Re: windbg调试bootmgr问题

Windows内核调试

windbg调试bootmgr问题

greenland 2009-02-03, 22:55 下午
目前正在尝试用windbg调试bootmgr，按照下面叙述的进行了设置，只不过用的是虚拟机，com1那换成了pipe,端口启动没有问题，但是在启动bootmgr的时候总显示symbol path invalid.但是如果只调试NT都话，symbol path没有问题。请大虾帮忙解答下。非常感谢！http://www.octopusteam.net/viewthread.php?tid=260

Re: windbg调试bootmgr问题

格蠹老雷 2009-02-03, 23:50 下午

点了一下那个链接，原来是有人把我的文章传播过去了，篇末注明了出处，还是挺厚道的：

http://advdbg.org/blogs/advdbg_system/articles/784.aspx

既然显示symbol path invalid，那么不妨就从符号设置着手:

先用.sympath看一下符号路径设置的是什么。

如果路径中包含非法的路径，那么可以用这个命令修正。

或者使用.symfix c:\symbols这样的命令重置一下。

如果还没解决问题，那么麻烦多贴一下屏幕输出过来，或者描述的详细一些。

Re: windbg调试bootmgr问题

greenland 2009-02-04, 09:25 上午
截屏如下：
Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Opened \\.\pipe\vista
Waiting to reconnect...
BD: Boot Debugger Initialized
Connected to Windows Boot Debugger 6000 x86 compatible target, ptr64 FALSE
Kernel Debugger connection established.
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*** ERROR: Module load completed but symbols could not be loaded for bootmgr
Windows Boot Debugger Kernel Version 6000 UP Free x86 compatible
Primary image base = 0x00400000 Loaded module list = 0x004ffff8
System Uptime: not available
Shutdown occurred...unloading all symbol tables.
Waiting to reconnect...
BD: Boot Debugger Initialized
Connected to Windows Boot Debugger 6000 x86 compatible target, ptr64 FALSE
Kernel Debugger connection established.
Symbol search path is: SRV*d:\vistasymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Boot Debugger Kernel Version 6000 UP Free x86 compatible
Primary image base = 0x0057b000 Loaded module list = 0x00678d38
System Uptime: not available
Console opened in video mode 0x141
Shutdown occurred...unloading all symbol tables.
Waiting to reconnect...
Connected to Windows Vista 6000 x86 compatible target, ptr64 FALSE
Kernel Debugger connection established.
Symbol search path is: SRV*d:\vistasymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Vista Kernel Version 6000 MP (1 procs) Free x86 compatible
Built by: 6000.16386.x86fre.vista_rtm.061101-2205
Kernel base = 0x81c00000 PsLoadedModuleList = 0x81d08ab0
System Uptime: not available
Break instruction exception - code 80000003 (first chance)

我怀疑是不是因为我用的是pipe，但是guest机里设置用的bcdedit /set {bootmgr} debugport 1

Re: windbg调试bootmgr问题

greenland 2009-02-04, 09:27 上午
我的msn是yanghuihui0416@hotmail.com
基本天天从早到晚都挂着

Re: windbg调试bootmgr问题

greenland 2009-02-04, 10:46 上午
后来又在guest里面cmd中设置了一下突然就好了还是不知道是啥问题

Re: windbg调试bootmgr问题

格蠹老雷 2009-02-04, 20:44 下午
从上面的输出信息来看，调试器和调试引擎已经顺利交流信息，所以通信设置没有问题。
提示信息讲的很清楚，符号路径没有设置好。