windbg: kf command

kf is a useful command to find out stack memory taken by a frame. See below… I have three functions which looks like this… #pragma auto_inline(off) void TestStack2() {        printf("hello");        return; } void TestStack1() {        TestStack2();        char bytes[0x190] = {9};        printf("hello: %s", bytes); } void TestStack() {        TestStack1();        […]
Continue reading…

 

Automatically launching CDB to take a dump of a native/managed crash

Found a nice article which describes how to take native/managed crash dumps automatically using CDB as soon as a crash takes place. We know that for CLR 2.0 we’ve got to configure crash handler settings at two places in the registry for a native and managed application. For native HKLMSoftwareMicrosoftWindows NTCurrent VersionAeDebugDebugger HKLMSoftwareMicrosoftWindows NTCurrent VersionAeDebugAuto For managed HKLMSoftwareMicrosoft.NETFrameworkDbgManagedDebugger […]
Continue reading…