DebugInfo.com - Oleg Starodumov - All Comments

re: New tool: ModuleRescue

Sergiu — Thu, 21 Jun 2007 11:47:10 GMT

Is it Open Source ?

Or can you give me some tips about what should i do to implement it's functionality?

I know how to access and process IMAGE_NT_HEADERS and CvRecords....but i don't now how to put it all together.

re: ClrDump - Create small minidumps of .NET applications

Volker — Tue, 27 Mar 2007 09:13:48 GMT

Hi Oleg,

thanks a lot for this very good work. I've blogged a post on how to create and analyze .net unhandled exception using ClrDump.dll (http://voneinem-windbg.blogspot.com/2007/03/creating-and-analyzing-minidumps-in-net.html). In our current product I'm using MiniDumpWriteDump directly and when I analyze with SOS is seems to be ok (I get the stacks but no handle information and so on). Are you doing anything more in ClrDump.dll? Could you just explain the concept?

Thanks,

Volker

How to Debug VB6 Activex Usercontrol from VB.Net

Manoharan — Thu, 01 Mar 2007 06:55:09 GMT

How to Debug VB6 Activex Usercontrol from VB.Net

Create small minidumps of c#.NET applications - Need full code

saravanan — Thu, 14 Dec 2006 10:43:54 GMT

hello everybody

Now i am creating sample windows application in c#.net2.0 . now i am plan to create dump for all unhandle exception and application exception.

last 2 week i search in net. i cannot find any solution. i tried adplus but it is dump file size is high.

now i trying in dbhelp.dll and clrdmp.dll here below i show my code.

using this i can create dump but using windbg tool i open this dump but does not break in the expection point in development side.it show

please give me one example how i create minidump in c# windows application for all exception.

please reply as much as soon

regards

v.saravanan

india

mailid vsaravanan_mca@hotmail.com

my source code

===========

public partial class Form1 : Form

{

[DllImport("clrdump.dll", CharSet = CharSet.Unicode, SetLastError = true)]

static extern Int32 CreateDump(Int32 ProcessId, string FileName,

Int32 DumpType, Int32 ExcThreadId, IntPtr ExtPtrs);

[DllImport("clrdump.dll", CharSet = CharSet.Unicode, SetLastError = true)]

static extern Int32 RegisterFilter(string FileName, Int32 DumpType);

public Form1()

{

AppDomain.CurrentDomain.UnhandledException +=

new UnhandledExceptionEventHandler

(UnhandleExceptionHandler);

InitializeComponent();

}

private void button1_Click(object sender, EventArgs e)

{

// int i = 0, j = 1, k = 0;

// k = j / i;

throw new InvalidOperationException("in valid");

}

private struct MinidumpExceptionInfo

{

public int ThreadId;

public IntPtr ExceptionPointers;

public bool ClientPointers;

}

static void UnhandleExceptionHandler(object sender,

UnhandledExceptionEventArgs e)

{

Process process = Process.GetCurrentProcess();

MinidumpExceptionInfo mei = new MinidumpExceptionInfo();

mei.ThreadId = AppDomain.GetCurrentThreadId();

mei.ExceptionPointers = Marshal.GetExceptionPointers();

mei.ClientPointers = true;

// MiniDumpWriteDump(process.Handle, process.Id, stream.Handle, 0, ref mei, IntPtr.Zero, IntPtr.Zero);

CreateDump(process.Id, "DumpTest.vshost.dmp",0,mei.ThreadId,IntPtr.Zero);

// RegisterFilter("Minidump.dmp", 0);

}

re: Unexpected user breakpoint in NTDLL.DLL

Pratiz — Fri, 08 Dec 2006 12:02:12 GMT

Is there any way of removing these hardcoded breakpoints? The problem is coming from the libraries I am using and not directly from my code.

Thanks

re: WinDbg the easy way

ZAKHAM — Mon, 25 Sep 2006 06:41:50 GMT

Wonderful Article...It can be said as a primer on Crash Dump Analysis and a fabulous Homeworks for all the Kernel-Hackers

re: New tool: ModuleRescue

Oleg Starodumov — Thu, 08 Jun 2006 13:07:03 GMT

This is not currently possible, unfortunately. But I will try to implement it in the next version of the tool.

re: New tool: ModuleRescue

J. Bohl — Thu, 18 May 2006 10:20:26 GMT

This is a fantastic tool! Great job!

Is it possible to run this tool on all DLLs in a minidump? Or can it be run from the commandline, something like:
modrescue [minidump] [dllname] [filename_for_dll_to_write]

This would load the [minidump] and write out the "fake-DLL" for [dllname] to the file [filename_for_dll_to_write].

re: ClrDump - Create small minidumps of .NET applications

Darta — Fri, 17 Mar 2006 16:19:03 GMT

ok- we decided that we can't really put the clrdump.dll into our project due to us being hesitant to have an external dll in our process with inability to own the code (sorry - team policy)... But your work is tremendeously valuable as I've seen it in the posts as well as here, so I plead for your help. I am writing .net 2.0 code to use MiniDumpWriteDump() directly. I've tried everything I could do pull it off - posts from John Robbins, youself, books, msdn - and i get an error when I call MiniDumpWriteDump() - err = 2 -> canot file the file specified. I noticed that in your CreateDump() call you are not asking for a file handle but rather a file name. I think you know smth I don't :-) I have all the .cs files which clearly show how I SetUnhandledExceptionFilter, the filter function executes, I get exception pointers, create file handle, etc etc for MiniDumpWriteDump()- then call MiniDumpWriteDump() and I get this error (always) - I am using Marshal.GetLastWin32Error(); I am pleading for your help and good will...(can be contacted at tvesel@hotmail.com). Will also try your email with attached files. THANKS!!!

re: ClrDump - Create small minidumps of .NET applications

Oleg Starodumov — Thu, 16 Mar 2006 19:53:44 GMT

What was the return value of RegisterFilter? Was it zero or non-zero?

Also, it is not possible to call GetLastError right after PInvoke call (it will not give correct results). Instead, you should change the function definition to this:

[DllImport("clrdump.dll", CharSet = CharSet.Unicode, SetLastError=true)]
public static extern int RegisterFilter(string FileName, uint DumpType);

and use Marshal.GetLastWin32Error to get the last error code. Something like this:

int ret = RegisterFilter(...);
if( ret == 0 )
{
int error = Marshal.GetLastWin32Error();
...
}

re: ClrDump - Create small minidumps of .NET applications

Darta — Thu, 16 Mar 2006 18:42:58 GMT

OS -> WinXP SP2
.NET 2.0 (v2.0.50727)
VS 2005

I get the error when I call GetLastError() after I call "int ret = RegisterFilter(filePath, MINIDUMP_TYPE.MiniDumpWithDataSegs)".

re: ClrDump - Create small minidumps of .NET applications

Oleg Starodumov — Thu, 16 Mar 2006 11:29:33 GMT

You do not have to call SetUnhandledExceptionFilter.

DbgHelp 6.6.3.5 is a beta version, with some known bugs, so I would recommend to use the released version (6.5.x.x) for production. But it should not affect this problem, since RegisterFilter does not use DbgHelp.dll.

In order to reproduce the problem with RegisterFilter, I will need a bit more information:
- What operating system version, service pack, .NET Runtime versions are used?
- What version of Visual Studio is used?
- How exactly and when do you get the mentioned error code?
- It would be good if you could post a small but compilable sample that reproduces the problem (e.g. a small console app).

Thanks,
Oleg

re: ClrDump - Create small minidumps of .NET applications

Darta — Wed, 15 Mar 2006 20:46:10 GMT

I am simply calling

int ret = RegisterFilter(filePath, MINIDUMP_TYPE.MiniDumpWithDataSegs) and the error I get is "1004 - Invalid flags. filePath is a full file path with file name. What could be wrong...? I am on dbghelp.dll version 6.6.35 - just came out.

I have a .net app.

I have:
[DllImport("clrdump.dll", CharSet = CharSet.Unicode)]
public static extern int RegisterFilter(string FileName, uint DumpType);

and mini dump type as - per Microsoft:
public const uint MiniDumpNormal = 0x00000000;
public const uint MiniDumpWithDataSegs = 0x00000001;
public const uint MiniDumpWithFullMemory = 0x00000002;
public const uint MiniDumpWithHandleData = 0x00000004;
public const uint MiniDumpFilterMemory = 0x00000008;
public const uint MiniDumpScanMemory = 0x00000010;
public const uint MiniDumpWithUnloadedModules = 0x00000020;
public const uint MiniDumpWithIndirectlyReferencedMemory = 0x00000040;
public const uint MiniDumpFilterModulePaths = 0x00000080;
public const uint MiniDumpWithProcessThreadData = 0x00000100;
public const uint MiniDumpWithPrivateReadWriteMemory = 0x00000200;
public const uint MiniDumpWithoutOptionalData = 0x00000400;
public const uint MiniDumpWithFullMemoryInfo = 0x00000800;
public const uint MiniDumpWithThreadInfo = 0x00001000;
public const uint MiniDumpWithCodeSegs = 0x00002000;

Any help is appreciated. Also do I have to call SetUnhandledExceptionFilter first before calling RegisterFilter- doesn't sounds like it but just checking.

thx

re: ClrDump - Create small minidumps of .NET applications

seaousak — Wed, 08 Mar 2006 08:16:41 GMT

Good to see you at msmvps.com

:-)

You are a very famous mvp in the microsoft newsgroup, aren't you?

Your samples are very helpful. I just want to say thank you.

re: New tool: ModuleRescue

Oleg Starodumov — Mon, 01 Aug 2005 09:23:00 GMT

Single stepping (and other "live" debugging actions) are not possible for the modules generated by ModuleRescue.
The modules are only suitable for minidump debugging, because they do not actually contain executable code.
They only contain the information necessary for debuggers to recognize them as executable modules and determine how to obtain/download
symbols (that is, proper PE headers, debug information structures, some other padding).
ModuleRescue does not attempt to reconstruct the real executable code (it is not usually available in minidumps, anyway).

re: New tool: ModuleRescue

Oleg Starodumov — Fri, 29 Jul 2005 15:31:00 GMT

The article sats the debugger can download symbols. But can you perform functions like single stepping thru a program in a recreation scenario.