Crash Dump Analysis Patterns (Part 175)
Wednesday, May 23rd, 2012Stored Exception pattern is mostly useful when an exception thread is not present like in this rare example:
ERROR: Unable to find system thread 9B7E
ERROR: The thread being debugged has either exited or cannot be accessed
ERROR: Many commands will not work properly
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
ERROR: Exception C0000005 occurred on unknown thread 9B7E
(95f4.9b7e): Access violation - code c0000005 (first/second chance not available)
.ecxr will not work here but the exception record is available via .exr command:
0:???> .exr -1
ExceptionAddress: 08a9ae18 (DllB.dll+0x001cae18)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 00000008
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -