Comments on: Crash Dump Analysis Patterns (Part 31) https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Wed, 06 May 2026 11:46:13 +0000 http://wordpress.org/?v=2.3.3 By: Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 52) https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-160433 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 52) Wed, 23 Jun 2010 11:22:44 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-160433 [...] Today we introduce an icon for Passive Thread (user space) pattern: [...] […] Today we introduce an icon for Passive Thread (user space) pattern: […]

]]> By: Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 83) https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-71293 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 83) Tue, 14 Apr 2009 15:40:49 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-71293 [...] Some are always present and some are not suspicious because of their function or status, like Passive Threads or Passive System Threads. Going more fine-grained we can talk about components and their specific [...] […] Some are always present and some are not suspicious because of their function or status, like Passive Threads or Passive System Threads. Going more fine-grained we can talk about components and their specific […]

]]> By: Dmitry Vostokov https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-37213 Dmitry Vostokov Fri, 08 Aug 2008 00:52:30 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-37213 Could it be because of separation of services (session 0) and console applications (session 1) in Vista? Just because you mentioned that you run your app smoothly as an application. What happens if you use synchronous I/O in a service? Could it be because of separation of services (session 0) and console applications (session 1) in Vista? Just because you mentioned that you run your app smoothly as an application. What happens if you use synchronous I/O in a service?

]]> By: stb https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-37182 stb Thu, 07 Aug 2008 20:24:10 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-37182 Hi I have been debugging a service that reads data from the USB, however all the ReadFile calls never finish(return ERROR_IO_PENDING) even after calling WaitForSingleObject(I am using overlapped io). Interestingly enough if I run the binary as an app everything works smoothly. This behaviour is only present in Windows Vista, XP is fine. I have been trying to debug the vista HIDUSB driver(it's a HID device) and all the IRPs are in a pending state. Any suggestions on why this is happening? Hi
I have been debugging a service that reads data from the USB, however all the ReadFile calls never finish(return ERROR_IO_PENDING) even after calling WaitForSingleObject(I am using overlapped io). Interestingly enough if I run the binary as an app everything works smoothly.

This behaviour is only present in Windows Vista, XP is fine. I have been trying to debug the vista HIDUSB driver(it’s a HID device) and all the IRPs are in a pending state. Any suggestions on why this is happening?

]]> By: Dmitry Vostokov https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-23599 Dmitry Vostokov Thu, 17 Apr 2008 10:26:56 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-23599 In this case you probably need access to its source code. Or understand its architecture. If this is a GUI app? If it is running in terminal service environment it could be the case that mouse/keyboard events don't reach it. Can you post your stacks? You can do it on forum http://www.dumpanalysis.org/forum/ if you like In this case you probably need access to its source code. Or understand its architecture. If this is a GUI app? If it is running in terminal service environment it could be the case that mouse/keyboard events don’t reach it. Can you post your stacks? You can do it on forum http://www.dumpanalysis.org/forum/ if you like

]]> By: Suresh Thotakura https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-23069 Suresh Thotakura Fri, 11 Apr 2008 15:10:55 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/17/crash-dump-analysis-patterns-part-31/#comment-23069 Hi, I have been debugging a hung application for the past couple of days and I have come to your site thru some search engine. When I attached Windbg and see all my suspended threads are passive threads. How should I analyze in this particular scenario. Help me. Thanks in advance, Cheers, Suresh Hi,

I have been debugging a hung application for the past couple of days and I have come to your site thru some search engine. When I attached Windbg and see all my suspended threads are passive threads. How should I analyze in this particular scenario. Help me. Thanks in advance,

Cheers,
Suresh

]]>