How to decode crash dumps in windows?

[sen.d...@gmail.com]

Hi All,

I am trying to decode and analyse the crash dumps in windows for 2 days but am getting no where. 

I tried minidump_stackwalk.exe foo.dmp and output was 

Operating system: Windows NT

                  6.1.7601 Service Pack 1

CPU: x86

     GenuineIntel family 6 model 58 stepping 9

     4 CPUs

Crash reason:  EXCEPTION_ACCESS_VIOLATION_READ

Crash address: 0x3e07cdcb

Thread 0 (crashed)

 0  WingMan.exe + 0xbbffe4

    eip = 0x00f3ffe4   esp = 0x0023ed80   ebp = 0x0023ed98   ebx = 0x00000000

    esi = 0x0023edb4   edi = 0x00000000   eax = 0x3e07cdcc   ecx = 0x0023edb4

    edx = 0x3e07cdcb   efl = 0x00210202

    Found by: given as instruction pointer in context

 1  WingMan.exe + 0xaf1865

    eip = 0x00e71866   esp = 0x0023eda0   ebp = 0x0023ee08

    Found by: previous frame's frame pointer

 2  WingMan.exe + 0xaf234b

    eip = 0x00e7234c   esp = 0x0023ee10   ebp = 0x0023ee1c

    Found by: previous frame's frame pointer

 3  WingMan.exe + 0xaeba1e

    eip = 0x00e6ba1f   esp = 0x0023ee24   ebp = 0x0023ee4c

    Found by: previous frame's frame pointer

This output is hard to analyse and I guess I am missing symbol file here. I have downloaded the pdb file but how do we use it? Do I need to convert the pdb to .sym file as mentioned in http://www.chromium.org/developers/decoding-crash-dumps ? What is the command to get a proper output in windows?

Any help would be greatly appreciated.

Thanks in advance.

Regards,

Thomas Sen.

[Roger]

You'll need to convert the pdb files to symbols file (.sym) with
'dump_syms'.

And the .sym file need to be put in specific directory so
it can be found by minidump_stackwalk. Check

http://code.google.com/p/google-breakpad/wiki/LinuxStarterGuide

Roger

--
Roger

[Oleg Verych]

And the .sym file need to be put in specific directory so
it can be found by minidump_stackwalk. Check

This directory is shown in stderr output of `minidump_stackwalk.exe`:

2014-01-24 20:05:57: simple_symbol_supplier.cc:171: INFO: No symbol file at ../nw.exe.pdb/823B52CE3936471FB1258AB402BE6EDB24/nw.exe.sym

________

[sen.d...@gmail.com]

Thank you, Roger, Oleg.

I tried like you said with minidump_stalkwalk, converting the pdb to .sym and placing it to the folder.. but somehow it didnt worked again. So I tried Visual C++ to debug and see the thread and stack. 

I got couple of dumps and analysed it. All instances are crashed because the thread dont have appropriate access to read/write to a virtual address. Can you please check the attached screenshot of VC++ threads? Any input on what triggered such a crash would be very helpful. 

The application is angularjs using websql running in node-webkit. It sometimes loads around 20-30 images and at that time memory usage will go up by around 900MB. Do you think it could be one of the reason for crash?

[kapil....@gmail.com]

Hi,

Were you able to find a solution for this?

I am getting the same error message: "The thread tried to read from or write to a virtual address for which it does not have the appropriate access".

I am getting this while using the node-oracle library: var oracle = require('oracle');

It works fine when I am using other plugins like markdown etc.

Any help would be great :)

Thanks,
Kapil