No WDFLDR info?

NTDEV
1

So, I’ve got a crash dump I’m looking at for a buddy. It’s a Win7, x64 dump, with a problem related 1394 OHCI Iso transfers.

KMDF is clearly showing up on the stack.

But I’m having no luck using the WDFKD extensions:

0: kd> !wdfldr
LoadedModuleList 0xfffff88000eba2d8

LIBRARY_MODULE 000000fffffffff9
Version v0.0 build(0000)
Service
ImageName
ImageAddress 0x0000000000000000
ImageSize 0x0
Associated Clients: 0

ImageName Version WdfGlobals FxGlobals ImageAddress ImageSize
v0.0(0000) 0x0 0x0 0x0 0x00000000
----------------------------------
Total: 1 library loaded

WDFKD search path is set… symbols are properly loaded (for WDF wrapper and wdfldr, as well as rest of OS-supplied stuff).

What’s the magic juju I’m missing? This usually “just works” for me…

Peter
OSR

2

Can you dp 0xfffff88000eba2d8? Seems like the flink in the list head is
coming back as zero. Or the debugger could be having trouble reading the
memory address and the extension is handling the error by just reading back
zeroes.

-scott

–
Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

wrote in message news:xxxxx@ntdev…
> So, I’ve got a crash dump I’m looking at for a buddy. It’s a Win7, x64
> dump, with a problem related 1394 OHCI Iso transfers.
>
> KMDF is clearly showing up on the stack.
>
> But I’m having no luck using the WDFKD extensions:
>
> 0: kd> !wdfldr
> LoadedModuleList 0xfffff88000eba2d8
> ----------------------------------
> LIBRARY_MODULE 000000fffffffff9
> Version v0.0 build(0000)
> Service
> ImageName
> ImageAddress 0x0000000000000000
> ImageSize 0x0
> Associated Clients: 0
>
> ImageName Version WdfGlobals FxGlobals
> ImageAddress ImageSize
> v0.0(0000) 0x0 0x0 0x0 0x00000000
> ----------------------------------
> Total: 1 library loaded
>
>
> WDFKD search path is set… symbols are properly loaded (for WDF wrapper
> and wdfldr, as well as rest of OS-supplied stuff).
>
> What’s the magic juju I’m missing? This usually “just works” for me…
>
> Peter
> OSR
>
>

3

Couldn’t you just shout up the hall?

Mark Roddy

On Tue, Nov 3, 2009 at 11:49 AM, Scott Noone wrote:
> Can you dp 0xfffff88000eba2d8? Seems like the flink in the list head is
> coming back as zero. Or the debugger could be having trouble reading the
> memory address and the extension is handling the error by just reading back
> zeroes.
>
> -scott
>
> –
> Scott Noone
> Consulting Associate
> OSR Open Systems Resources, Inc.
> http://www.osronline.com
>
>
> wrote in message news:xxxxx@ntdev…
>> So, I’ve got a crash dump I’m looking at for a buddy. ?It’s a Win7, x64
>> dump, with a problem related 1394 OHCI Iso transfers.
>>
>> KMDF is clearly showing up on the stack.
>>
>> But I’m having no luck using the WDFKD extensions:
>>
>> 0: kd> !wdfldr
>> LoadedModuleList ? ? ?0xfffff88000eba2d8
>> ----------------------------------
>> LIBRARY_MODULE ?000000fffffffff9
>> ?Version ? ? ? v0.0 build(0000)
>> ?Service ? ? ?
>> ?ImageName ? ?
>> ?ImageAddress ?0x0000000000000000
>> ?ImageSize ? ? 0x0
>> ?Associated Clients: 0
>>
>> ?ImageName ? ? ?Version ? ?WdfGlobals ? ? ? ? FxGlobals
>> ImageAddress ? ? ? ImageSize
>> ? v0.0(0000) 0x0 ? ? ? ?0x0 ? ? ? ?0x0 ? ? ? ? ?0x00000000
>> ----------------------------------
>> Total: 1 library loaded
>>
>>
>> WDFKD search path is set… symbols are properly loaded (for WDF wrapper
>> and wdfldr, as well as rest of OS-supplied stuff).
>>
>> What’s the magic juju I’m missing? ?This usually “just works” for me…
>>
>> Peter
>> OSR
>>
>>
>
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>

4

We’re now a kinder, gentler, OSR, no shouting… We got educakshun

–Mark

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Mark Roddy
Sent: Tuesday, November 03, 2009 12:06 PM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] No WDFLDR info?

Couldn’t you just shout up the hall?

Mark Roddy

On Tue, Nov 3, 2009 at 11:49 AM, Scott Noone wrote:
> Can you dp 0xfffff88000eba2d8? Seems like the flink in the list head is
> coming back as zero. Or the debugger could be having trouble reading the
> memory address and the extension is handling the error by just reading back
> zeroes.
>
> -scott
>
> –
> Scott Noone
> Consulting Associate
> OSR Open Systems Resources, Inc.
> http://www.osronline.com
>
>
> wrote in message news:xxxxx@ntdev…
>> So, I’ve got a crash dump I’m looking at for a buddy. ?It’s a Win7, x64
>> dump, with a problem related 1394 OHCI Iso transfers.
>>
>> KMDF is clearly showing up on the stack.
>>
>> But I’m having no luck using the WDFKD extensions:
>>
>> 0: kd> !wdfldr
>> LoadedModuleList ? ? ?0xfffff88000eba2d8
>> ----------------------------------
>> LIBRARY_MODULE ?000000fffffffff9
>> ?Version ? ? ? v0.0 build(0000)
>> ?Service ? ? ?
>> ?ImageName ? ?
>> ?ImageAddress ?0x0000000000000000
>> ?ImageSize ? ? 0x0
>> ?Associated Clients: 0
>>
>> ?ImageName ? ? ?Version ? ?WdfGlobals ? ? ? ? FxGlobals
>> ImageAddress ? ? ? ImageSize
>> ? v0.0(0000) 0x0 ? ? ? ?0x0 ? ? ? ?0x0 ? ? ? ? ?0x00000000
>> ----------------------------------
>> Total: 1 library loaded
>>
>>
>> WDFKD search path is set… symbols are properly loaded (for WDF wrapper
>> and wdfldr, as well as rest of OS-supplied stuff).
>>
>> What’s the magic juju I’m missing? ?This usually “just works” for me…
>>
>> Peter
>> OSR
>>
>>
>
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>

—
NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

5

No, that would wake the dogs.

-scott

–
Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

“Mark Roddy” wrote in message news:xxxxx@ntdev…
Couldn’t you just shout up the hall?

Mark Roddy

On Tue, Nov 3, 2009 at 11:49 AM, Scott Noone wrote:
> Can you dp 0xfffff88000eba2d8? Seems like the flink in the list head is
> coming back as zero. Or the debugger could be having trouble reading the
> memory address and the extension is handling the error by just reading
> back
> zeroes.
>
> -scott
>
> –
> Scott Noone
> Consulting Associate
> OSR Open Systems Resources, Inc.
> http://www.osronline.com
>
>
> wrote in message news:xxxxx@ntdev…
>> So, I’ve got a crash dump I’m looking at for a buddy. It’s a Win7, x64
>> dump, with a problem related 1394 OHCI Iso transfers.
>>
>> KMDF is clearly showing up on the stack.
>>
>> But I’m having no luck using the WDFKD extensions:
>>
>> 0: kd> !wdfldr
>> LoadedModuleList 0xfffff88000eba2d8
>> ----------------------------------
>> LIBRARY_MODULE 000000fffffffff9
>> Version v0.0 build(0000)
>> Service
>> ImageName
>> ImageAddress 0x0000000000000000
>> ImageSize 0x0
>> Associated Clients: 0
>>
>> ImageName Version WdfGlobals FxGlobals
>> ImageAddress ImageSize
>> v0.0(0000) 0x0 0x0 0x0 0x00000000
>> ----------------------------------
>> Total: 1 library loaded
>>
>>
>> WDFKD search path is set… symbols are properly loaded (for WDF wrapper
>> and wdfldr, as well as rest of OS-supplied stuff).
>>
>> What’s the magic juju I’m missing? This usually “just works” for me…
>>
>> Peter
>> OSR
>>
>>
>
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

6

Nope… memory not present. SO, I guess that’s my answer, huh? Memory not present in the 128K dump.

I hate crash dumps… give me a live system any day,

Peter
OSR

7

That would do it.

I should have also mentioned trying:

.show_sym_failures /s /t
.show_read_failures /v

The second of which would have caused the debugger to spit out an error when
trying to read the memory location, which also would have solved the
mystery.

-scott

–
Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

wrote in message news:xxxxx@ntdev…
>


>
> Nope… memory not present. SO, I guess that’s my answer, huh? Memory
> not present in the 128K dump.
>
> I hate crash dumps… give me a live system any day,
>
> Peter
> OSR
>
>

8

Damn, SNoone… I should take your OSR Kernel Debugging seminar and LEARN something, huh?

Peter
OSR
(This is a repost… is the list server somehow dropping messages??)

9

Hmmm … better also add an email course to keep from double posting. :slight_smile:

The personal opinion of
Gary G. Little

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@osr.com
Sent: Tuesday, November 03, 2009 12:44 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] No WDFLDR info?

Damn, SNoone… I should take your OSR Kernel Debugging seminar and become
educated!

Peter
OSR

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

__________ Information from ESET Smart Security, version of virus signature
database 4570 (20091103) __________

The message was checked by ESET Smart Security.

http://www.eset.com

__________ Information from ESET Smart Security, version of virus signature
database 4570 (20091103) __________

The message was checked by ESET Smart Security.

http://www.eset.com

10

If you take a reading course Gary:

“(This is a repost… is the list server somehow dropping messages??)”