Problem with reading DMP files

[pshvarts]

On Windows Server 2003 we have service that spawning process that crashing. I
tried getting at least stack information and use ADPLUS –crash –NoDumpOnFirst
–o c:\junk p xxxx (PID)
It produces 2 DMP files with name like
PID-xxx__1st_chance_Process_Shut_Down__full_xxx.dmp and
xxx__2nd_chance_AccessViolation__full_xxx.dmp

I tried to look at them in WinDBG but there is nothing, below capture from
…AccessViolation… DMP file (and I set symbols path
SRV*c:\junk\DebugSymbols*http://msdl.microsoft.com/download/symbols;C:\Junk\PCR\63939 – and there is BWSERVER.PDB file in this directory)
Loading Dump File
[C:\Junk\PCR\63939\PID-10144__BWSERVER.EXE__2nd_chance_AccessViolation__full_1b20_2009-12-01_14-15-40-025_27a0.dmp]
User Mini Dump File with Full Memory: Only application data is available

Comment:
'2nd_chance_AccessViolation_exception_in_BWSERVER.EXE_running_on_IGTDALCNT014'
Symbol search path is:
SRV*c:\junk\DebugSymbols*http://msdl.microsoft.com/download/symbols;C:\Junk\PCR\63939
Executable search path is:
Windows Server 2003 Version 3790 (Service Pack 2) MP (2 procs) Free x86
compatible
Product: Server, suite: TerminalServer SingleUserTS
Machine Name:
Debug session time: Tue Dec 1 14:15:40.000 2009 (GMT-6)
System Uptime: 53 days 17:18:33.875
Process Uptime: 0 days 0:45:34.000
................................................................
..........
Loading unloaded module list
................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(27a0.24dc): Access violation - code c0000005 (first/second chance not
available)
eax=00000000 ebx=00000000 ecx=00000000 edx=7c828786 esi=00000000 edi=00000000
eip=00000000 esp=10c412d4 ebp=10c412f4 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246
00000000 ?? ???

What I can do to see at least a stack?

[Jochen Kalmbach [MVP]]

pshvarts schrieb:

> This dump file has an exception of interest stored in it.
> The stored exception information can be accessed via .ecxr.
> (27a0.24dc): Access violation - code c0000005 (first/second chance not
> available)
> eax=00000000 ebx=00000000 ecx=00000000 edx=7c828786 esi=00000000 edi=00000000
> eip=00000000 esp=10c412d4 ebp=10c412f4 iopl=0 nv up ei pl zr na pe nc
> cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246
> 00000000 ?? ???
>
> What I can do to see at least a stack?

!analyze -v
!?

.ecxr
kb
!?

--
Greetings
Jochen

My blog about Win32 and .NET
http://blog.kalmbachnet.de/

[John Lan]

it looks like an issue of stack corruption, try
dps @esp

to dump raw stack data.

"Jochen Kalmbach [MVP]" <nospam-Joch...@holzma.de> 写入消息
news:#Nv$YN3cKH...@TK2MSFTNGP06.phx.gbl...