question about windbg

After Windows crach, with WinDbg can I see function’s veriables(that function is in stack at the moment of crash)?

Yes, you can. But symbols have to be set up correctly.

You can even use WinDbg’s “.frame /r” command…to switch the scope of the
stack

wrote news:xxxxx@ntdev…
> After Windows crach, with WinDbg can I see function’s veriables(that
> function is in stack at the moment of crash)?
>

Yes, at least for x86 (not x64) and for checked build.

Use “kb” and “dv”.

For x64, registers are used for call parameters, so the parameter values
are quickly lost.

For optimized free build, some stack locations can be reused and again the
parameter values will be lost.


Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

wrote in message news:xxxxx@ntdev…
> After Windows crach, with WinDbg can I see function’s veriables(that function
is in stack at the moment of crash)?
>

And which command should I use?

Thanks.

That is a rather open endied question. Which command for what?

On Dec 10, 2007 2:38 AM, wrote:
> And which command should I use?
>
> Thanks.
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>


Mark Roddy

Command, to see some function’s stack after crash.

Thanks.

At 04:54 PM 12/10/2007, xxxxx@yahoo.com wrote:

Command, to see some function’s stack after crash.

Thanks.


WinDbg comes with a copious help file that’s one mouse click away and
with an incredibly small latency compared to the turn around of
emails on a mailing list.

If it’s crashing in your sources and you have the proper symbols
loaded, WinDbg will show you your local stack variables after the
eponymous !analyze -v

Otherwise you could look in said help file and start reading about
the -k option.

Mark

!analyze -v


Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

wrote in message news:xxxxx@ntdev…
> Command, to see some function’s stack after crash.
>
> Thanks.
>