Comments on: Crash Dump Analysis Patterns (Part 21) https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Wed, 06 May 2026 18:38:16 +0000 http://wordpress.org/?v=2.3.3 By: Dmitry Vostokov https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-767733 Dmitry Vostokov Sat, 14 Sep 2024 13:51:46 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-767733 The analysis pattern name has been renamed to Missing Thread (User Space) since we also add one for kernel space. The analysis pattern name has been renamed to Missing Thread (User Space) since we also add one for kernel space.

]]> By: Crash Dump Analysis » Blog Archive » ALPC wait chains, missing threads, waiting thread time and semantic process coupling: pattern cooperation https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-176682 Crash Dump Analysis » Blog Archive » ALPC wait chains, missing threads, waiting thread time and semantic process coupling: pattern cooperation Tue, 17 Aug 2010 09:59:52 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-176682 [...] the latter having a queue of 201 messages. Threads that were supposed to process some messages didn’t exist. ServiceC process had a thread that was waiting for ServiceA.exe as well. But there was no any [...] […] the latter having a queue of 201 messages. Threads that were supposed to process some messages didn’t exist. ServiceC process had a thread that was waiting for ServiceA.exe as well. But there was no any […]

]]> By: Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 39) https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-152080 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 39) Fri, 14 May 2010 14:51:15 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-152080 [...] we introduce an icon for Missing Thread [...] […] we introduce an icon for Missing Thread […]

]]> By: Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 92) https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-106046 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 92) Tue, 24 Nov 2009 00:30:25 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-106046 [...] process is present we should check if it is exited but references to it exist or there are any missing threads or components inside it, any suspended threads and special processes like a postmortem [...] […] process is present we should check if it is exited but references to it exist or there are any missing threads or components inside it, any suspended threads and special processes like a postmortem […]

]]> By: Crash Dump Analysis » Blog Archive » Stack trace collection, missing threads, waiting time, critical section and LPC wait chains: pattern cooperation https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-105460 Crash Dump Analysis » Blog Archive » Stack trace collection, missing threads, waiting time, critical section and LPC wait chains: pattern cooperation Fri, 20 Nov 2009 10:03:55 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-105460 [...] this service had at least a dozen waiting threads. If we switch to the process we see many threads missing and the process itself is in the process of exiting (three “process” nouns in one [...] […] this service had at least a dozen waiting threads. If we switch to the process we see many threads missing and the process itself is in the process of exiting (three “process” nouns in one […]

]]> By: Crash Dump Analysis » Blog Archive » Main blocked thread, missing component, execution residue and data contents locality: pattern cooperation https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-78299 Crash Dump Analysis » Blog Archive » Main blocked thread, missing component, execution residue and data contents locality: pattern cooperation Mon, 08 Jun 2009 16:36:00 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-78299 [...] error code suggests that some DLL was missing. We see that the process just started indeed and only a few DLL were [...] […] error code suggests that some DLL was missing. We see that the process just started indeed and only a few DLL were […]

]]> By: Dmitry Vostokov https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-49020 Dmitry Vostokov Thu, 30 Oct 2008 10:43:16 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/12/crash-dump-analysis-patterns-part-21/#comment-49020 The thread might also be missing when it exists and leaves some synchronization objects in non-signalled state: 0:088> !locks CritSec DLL!MyFunctionEx+178 at 67caf998 WaiterWoken No LockCount 71 RecursionCount 17 OwningThread 1910 EntryCount 0 ContentionCount 47 *** Locked Thread 1910 is not present in the dump. Also !analyze -v -hang reports that the critical section is orphaned: PRIMARY_PROBLEM_CLASS: APPLICATION_HANG_Orphaned_CriticalSection The thread might also be missing when it exists and leaves some synchronization objects in non-signalled state:

0:088> !locks

CritSec DLL!MyFunctionEx+178 at 67caf998
WaiterWoken No
LockCount 71
RecursionCount 17
OwningThread 1910
EntryCount 0
ContentionCount 47
*** Locked

Thread 1910 is not present in the dump. Also !analyze -v -hang reports that the critical section is orphaned:

PRIMARY_PROBLEM_CLASS: APPLICATION_HANG_Orphaned_CriticalSection

]]>