!pte extension does not work as expected

WINDBG
1

Hi, it seems !pte extension in WinDbg does not work as expected. For example if I pass it the address 0x00000000FFEE1000 it actually extends the lower part “FFEE1000” adding 8 “F” in front:

lkd> !pte 0x00000000FFEE1000
VA ffffffffffee1000
PXE at FFFFF6FB7DBEDFF8 PPE at FFFFF6FB7DBFFFF8 PDE at FFFFF6FB7FFFFFF8 PTE at FFFFF6FFFFFFF708
contains 00000000001E8063 contains 00000000001E7063 contains 00000000001E9063 contains 0000000000000000
pfn 1e8 —DA–KWEV pfn 1e7 —DA–KWEV pfn 1e9 —DA–KWEV not valid


Is it actually the expected behavior ? Thanks.

2

I don’t see that happening for me:

0: kd> !pte 0x00000000FFEE1000
                                           VA 00000000ffee1000

Upgrade the version of WinDbg? Also, Local KD is kind of weird, might want to switch to kernel debugging a VM (or at least using LiveKD)

3

Upgrade the version of WinDbg? Also, Local KD is kind of weird, might want to switch to kernel debugging a VM (or at least using LiveKD)
I tried also with LiveKD but I get the same issue. Which version of WinDbg are you running ?

4

10.0.22621.382

5

10.0.22621.382
Scott,
does that version of WinDBG also run on Win 7 x64 ?

6

Surely not. Why do you need to run it on Win7? You can use a different OS for your host and target (i.e. you can kernel debug a Win7 machine from a Win11 host)

7

You can use a different OS for your host and target (i.e. you can kernel debug a Win7 machine from a Win11 host)

Ok yes, you’re definitely right.