How to determine in a dump if a driver used is checked or free version

WINDBG
1

I am looking at a dump created on a system running free version of windows.
However some of the private drivers may be checked versions. Is there a
command to check if a driver running is a free or a checked driver?

Thanks,
Jing

2

I don’t know if there’s anything obvious that gets stamped in the image to
say if it’s free or checked. Assuming that you haven’t stripped the info out
and your build path is informative, you can do what I do and check the PDB
path in the image’s debug directory using !lmi or !dh:

kd> !lmi osrdt
…
Debug Data Dirs: Type Size VA Pointer
CODEVIEW 63, b398, b398 RSDS - GUID:
{303C39BF-D4D7-42EE-93D5-44C2DD2EA753}
Age: 1, Pdb: e:\projects\dmk\main\lib\wxp\chk\i386\osrdt.pdb

Note that my build path tells me that this is an XP x86 checked build of the
image.

-scott

–
Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

“Jing Bing” wrote in message news:xxxxx@windbg…
I am looking at a dump created on a system running free version of windows.
However some of the private drivers may be checked versions. Is there a
command to check if a driver running is a free or a checked driver?

Thanks,
Jing

3

Jing Bing wrote:

I am looking at a dump created on a system running free version of
windows. However some of the private drivers may be checked versions.
Is there a command to check if a driver running is a free or a checked
driver?

No. Why would it matter?

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

4

“Tim Roberts” wrote in message news:xxxxx@windbg…
> No. Why would it matter?

When I get crashes from our kit customers it’s sometimes part of my initial
triage of the crash, especially if I think I might need to reproduce the
problem (it’s the sort of minor detail that can save lots of annoyance).

-scott

–
Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

“Tim Roberts” wrote in message news:xxxxx@windbg…
> Jing Bing wrote:
>> I am looking at a dump created on a system running free version of
>> windows. However some of the private drivers may be checked versions.
>> Is there a command to check if a driver running is a free or a checked
>> driver?
>
> No. Why would it matter?
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>