O'Reilly logo

Memory Dump Analysis Anthology, Volume 7 by Dmitry Vostokov

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Distributed Wait Chain

All previous wait chain patterns (Volume 3, page 383) were about single wait chains. However, it is often a case when there are many different wait chains in a memory dump especially in terminal services environments. There can be ALPC and critical section wait chains at the same time. They can be related or completely disjoint. Distributed Wait Chain pattern covers a special case of several wait chains having the same structure (and possibly pointing in one direction). One such example we put below. In a stack trace collection (Volume 1, page 409) from a complete memory dump from a hanging system we found several explorer.exe processes with critical section wait chains (Volume 1, page 490) having the same structure ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required