I am debugging a customer scenario where there are
multiple DLLs from multiple vendors. I would like to
know if it is possible in windbg to identify if there
are references(call/jmp) to DLL-Y from DLL-X in a
given application.
thanks
–r
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Do you mean in a single static analysis pass? Nothing direct. You can
check DLL imports to see if DLL-X imports things from DLL-Y.
If you mean during execution of a smallish piece of code you can use
conditional stepping to look for any entry to DLL-Y.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Rufoo
Sent: Tuesday, December 20, 2005 6:21 PM
To: Kernel Debugging Interest List
Subject: [windbg] Identifying DLL references
I am debugging a customer scenario where there are multiple DLLs from
multiple vendors. I would like to know if it is possible in windbg to
identify if there are references(call/jmp) to DLL-Y from DLL-X in a
given application.
thanks
–r
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
You are currently subscribed to windbg as: xxxxx@winse.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
DLL import doesnt show anything, but stepping through
the assemply in dlly shows ‘jmp dllx!Ordinal2+0x123’.
I want to see other such jmps to dllx. Doing a seach
using ‘# jmp dllx*’ doesnt seem to work. I have not
used search before, is there a better way of using
search here? Thanks.
— Drew Bliss wrote:
> Do you mean in a single static analysis pass?
> Nothing direct. You can
> check DLL imports to see if DLL-X imports things
> from DLL-Y.
>
> If you mean during execution of a smallish piece of
> code you can use
> conditional stepping to look for any entry to DLL-Y.
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf
> Of Rufoo
> Sent: Tuesday, December 20, 2005 6:21 PM
> To: Kernel Debugging Interest List
> Subject: [windbg] Identifying DLL references
>
> I am debugging a customer scenario where there are
> multiple DLLs from
> multiple vendors. I would like to know if it is
> possible in windbg to
> identify if there are references(call/jmp) to DLL-Y
> from DLL-X in a
> given application.
>
> thanks
> --r
>
>
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam
> protection around
> http://mail.yahoo.com
>
>
> —
> You are currently subscribed to windbg as:
> xxxxx@winse.microsoft.com
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
> —
> You are currently subscribed to windbg as: unknown
> lmsubst tag argument: ‘’
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
It's odd that there'd be a direct jump from one DLL to another without
an import. That would require fixed DLL addresses, which is possible
but not usually a required thing.
For #, try