WinDbg

WinDbg

Infobox_Software
name = WinDbg



caption =
developer = Microsoft
latest_release_version = 6.9.3.113
latest_release_date = April 29, 2008
operating_system = Microsoft Windows
genre = Debugger
license = Commercial
website = [http://www.microsoft.com/whdc/devtools/debugging/default.mspx WinDbg at microsoft.com]

WinDbg is a multipurpose debugger for Microsoft Windows, distributed on the web by Microsoft. It can be used to debug user mode applications, drivers, and the operating system itself in kernel mode. It is a GUI application, but has little in common with the more well-known, but less powerful, Visual Studio Debugger.

WinDbg can be used for debugging kernel-mode memory dumps, created after what is commonly called the Blue Screen of Death which occurs when a bug check is issued. It can also be used to debug user-mode crash dumps. This is known as "postmortem debugging".

WinDbg also has the ability to automatically load debugging symbol files (e.g., PDB files) from a server by matching various criteria (e.g., timestamp, CRC, single or multiprocessor version). If a private symbol server is configured, the symbols can be correlated with the source code for the binary. This eases the burden of debugging problems that have various versions of binaries installed on the debugging target by eliminating the need for finding and installing specific symbols version on the debug host. Microsoft has a public symbol server that has most of the public symbols for Windows 2000 and later versions of Windows (including service packs).

Recent versions of WinDbg have been distributed as part of the free Debugging Tools for Windows suite, which shares a common debugging engine between WinDbg and command line debuggers like KD, CDB, and NTSD. This means that most commands will work in all alternative versions without modification, allowing users to use the style of interface with which they are most comfortable.

Extensions

WinDbg allows loading of extension DLLs that can augment the debugger's supported commands and allow for help in debugging specific scenarios: for example, displaying an MSXML document given an IXMLDOMDocument, or debugging the Common Language Runtime (CLR). These extensions are a large part of what makes WinDbg such a powerful debugger. WinDbg is used by the Microsoft Windows product team to build Windows, and everything needed to debug Windows is included in these extension DLLs.

While some extensions are used only inside Microsoft, most of them are part of the public Debugging Tools for Windows package.

!analyze

The most commonly-used extension is !analyze -v, which analyzes the current state of the program being debugged and the machine/process state at the moment of crash or hang. This extension is often able to debug the current problem in a completely automated fashion.

External links

* [http://www.microsoft.com/whdc/devtools/debugging/default.mspx Debugging Tools for Windows] - information and free downloads
* [http://software.rkuster.com/windbg/WinDBG_A_to_Z.pdf WinDbg. From A to Z! ] - Theory and examples (56 pages, 580 Kb)
* [http://software.rkuster.com/windbg/printcmd.htm Common WinDbg Commands (Thematically Grouped)]
* [http://www.networkworld.com/news/2005/041105-windows-crash.html Tutorial on solving system crashes using WinDbg]


Wikimedia Foundation. 2010.

Игры ⚽ Нужно сделать НИР?

Look at other dictionaries:

  • WinDbg — Développeur Microsoft Dernière version …   Wikipédia en Français

  • WINDBG — comp. abbr. Windows Debugger (Microsoft) …   United dictionary of abbreviations and acronyms

  • Named pipe — In computing, a named pipe (also known as a FIFO for its behavior) is an extension to the traditional pipe concept on Unix and Unix like systems, and is one of the methods of inter process communication. The concept is also found in Microsoft… …   Wikipedia

  • SoftICE — is a kernel mode debugger for Microsoft Windows. Crucially, it is designed to run underneath Windows such that the operating system is unaware of its presence. Unlike an application debugger, SoftICE is capable of suspending all operations in… …   Wikipedia

  • D (programming language) — For other programming languages named D, see D (disambiguation)#Computing. D programming language Paradigm(s) multi paradigm: imperative, object oriented, functional, meta Appeared in 1999 (1999) Designed by …   Wikipedia

  • Bug check — A bug check (also known as a system crash, stop error, or kernel error) is when the Windows operating system halts the moment it reaches a condition where it cannot operate safely. A bug check can be deliberately caused from a kernel mode driver… …   Wikipedia

  • SoftICE — est un débogueur en mode noyau pour Microsoft Windows. Les anciennes versions existent pour DOS et les systèmes d exploitation compatibles. SoftICE a été produit à l origine en 1987 par une société appelée NuMega, et a été plus tard acquis par… …   Wikipédia en Français

  • SoftICE — Desarrollador NuMega Información general Diseñador Frank Grossman / Jim Moskun Género Depurador …   Wikipedia Español

  • OllyDbg — OllyDbg …   Википедия

  • SoftICE — Отладка драйвера Тип отладчик уровня ядра Разработчик NuMega, Compuware …   Википедия

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”