Crash Dump Analysis and Debugging Portal

  • Asmpedia
  • Blog
  • Books
  • Forum
  • Help
  • Jobs
  • Links
  • News
  • Store
  • Tools
  • Contact

Patterns

  • Multiple Exceptions
  • Dynamic Memory Corruption (process heap)
  • Dynamic Memory Corruption (kernel pool)
  • False Positive Dump
  • Lateral Damage
  • Optimized Code
  • Invalid Pointer (general)
  • NULL Pointer (code)
  • Inconsistent Dump
  • Hidden Exception
  • Deadlock (critical sections)
  • Deadlock (executive resources)
  • Deadlock (mixed objects)
  • Deadlock (LPC)
  • Changed Environment
  • Incorrect Stack Trace
  • OMAP Code Optimization
  • No Component Symbols
  • Insufficient Memory (committed memory)
  • Insufficient Memory (handle leak)
  • Insufficient Memory (kernel pool)
  • Insufficient Memory (PTE)
  • Insufficient Memory (virtual memory)
  • Spiking Thread
  • Module Variety
  • Stack Overflow (kernel mode)
  • Stack Overflow (user mode)
  • Managed Code Exception
  • Truncated Dump
  • Waiting Thread Time
  • Memory Leak (process heap)
  • Memory Leak (.NET heap)
  • Missing Thread
  • Unknown Component
  • Double Free (process heap)
  • Double Free (kernel pool)
  • Coincidental Symbolic Information
  • Stack Trace
  • Virtualized Process (WOW64)
  • Stack Trace Collection
  • Coupled Processes
  • High Contention
  • Accidental Lock
  • Passive Thread (user space)
  • Passive System Thread (kernel space)
  • Main Thread
  • Busy System
  • Historical Information
  • IRP Distribution Anomaly
  • Local Buffer Overflow
  • Early Crash Dump
  • Hooked Functions
  • Custom Exception Handler
  • Special Stack Trace
  • Manual Dump (kernel)
  • Manual Dump (process)
  • Wait Chain (general)
  • Wait Chain (critical sections)
  • Wait Chain (executive resources)
  • Corrupt Dump
  • Dispatch Level Spin
  • No Process Dumps
  • No System Dumps
  • Suspended Thread
  • Special Process
  • Frame Pointer Omission
  • False Function Parameters
  • Message Box
  • Self-Dump
  • Blocked Thread
  • Zombie Processes
  • Wild Pointer
  • Wild Code
  • Hardware Error
  • Handle Limit (GDI)
  • Missing Component (general)
  • Missing Component (static linking, user mode)
  • Execution Residue
  • Optimized VM Layout
  • Invalid Handle
  • Overaged System
  • Thread Starvation
  • Duplicated Module
  • Not My Version
  • Data Contents Locality
  • Nested Exceptions (unmanaged code)
  • Nested Exceptions (managed code)
  • Affine Thread
Home

Sample Chapter from Windows® Crash Dump Analysis book

PDF file can be downloaded from this link:

Sample Chapter: Introduction to WinDbg Scripts for C/C++ Users