Re: 如何调试：Missing image name, possible paged-out or corrupt data.

WinDbg

如何调试：Missing image name, possible paged-out or corrupt data.

Alex.xu 2009-10-20, 11:20 上午

CommandLine: "C:\Documents and Settings\test\Desktop\NV6.99.27.0\NeroVision.exe"
DBGHELP: Symbol Search Path: \\cn-s-w-004\delivery\nero vision\nv7\pdb\nv6.99.27.0;srv*c:\mylocalsymbols*http://msdl.microsoft.com/download/symbols;srv*c:\mylocalsymbols\smc*http://debug.nero.internal/symbols
Symbol search path is: \\cn-s-w-004\Delivery\Nero Vision\NV7\PDB\NV6.99.27.0;srv*c:\MyLocalSymbols*http://msdl.microsoft.com/download/symbols;srv*c:\MyLocalSymbols\smc*http://debug.nero.internal/symbols
Executable search path is:
DBGHELP: SharedUserData - virtual symbol module
ModLoad: 00400000 004f2000   NeroVision.exe
ModLoad: 7c900000 7c9af000   ntdll.dll
ModLoad: 7c800000 7c8f6000   C:\WINDOWS\system32\kernel32.dll
ModLoad: 4ec50000 4edf6000   C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll
ModLoad: 77dd0000 77e6b000   C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f02000   C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77fe0000 77ff1000   C:\WINDOWS\system32\Secur32.dll
ModLoad: 77f10000 77f59000   C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a1000   C:\WINDOWS\system32\USER32.dll
ModLoad: 774e0000 7761d000   C:\WINDOWS\system32\ole32.dll
ModLoad: 77c10000 77c68000   C:\WINDOWS\system32\msvcrt.dll
ModLoad: 10000000 10c77000   C:\Documents and Settings\test\Desktop\NV6.99.27.0\NeroAPIFiles\NeroAPIEngine.dll
ModLoad: 76b40000 76b6d000   C:\WINDOWS\system32\WINMM.dll
ModLoad: 20000000 20056000   C:\Documents and Settings\test\Desktop\NV6.99.27.0\NeroAPIFiles\uNeroErr.dll
ModLoad: 7c9c0000 7d1d7000   C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000   C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 78130000 781cb000   C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll
ModLoad: 7c420000 7c4a7000   C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCP80.dll
ModLoad: 782e0000 783ef000   C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80U.DLL
ModLoad: 73000000 73026000   C:\WINDOWS\system32\WINSPOOL.DRV
ModLoad: 77120000 771ab000   C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77c00000 77c08000   C:\WINDOWS\system32\VERSION.dll
ModLoad: 77a80000 77b15000   C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000   C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c30000 76c5e000   C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 76c90000 76cb8000   C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 771b0000 7725a000   C:\WINDOWS\system32\WININET.dll
ModLoad: 74ad0000 74ad8000   C:\WINDOWS\system32\POWRPROF.dll
ModLoad: 00520000 0053b000   C:\Documents and Settings\test\Desktop\NV6.99.27.0\EditingProxy.dll
ModLoad: 79000000 79046000   C:\WINDOWS\system32\mscoree.dll
ModLoad: 76390000 763ad000   C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000   C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000   C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000   C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
ModLoad: 5d360000 5d36e000   C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\MFC80ENU.DLL
(da0.3dc): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00000001 ebx=00000000 ecx=7c9175b4 edx=002c0608 esi=7c80ae30 edi=77dd0000
eip=77b23623 esp=0012f2b8 ebp=0012f320 iopl=0         nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000             efl=00010202
Missing image name, possible paged-out or corrupt data.
Missing image name, possible paged-out or corrupt data.
Missing image name, possible paged-out or corrupt data.
77b23623 ??              ???

这个问题应该如何调试？现在的情况是我的程序在XP下面启动之后就出错了。感觉出错在动态库加载的时候。

0:000> kb
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f2b4 77a86354 00000000 77a8633c 0000c556 0x77b23623
0012f3c4 7c90118a 77a80000 00000001 00000000 0x77a86354
0012f3e4 7c91c4da 77a81632 77a80000 00000001 ntdll!LdrpCallInitRoutine+0x14
0012f4ec 7c917e78 00000000 0012f7d4 00000000 ntdll!LdrpRunInitializeRoutines+0x344
0012f59c 7c917ea0 79000000 7c938a7c 00000000 ntdll!LdrpGetProcedureAddress+0x1c6
0012f5b8 7c938a1a 79000000 7c938a7c 00000000 ntdll!LdrGetProcedureAddress+0x18
0012f6f4 7c9387c9 0012f7d4 00000000 00000000 ntdll!LdrpCorValidateImage+0xd6
0012f714 7c938765 005261b0 0012f7b4 0012f7d4 ntdll!LdrpCheckCorImage+0x25
0012f7f0 7c91d7a8 00020498 7ffddc00 00000000 ntdll!LdrpMapDll+0x8db
0012fa50 7c91d2cd 00020498 0044fa40 00400000 ntdll!LdrpLoadImportModule+0x174
0012fa80 7c91d274 7ffde000 00020498 002c1ee0 ntdll!LdrpHandleOneOldFormatImportDescriptor+0x5e
0012fa98 7c91c1ce 7ffde000 00020498 002c1ee0 ntdll!LdrpHandleOldFormatImportDescriptors+0x1f
0012fb14 7c921e25 00020498 002c1ee0 7ffdd000 ntdll!LdrpWalkImportDescriptor+0x19e
0012fc94 7c92108f 0012fd30 7c900000 0012fce0 ntdll!LdrpInitializeProcess+0xe02
0012fd1c 7c90e437 0012fd30 7c900000 00000000 ntdll!_LdrpInitialize+0x183
00000000 00000000 00000000 00000000 00000000 ntdll!KiUserApcDispatcher+0x7

0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

DBGHELP: c:\MyLocalSymbols\kernel32.dll\4802A12Cf6000\kernel32.dll - OK
DBGHELP: c:\MyLocalSymbols\ntdll.dll\4802A12Caf000\ntdll.dll - OK
DBGHELP: c:\MyLocalSymbols\kernel32.dll\4802A12Cf6000\kernel32.dll - OK
DBGHELP: c:\MyLocalSymbols\ntdll.dll\4802A12Caf000\ntdll.dll - OK
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information. Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information. Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************

FAULTING_IP:
+14
77b23623 ?? ???

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 77b23623
   ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000008
   Parameter[1]: 77b23623
Attempt to execute non-executable address 77b23623

FAULTING_THREAD: 000003dc

PROCESS_NAME: NeroVision.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000008

EXCEPTION_PARAMETER2: 77b23623

WRITE_ADDRESS: 77b23623

FOLLOWUP_IP:
ntdll!LdrpCallInitRoutine+14
7c90118a 8be6 mov esp,esi

FAILED_INSTRUCTION_ADDRESS:
+152952f00eddf74
77b23623 ?? ???

NTGLOBALFLAG: 70

APPLICATION_VERIFIER_FLAGS: 0

IP_ON_HEAP: 77a86354

IP_IN_FREE_BLOCK: 77a86354

BUGCHECK_STR: APPLICATION_FAULT_SOFTWARE_NX_FAULT_INVALID

PRIMARY_PROBLEM_CLASS: SOFTWARE_NX_FAULT_INVALID

DEFAULT_BUCKET_ID: SOFTWARE_NX_FAULT_INVALID

FRAME_ONE_INVALID: 1

LAST_CONTROL_TRANSFER: from 77a86354 to 77b23623

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f2b4 77a86354 00000000 77a8633c 0000c556 0x77b23623
0012f3c4 7c90118a 77a80000 00000001 00000000 0x77a86354
0012f3e4 7c91c4da 77a81632 77a80000 00000001 ntdll!LdrpCallInitRoutine+0x14
0012f4ec 7c917e78 00000000 0012f7d4 00000000 ntdll!LdrpRunInitializeRoutines+0x344
0012f59c 7c917ea0 79000000 7c938a7c 00000000 ntdll!LdrpGetProcedureAddress+0x1c6
0012f5b8 7c938a1a 79000000 7c938a7c 00000000 ntdll!LdrGetProcedureAddress+0x18
0012f6f4 7c9387c9 0012f7d4 00000000 00000000 ntdll!LdrpCorValidateImage+0xd6
0012f714 7c938765 005261b0 0012f7b4 0012f7d4 ntdll!LdrpCheckCorImage+0x25
0012f7f0 7c91d7a8 00020498 7ffddc00 00000000 ntdll!LdrpMapDll+0x8db
0012fa50 7c91d2cd 00020498 0044fa40 00400000 ntdll!LdrpLoadImportModule+0x174
0012fa80 7c91d274 7ffde000 00020498 002c1ee0 ntdll!LdrpHandleOneOldFormatImportDescriptor+0x5e
0012fa98 7c91c1ce 7ffde000 00020498 002c1ee0 ntdll!LdrpHandleOldFormatImportDescriptors+0x1f
0012fb14 7c921e25 00020498 002c1ee0 7ffdd000 ntdll!LdrpWalkImportDescriptor+0x19e
0012fc94 7c92108f 0012fd30 7c900000 0012fce0 ntdll!LdrpInitializeProcess+0xe02
0012fd1c 7c90e437 0012fd30 7c900000 00000000 ntdll!_LdrpInitialize+0x183
00000000 00000000 00000000 00000000 00000000 ntdll!KiUserApcDispatcher+0x7

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: ntdll!LdrpCallInitRoutine+14

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: ntdll

IMAGE_NAME: ntdll.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 4802a12c

STACK_COMMAND: dt ntdll!LdrpLastDllInitializer BaseDllName ; dt ntdll!LdrpFailureData ; ~0s ; kb

FAILURE_BUCKET_ID: SOFTWARE_NX_FAULT_INVALID_c0000005_ntdll.dll!LdrpCallInitRoutine

BUCKET_ID: APPLICATION_FAULT_SOFTWARE_NX_FAULT_INVALID_BAD_IP_ntdll!LdrpCallInitRoutine+14

WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/NeroVision_exe/6_99_27_100/4ad8bfab/unknown/0_0_0_0/bbbbbbb4/c0000005/77b23623.htm?Retriage=1

Followup: MachineOwner
---------

0:000> lm
start    end        module name
00400000 004f2000   NeroVision C (private pdb symbols) \\cn-s-w-004\delivery\nero vision\nv7\pdb\nv6.99.27.0\NeroVision.PDB
00520000 0053b000   EditingProxy   (private pdb symbols) \\cn-s-w-004\delivery\nero vision\nv7\pdb\nv6.99.27.0\EditingProxy.pdb
629c0000 629c9000   LPK        (pdb symbols)          c:\mylocalsymbols\lpk.pdb\4B6570DF2CFF45AAB60E416993385EAC1\lpk.pdb
74d90000 74dfb000   USP10      (pdb symbols)          c:\mylocalsymbols\usp10.pdb\0F289BC0C9A94139BC1C31EDEDBF52311\usp10.pdb
76390000 763ad000   IMM32      (pdb symbols)          c:\mylocalsymbols\imm32.pdb\F7A5B5DB13324153B57AAF340C77EA512\imm32.pdb
773d0000 774d3000   comctl32   (pdb symbols)          c:\mylocalsymbols\MicrosoftWindowsCommon-Controls-6.0.2600.5512-comctl32.pdb\505057971C40416FB39FED1D39BED0571\MicrosoftWindowsCommon-Controls-6.0.2600.5512-comctl32.pdb
77c10000 77c68000   msvcrt     (pdb symbols)          c:\mylocalsymbols\msvcrt.pdb\7BCF30D8C91B4F1B85FA4E55896250111\msvcrt.pdb
77dd0000 77e6b000   ADVAPI32   (pdb symbols)          c:\mylocalsymbols\advapi32.pdb\5EFB9BF42CC64024AB64802E467394642\advapi32.pdb
77e70000 77f02000   RPCRT4     (pdb symbols)          c:\mylocalsymbols\rpcrt4.pdb\CCD4FE9B704E48B6B8A12F31E112AA6F2\rpcrt4.pdb
77f10000 77f59000   GDI32      (pdb symbols)          c:\mylocalsymbols\gdi32.pdb\740F60A99F2A417E96C387400994588D2\gdi32.pdb
77f60000 77fd6000   SHLWAPI    (pdb symbols)          c:\mylocalsymbols\shlwapi.pdb\8519E3403447478884CFFE7F1A91BAE02\shlwapi.pdb
77fe0000 77ff1000   Secur32    (pdb symbols)          c:\mylocalsymbols\secur32.pdb\E8D378740B8E4A46B19CAFCD2D6DDF7D2\secur32.pdb
79000000 79046000   mscoree    (pdb symbols)          c:\mylocalsymbols\mscoree.pdb\FD8F3AA213F243BEA120EC4CF5797BC32\mscoree.pdb
7c800000 7c8f6000   kernel32   (pdb symbols)          c:\mylocalsymbols\kernel32.pdb\34560E80F5C54175B208848EF863C5BD2\kernel32.pdb
7c900000 7c9af000   ntdll      (pdb symbols)          c:\mylocalsymbols\ntdll.pdb\1751003260CA42598C0FB326585000ED2\ntdll.pdb
7e410000 7e4a1000   USER32     (pdb symbols)          c:\mylocalsymbols\user32.pdb\D18A41B74E7F458CAAAC1847E2D8BF022\user32.pdb

Unloaded modules:
4ec50000 4edf6000   gdiplus.dll
00000011 4802a122   2.dll
0001abc4 0047ac11   .DLL
Missing image name, possible paged-out or corrupt data.
0054004e 00a900a0   Unknown_Module_0054004e
Missing image name, possible paged-out or corrupt data.
0050004c 00b4007a   Unknown_Module_0050004c
Missing image name, possible paged-out or corrupt data.
0000006c 0000006c   Unknown_Module_0000006c
0:000> !teb
TEB at 7ffdd000
    ExceptionList:        0012f4dc
    StackBase:            00130000
    StackLimit:           00126000
    SubSystemTib:         00000000
    FiberData:            00001e00
    ArbitraryUserPointer: 00000000
    Self:                 7ffdd000
    EnvironmentPointer:   00000000
    ClientId:             00000da0 . 000003dc
    RpcHandle:            00000000
    Tls Storage:          00000000
    PEB Address:          7ffde000
    LastErrorValue:       1411
    LastStatusValue:      c0000034
    Count Owned Locks:    0
    HardErrorMode:        0