Suppresses debugger output from DbgPrint(), DbgPrintEx(), KdPrint(), and KdPrintEx() calls. When this output is suppressed, it does not automatically appear in the kernel debugger. However, it can still be accessed by using the !dbgprint debugger extension.

Creates a run-time stack trace database of kernel operations, such as resource objects and object management operations. This feature works only when using a "checked build," that is, an internal debugging build of the operating system.

Note

Creates a run-time stack trace database in the address space of a particular process (image file mode) or all processes (systemwide).

Runs Winlogon in the Windows Symbolic Debugger (Ntsd.exe) with the -d parameter, which directs its output to the kernel debugger console.

This flag is used for debugging the Client Server Run-time Subsystem (CSRSS), Winlogon.exe, and the Winlogon child processes.

See also: Debug Winlogon if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EDAA3AAAACA"); if(o != null) o.innerHTML = "[#dwl]"; } , Enable debugging of Win32 subsystem if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBAA3AAAACA"); if(o != null) o.innerHTML = "[#d32]"; } .

Runs Winlogon in the Windows Symbolic Debugger (Ntsd.exe) with the following options:

See also: Debug Initial Command if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EDAA2AAAACA"); if(o != null) o.innerHTML = "[#dic]"; } , Enable debugging of Win32 subsystem if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBAA2AAAACA"); if(o != null) o.innerHTML = "[#d32]"; } .

Leaves adjacent blocks of heap memory separate when they are freed. By default, the system combines ("coalesces") newly freed adjacent blocks into a single block. Combining the blocks takes time, but reduces fragmentation that might force the heap to allocate additional memory when it can't find contiguous memory.

This flag is used to test optimizing strategies. It is not used for debugging.

Prevents paging of the kernel mode stacks of inactive threads. Generally, the kernel mode stack cannot be paged; it is guaranteed to be resident in memory. However, the system occasionally pages the kernel stacks of inactive threads. This flag prevents these occurrences.

The kernel debugger can provide information about a thread only when its stack is in physical memory. This flag is particularly important when debugging deadlocks and in other cases when every thread must be tracked.

This flag appears in Gflags, but it has no effect on the operating system.

Prevents the kernel from extending the stacks of the threads in the process beyond the initial memory committed. This is used to simulate low memory conditions (where stack extensions fail) and to test the strategic system processes that are expected to run well even with low memory.

Creates event handles when a critical section is initialized, rather than waiting until the event is needed. When the system cannot create an event, it generates the exception during initialization and the calls to enter and leave the critical section do not fail.

Because this flag uses a significant amount of nonpaged pool memory, use it only on very reliable systems that have sufficient memory.

Raises a user mode exception (STATUS_INVALID_HANDLE) whenever a user mode process passes an invalid handle to the Object Manager.

Raises a user mode exception whenever an invalid handle is passed to the CloseHandle() interface or related interfaces, such as SetEvent(), that take handles as arguments.

Note

Runs the Client Server Run-time Subsystem (Csrss.exe) in the Windows Symbolic Debugger (Ntsd.exe) with the following parameters:

This flag is effective only when the Debug Initial Command if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EDAASAAAACA"); if(o != null) o.innerHTML = "[#dic]"; } (dic) or Debug Winlogon if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBAASAAAACA"); if(o != null) o.innerHTML = "[#dwl]"; } (dwl) flag is also set.

Creates a log of exception records in the kernel run-time library. You can access the log from the kernel debugger.

Validates the heap when it is freed.

See also: Enable heap tail checking if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EDAAQAAAACA"); if(o != null) o.innerHTML = "[#htc]"; } , Enable heap parameter checking if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBAAQAAAACA"); if(o != null) o.innerHTML = "[#hpc]"; } .

Verifies some aspects of the heap whenever a heap API is called.

See also: Enable heap validation on call if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBAAPAAAACA"); if(o != null) o.innerHTML = "[#hvc]"; } .

Assigns unique tags to heap allocations. You can display the tag by using the !heap debugger extension with the -t parameter.

For information about the !heap extension, see the Microsoft Windows 2000 Debugging Tools Kit, which is available from the Microsoft Windows Driver Development Kits (DDK) if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBBAOAAAACA"); if(o != null) o.innerHTML = "[http://go.microsoft.com/fwlink/?linkid=1651]"; } Web site.

See also: Enable heap tagging by DLL if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBAAOAAAACA"); if(o != null) o.innerHTML = "[#htd]"; } .

Assigns a unique tag to heap allocations created by the same DLL. You can display the tag by using the !heap debugger extension with the -t parameter.

For information about the !heap extension, see the Microsoft Windows 2000 Debugging Tools Kit, which is available from the Microsoft Windows Driver Development Kits (DDK) if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBBANAAAACA"); if(o != null) o.innerHTML = "[http://go.microsoft.com/fwlink/?linkid=1651]"; } Web site.

See also: Enable heap tagging if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBAANAAAACA"); if(o != null) o.innerHTML = "[#htg]"; } .

Checks for buffer overruns when the heap is freed. This flag adds a short pattern to the end of each allocation. The Windows heap manager detects the pattern when the block is freed and, if the block was modified, the heap manager breaks into the debugger.

See also: Enable heap free checking if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EDAAMAAAACA"); if(o != null) o.innerHTML = "[#hfc]"; } , Enable heap parameter checking if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBAAMAAAACA"); if(o != null) o.innerHTML = "[#hpc]"; } .

Validates the entire heap each time a heap API is called.

To avoid the high overhead resulting from this flag, use the HeapValidate() API at critical junctures, such as when the heap is destroyed. However, this flag is useful for detecting random corruption in a pool.

See also: Enable heap parameter checking if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBAALAAAACA"); if(o != null) o.innerHTML = "[#hpc]"; } .

Loads kernel symbols into the kernel memory space the next time the system starts. The kernel symbols are used in kernel profiling and by advanced kernel debugging tools.

This flag appears in Gflags, but it has no effect on the operating system.

Turns on page heap debugging, which verifies dynamic heap memory operations, including allocations and frees, and causes a debugger break when it detects a heap error.

This option enables full page heap debugging when set for image files and standard page heap debugging when set in system registry or kernel mode.

Setting this flag for an image file is the same as typing gflags /p enable /full for the image file at the command line.

Important

Collects data and calculates statistics about pool memory allocations. The data is grouped by pool tag value. Several tools that diagnose memory leaks and other kernel pool errors use the resulting data.

Use ExAllocatePoolWithTag or ExAllocatePoolWithQuotaTag to set the tag value. When no tag value is specified (ExAllocatePool, ExAllocatePoolWithQuota), the system creates a tag with the default value of "None." Because data for all allocations with a "None" tag is combined, you cannot distinguish the data for a specific allocation.

In Windows XP and earlier systems, this flag also directs the system to attach a pool tag even when the pool memory is allocated by using ExAllocatePoolWithQuotaTag. Otherwise, the tag bytes are used to store the quota values. In Windows Server 2003, tag values and quota values are stored in separate fields that are attached to every pool memory allocation.

The Enable pool tagging flag is permanently set on all versions of Windows Server 2003. As a result, the system always collects data about pool memory allocations.

Notes

Loads DLLs at the highest possible address. This flag is used to test 64-bit code for pointer truncation errors, because the most significant 32 bits of the pointers are not zeroes. It is designed for code running on the 64-bit versions of the Windows Server 2003.

Collects and maintains a list of active objects by object type (for example, event, mutex, and semaphore). You can use Open Handles (Oh.exe) if(typeof(IsPrinterFriendly) != "undefined") { var o = document.getElementById("EBCAEAAAACA"); if(o != null) o.innerHTML = "[http://go.microsoft.com/fwlink/?linkid=5943]"; } , a tool included in the Windows 2000 Resource Kit, to display the object type lists. Because Oh.exe automatically sets the OTL flag, but does not clear it, you should use Gflags (-otl) to clear the flag.

Notes

Captures detailed information about the loading and unloading of executable images and their supporting library modules.

The kernel breaks into the kernel debugger whenever a kernel mode exception occurs. The system passes all first chance exceptions (except for STATUS_PORT_DISCONNECT) with a severity of Warning or Error to the debugger before passing them to a local exception handler.

This flag appears in Gflags, but it has no effect on the operating system.