Searching the stack - some knowledge!

NTFSD
1

Hi

In the crash dump I can see the driver function that caused the creash and
also some parameters sent, can I do somthing like steping into the function
so I can see what went wrong?

Thanks,
Ronen

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

First make sure you are using the latest Windbg from
http://www.microsoft.com/ddk/debugging (4.0.18 released Dec 21st 2001)
Second load the dump and make sure you are loading the right symbols

Open the locals window
Open the call stack window
Double click the frame you want in the call stack window
The locals window now displays the params & locals for that frame
The source window should also open (if you have windbg pointed to the
source & symbols right). The “current line” will be highlighted.

The dump doesn’t contain execution history, just a memory snapshot. So
you need to manually reconstruction the paths taken based on what the
current locals/params values are.

Also try “!analyze -v” in order to have the debugger analyze your
failure. It does a pretty good job.

-----Original Message-----
From: xxxxx@hotmail.com [mailto:xxxxx@hotmail.com]
Sent: Friday, December 21, 2001 7:12 AM
To: File Systems Developers
Subject: [ntfsd] Searching the stack - some knowledge!

Hi

In the crash dump I can see the driver function that caused the creash
and
also some parameters sent, can I do somthing like steping into the
function
so I can see what went wrong?

Thanks,
Ronen

You are currently subscribed to ntfsd as: xxxxx@microsoft.com To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

3

>Open the locals window

Open the call stack window
Double click the frame you want in the call stack window

Also - “.frame” and “dv” command line commands can help.

Max

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com