???????? ???????? ????????
0c0f0040 ???????? ???????? ???????? ????????
0c0f0050 ???????? ???????? ???????? ????????
0c0f0060 ???????? ???????? ???????? ????????
0c0f0070 ???????? ???????? ???????? ????????

What do the "?" means?

You are currently subscribed to ntfsd as: xxxxx@zeelandnet.nl
To unsubscribe send a blank email to %%email.unsub%%

3

The memory is likely paged out on disk. ??? means no data can be read from
that address. Try to page-in the page.
----- Original Message -----
From: “Eric Chan”
To: “File Systems Developers”
Sent: Wednesday, March 20, 2002 10:25 AM
Subject: [ntfsd] Display memory in WInDbg

> When I try to DbgPrint the data inside Irp->UserBuffer, nothing is
> displayed, so I set a breakpoint and use dd to display the memory
> (Irp->UserBuffer = 0x0c0f0000)
>
> kd> dd 0x0c0f0000
> 0c0f0000 ??? ??? ??? ???
> 0c0f0010 ??? ??? ??? ???
> 0c0f0020 ??? ??? ??? ???
> 0c0f0030 ??? ??? ??? ???
> 0c0f0040 ??? ??? ??? ???
> 0c0f0050 ??? ??? ??? ???
> 0c0f0060 ??? ??? ??? ???
> 0c0f0070 ??? ??? ??? ???
>
> What do the “?” means?
>
> —
> You are currently subscribed to ntfsd as: xxxxx@rdsor.ro
> To unsubscribe send a blank email to %%email.unsub%%
>