https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Wed, 06 May 2026 05:01:01 +0000 http://wordpress.org/?v=2.3.3 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-481713 Dmitry Vostokov Tue, 29 May 2012 20:23:03 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-481713 Miscellaneous Checks in driver verifier to enable handle traces in system process http://msdn.microsoft.com/en-us/library/ff549253.aspx Miscellaneous Checks in driver verifier to enable handle traces in system process http://msdn.microsoft.com/en-us/library/ff549253.aspx

]]> https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-175802 Crash Dump Analysis » Blog Archive » Insufficient memory, handle leak, wait chain, deadlock, inconsistent dump and overaged system: pattern cooperation Fri, 13 Aug 2010 19:13:48 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-175802 [...] Dumping processes we notice signs of possible handle leak: [...] […] Dumping processes we notice signs of possible handle leak: […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-143977 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 23) Tue, 13 Apr 2010 10:20:57 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-143977 [...] we introduce an icon for Insufficient Memory (handle leak) [...] […] we introduce an icon for Insufficient Memory (handle leak) […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-112624 Crash Dump Analysis » Blog Archive » Insufficient Memory Patterns Wed, 30 Dec 2009 11:29:54 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-112624 [...] Insufficient Memory (handle leak) [...] […] Insufficient Memory (handle leak) […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-107024 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 94a) Mon, 30 Nov 2009 16:47:18 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-107024 [...] dump analysis is all about deviations and of them is Size Deviation (a super pattern), be it a handle table size, a heap size, a  number of contended locks, time spent in kernel, and so on. Every system or [...] […] dump analysis is all about deviations and of them is Size Deviation (a super pattern), be it a handle table size, a heap size, a  number of contended locks, time spent in kernel, and so on. Every system or […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-99330 Crash Dump Analysis » Blog Archive » Looking for abnormal: case study Thu, 15 Oct 2009 23:02:25 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-99330 [...] We can confirm the absence of handle leaks: [...] […] We can confirm the absence of handle leaks: […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-78608 Crash Dump Analysis » Blog Archive » Invalid pointer, incorrect stack trace, multiple exceptions, insufficient memory and memory leak: pattern cooperation Wed, 10 Jun 2009 13:55:57 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-78608 [...] kernel dump and we cannot inspect user space of that process. We can only say that it was not a handle leak because the number of handles is low (380). We also inspect paged pool stats and find a 3rd-party [...] […] kernel dump and we cannot inspect user space of that process. We can only say that it was not a handle leak because the number of handles is low (380). We also inspect paged pool stats and find a 3rd-party […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-65041 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 80) Fri, 13 Feb 2009 14:19:03 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-65041 [...] difference of this pattern and similar Handle Leak or Zombie Processes is the fact that leaks usually happen when a process forgets to close handles [...] […] difference of this pattern and similar Handle Leak or Zombie Processes is the fact that leaks usually happen when a process forgets to close handles […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-43202 !analyze -v : Crash Dump Analysis Patterns (Part 13b) Thu, 18 Sep 2008 08:39:42 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-43202 [...] Crash Dump Analysis Patterns (Part 13b) [...] […] Crash Dump Analysis Patterns (Part 13b) […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-42363 Crash Dump Analysis » Blog Archive » First-order and second-order memory leaks Thu, 11 Sep 2008 15:22:24 +0000 https://www.dumpanalysis.org/blog/index.php/2007/07/15/crash-dump-analysis-patterns-part-13b/#comment-42363 [...] Insufficient Memory (handle leak) [...] […] Insufficient Memory (handle leak) […]

]]>