O'Reilly logo

Memory Dump Analysis Anthology, Volume 3 by Dmitry Vostokov

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Appendix B. 

Crash Dump Analysis Checklist

General:

  • Symbol servers (.symfix)

  • Internal database(s) search

  • Google or Microsoft search for suspected components as this could be a known issue. Sometimes a simple search immediately points to the fix on a vendor's site

  • The tool used to save a dump (to flag false positive, incomplete or inconsistent dumps)

  • OS/SP version (version)

  • Language

  • Debug time

  • System uptime

  • Computer name (dS srv!srvcomputername or (!envvar COMPUTERNAME)

  • Hardware configuration (!sysinfo)

  • .kframes 100

Application crash or hang:

  • Default analysis (!analyze -v or !analyze -v -hang for hangs)

  • Critical sections (!locks and !locks -v, !cs -l -o -s) for both crashes and hangs

  • Component timestamps, duplication and paths. DLL Hell?

  • Do any newer components ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required