https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Sun, 17 May 2026 23:43:25 +0000 http://wordpress.org/?v=2.3.3 https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-135924 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 8) Fri, 19 Mar 2010 13:39:08 +0000 https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-135924 [...] Today we introduce an icon for Invalid Pointer (general) pattern: [...] […] Today we introduce an icon for Invalid Pointer (general) pattern: […]

]]> https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-74281 Crash Dump Analysis » Blog Archive » Sentinel Pointers Wed, 13 May 2009 15:23:52 +0000 https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-74281 [...] although NULL pointers having 0 value are usually used. Also -1 value can be used to assign an invalid pointer [...] […] although NULL pointers having 0 value are usually used. Also -1 value can be used to assign an invalid pointer […]

]]> https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-74271 Crash Dump Analysis » Blog Archive » Stack trace, invalid code pointer and hooked functions: pattern cooperation Wed, 13 May 2009 13:48:17 +0000 https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-74271 [...] looking at a stack trace of one crashed process we noticed an invalid code pointer. It is not a NULL code pointer but has the same stack trace [...] […] looking at a stack trace of one crashed process we noticed an invalid code pointer. It is not a NULL code pointer but has the same stack trace […]

]]> https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-71300 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 6b) Tue, 14 Apr 2009 17:21:31 +0000 https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-71300 [...] (0x7DA) - The Year of Dump Analysis NULL Data Pointer is a special version of the more general Invalid Pointer pattern like NULL Code Pointer. The effective address is below 0xFFFF and it is usually a register [...] […] (0×7DA) - The Year of Dump Analysis NULL Data Pointer is a special version of the more general Invalid Pointer pattern like NULL Code Pointer. The effective address is below 0xFFFF and it is usually a register […]

]]> https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-43018 !analyze -v : Crash Dump Analysis Patterns (Part 6) Wed, 17 Sep 2008 08:56:54 +0000 https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-43018 [...] http://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/ [...] […] http://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/ […]

]]> https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-24889 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 6a) Mon, 28 Apr 2008 18:22:27 +0000 https://www.dumpanalysis.org/blog/index.php/2006/12/18/crash-dump-analysis-patterns-part-6/#comment-24889 [...] is a specialization of Invalid Pointer pattern called NULL Pointer. This is the most easily recognized pattern with a straightforward fix [...] […] is a specialization of Invalid Pointer pattern called NULL Pointer. This is the most easily recognized pattern with a straightforward fix […]

]]>