« Forthcoming Debugged! MZ/PE June issue
WOW64 process, NULL data pointer, stack overflow, main thread, incorrect stack trace, nested exceptions, hidden exception, manual dump, multiple exceptions and virtualized system: pattern cooperation »

Fiber Bundle of Memory Space

When complete memory dumps are huge (in case of x64 systems) we can dump specific processes and then force a kernel memory dump. Here we have a product of spaces similar to a fiber bundle illustrated by the following intuitive picture:

- Dmitry Vostokov @ DumpAnalysis.org -

This entry was posted on Sunday, July 12th, 2009 at 5:31 pm and is filed under Crash Dump Analysis, Debugging, Mathematics of Debugging, Science of Memory Dump Analysis. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

One Response to “Fiber Bundle of Memory Space”

  1. Crash Dump Analysis » Blog Archive » ALPC wait chain, missing threads, message box, zombie and special processes: pattern cooperation Says:
    September 18th, 2009 at 2:27 pm

    […] purpose of this case study is to show how to choose what to include in a fiber bundle memory dump when x64 complete memory dumps are huge and not an option to […]

Leave a Reply

You must be logged in to post a comment.