不同版面Windbg分析结果不同，该信任哪一个分析结果
WinDbg
不同版面Windbg分析结果不同，该信任哪一个分析结果
heather
2010-09-20, 17:22 下午
使用相同的pdb文件，不同的Windbg有不同结果
Windbg 6.9.0003.113
0:004> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************
FAULTING_IP:
+0
00000000 ?? ???
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000
ExceptionCode: 80000007 (Wake debugger)
ExceptionFlags: 00000000
NumberParameters: 0
BUGCHECK_STR: 80000007
DEFAULT_BUCKET_ID: APPLICATION_HANG
PROCESS_NAME: schedservice.exe
ERROR_CODE: (NTSTATUS) 0x80000007 - {Kernel Debugger Awakened} the system debugger was awakened by an interrupt.
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
LOADERLOCK_BLOCKED_API: GetModuleFileNameW:LdrLockLoaderLock:
DERIVED_WAIT_CHAIN:
Dl Eid Cid WaitType
-- --- ------- --------------------------
4 1d9c.1584 Critical Section
WAIT_CHAIN_COMMAND: ~4s;k;;
BLOCKING_THREAD: 00001584
PRIMARY_PROBLEM_CLASS: APPLICATION_HANG
LAST_CONTROL_TRANSFER: from 7c827d29 to 7c82860c
FAULTING_THREAD: 00000004
STACK_TEXT:
00cfc514 7c827d29 7c83d266 000002f4 00000000 ntdll!KiFastSystemCallRet
00cfc518 7c83d266 000002f4 00000000 00000000 ntdll!ZwWaitForSingleObject+0xc
00cfc554 7c83d2b1 000002f4 00000004 00000001 ntdll!RtlpWaitOnCriticalSection+0x1a3
00cfc574 7c82d263 7c8897a0 00400000 7c8897ec ntdll!RtlEnterCriticalSection+0xa8
00cfc5a8 77e63cd8 00000001 00000000 00cfc5e4 ntdll!LdrLockLoaderLock+0xe4
00cfc608 5bb378d0 00400000 00cfce68 00000200 kernel32!GetModuleFileNameW+0x77
00cfc630 4ca650fb 00400000 00cfce68 00000200 sqlunirl!GetModuleFileName+0x21
00cfd2d8 4ca64b76 4cab50a0 00000105 007a1ecc sqlsrv32!SetRegConnectionOptions+0x35f
00cfd510 4ca649dc 00cfd524 4ca649c8 007a1ecc sqlsrv32!DvrInit+0x1c2
00cfd518 4ca649c8 007a1ecc 00cfd560 488975e3 sqlsrv32!SQLAllocEnv+0xa
00cfd524 488975e3 00000001 00000000 007a1ecc sqlsrv32!SQLAllocHandle+0x50
00cfd560 488977b3 00000000 007a3590 0000fffe odbc32!TraceSQLBrowseConnectW+0x35a
00cfd580 48892b06 007a3590 00010018 007a59a0 odbc32!SQLInternalDriverConnectW+0x1a
00cfdcdc 488c1988 007a3590 00010018 007a35f8 odbc32!SQLDriverConnectW+0xa8e
00cfdd14 7c1bf48f 007a5588 00010018 018c8828 odbc32!SQLDriverConnect+0x125
00cfdf54 7c1bfe43 0000000c 00000002 01a056d8 mfc71!CDatabase::Connect+0x69 [f:\vs70builds\3077\vc\mfcatl\ship\atlmfc\src\mfc\dbcore.cpp @ 735]
00cfdf84 62f018cf 01c6d778 0000000c 01a056d8 mfc71!CDatabase::OpenEx+0x48 [f:\vs70builds\3077\vc\mfcatl\ship\atlmfc\src\mfc\dbcore.cpp @ 279]
00cfdfbc 62f058bd 01a056d8 01f249c8 00000005 CSP_InternalSites!CCompanyIntranetSites::ConnectToDatabase+0xdf [c:\_sandboxes\webfilter_5_5_3_full\webfilter\common\companyintranetsites.cpp @ 99]
00cfe0a4 62f06720 0172900c 0168da30 0172900c CSP_InternalSites!CCompanyIntranetSites::Load+0x3d [c:\_sandboxes\webfilter_5_5_3_full\webfilter\common\companyintranetsites.cpp @ 209]
00cfe0d0 6213b04d 0172900c 0032bddc 0172203e CSP_InternalSites!csp_Startup+0x100 [c:\_sandboxes\webfilter_5_5_3_full\portalauthority\contentserviceproviders\csp_internalsites\csp_internalsites.cpp @ 312]
00cfe0f4 62139f3c 0172900c 0032bddc 0172203e ServiceHandler!CshCSPClient::cat_Startup+0x1d [d:\sandbox\swf55_201_ei486\portalauthority\servicehandler\shcspclient.cpp @ 220]
00cfe34c 6213a18e 0172203e 0032bd38 01f414d0 ServiceHandler!CServiceHandlerApp::LoadContentProvider+0x34c [d:\sandbox\swf55_201_ei486\portalauthority\servicehandler\servicehandler.cpp @ 2089]
00cfe3a0 6213a974 0032bd38 00cfe870 00cfe884 ServiceHandler!CServiceHandlerApp::ReadProviderConfiguration+0xbe [d:\sandbox\swf55_201_ei486\portalauthority\servicehandler\servicehandler.cpp @ 1936]
00cfe458 62e32c07 00cfe4f8 00000000 00000000 ServiceHandler!CServiceHandlerApp::Startup+0x5b4 [d:\sandbox\swf55_201_ei486\portalauthority\servicehandler\servicehandler.cpp @ 349]
00cfe884 629e8585 016a0ca0 00000003 00000000 Genliveupdate!Trigger+0x1a7 [d:\sandbox\swf55_201_ei486\webfilter\liveupdate\genliveupdate\genliveupdate.cpp @ 158]
00cfff5c 004039ba 00000000 0000008c 00000000 SCEventHandler!SCE_TriggerEvent+0x1a5 [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\eventhandler\eventhandler.cpp @ 777]
00cfff84 7c349565 0012fe84 00000000 00000000 schedservice!CScSchedService::TriggerEventThreadProc+0x8a [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\scschedservice.cpp @ 332]
00cfffb8 77e6482f 003251e8 00000000 00000000 msvcr71!_threadstartex+0x6f [f:\vs70builds\3052\vc\crtbld\crt\src\threadex.c @ 241]
00cfffec 00000000 7c3494f6 003251e8 00000000 kernel32!BaseThreadStart+0x34
FOLLOWUP_IP:
sqlunirl!GetModuleFileName+21
5bb378d0 eb79 jmp sqlunirl!GetModuleFileName+0x9c (5bb3794b)
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: sqlunirl!GetModuleFileName+21
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: sqlunirl
IMAGE_NAME: sqlunirl.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 45d70ae4
STACK_COMMAND: ~4s ; kb
BUCKET_ID: 80000007_sqlunirl!GetModuleFileName+21
FAILURE_BUCKET_ID: APPLICATION_HANG_80000007_sqlunirl.dll!GetModuleFileName
Followup: MachineOwner
---------
Windbg 6.11.0001.404
0:000> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************
FAULTING_IP:
+27b952f01e1df78
00000000 ?? ???
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000
ExceptionCode: 80000007 (Wake debugger)
ExceptionFlags: 00000000
NumberParameters: 0
BUGCHECK_STR: 80000007
PROCESS_NAME: schedservice.exe
ERROR_CODE: (NTSTATUS) 0x80000007 - {Kernel Debugger Awakened} the system debugger was awakened by an interrupt.
EXCEPTION_CODE: (HRESULT) 0x80000007 (2147483655) - Operation aborted
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
DERIVED_WAIT_CHAIN:
Dl Eid Cid WaitType
-- --- ------- --------------------------
0 1d9c.ca0 File IO
WAIT_CHAIN_COMMAND: ~0s;k;;
BLOCKING_THREAD: 00000ca0
DEFAULT_BUCKET_ID: APPLICATION_HANG_BlockedOn_FileIO
PRIMARY_PROBLEM_CLASS: APPLICATION_HANG_BlockedOn_FileIO
LAST_CONTROL_TRANSFER: from 7c827789 to 7c82860c
FAULTING_THREAD: 00000000
STACK_TEXT:
0012fb04 7c827789 77e418b6 000000a8 00000000 ntdll!KiFastSystemCallRet
0012fb08 77e418b6 000000a8 00000000 00000000 ntdll!ZwReadFile+0xc
0012fb70 7d1f5edb 000000a8 0012fc34 0000021a kernel32!ReadFile+0x16c
0012fb9c 7d1f5f82 000000a8 0012fc34 0000021a advapi32!ScGetPipeInput+0x2a
0012fc10 7d247667 000000a8 0012fc34 0000021a advapi32!ScDispatcherLoop+0x51
0012fe54 00401722 0012fe68 0012fe84 0012fe84 advapi32!StartServiceCtrlDispatcherA+0x93
0012fe78 0040207a 00000001 004089a4 66727553 schedservice!CNTService::StartServiceA+0x42 [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\ntservice.cpp @ 329]
0012ff60 00405f27 00000001 003249d8 00322a50 schedservice!main+0x5a [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\schdsrvcapp.cpp @ 39]
0012ffc0 77e6f23b 00000000 00000000 7ffda000 schedservice!mainCRTStartup+0x143 [f:\vs70builds\3077\vc\crtbld\crt\src\crtexe.c @ 398]
0012fff0 00000000 00405de4 00000000 78746341 kernel32!BaseProcessStart+0x23
FOLLOWUP_IP:
schedservice!CNTService::StartServiceA+42 [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\ntservice.cpp @ 329]
00401722 8945ec mov dword ptr [ebp-14h],eax
FAULTING_SOURCE_CODE:
No source found for 'c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\ntservice.cpp'
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: schedservice!CNTService::StartServiceA+42
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: schedservice
IMAGE_NAME: schedservice.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 47c875e7
STACK_COMMAND: ~0s ; kb
BUCKET_ID: 80000007_schedservice!CNTService::StartServiceA+42
FAILURE_BUCKET_ID: APPLICATION_HANG_BlockedOn_FileIO_80000007_schedservice.exe!CNTService::StartServiceA
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/schedservice_exe/5_5_3_201/47c875e7/unknown/0_0_0_0/bbbbbbb4/80000007/00000000.htm?Retriage=1
Followup: MachineOwner
---------
0:004> ~*kb 300
# 0 Id: 1d9c.ca0 Suspend: 1 Teb: 7ffdf000 Unfrozen
ChildEBP RetAddr Args to Child
0012fb04 7c827789 77e418b6 000000a8 00000000 ntdll!KiFastSystemCallRet
0012fb08 77e418b6 000000a8 00000000 00000000 ntdll!ZwReadFile+0xc
0012fb70 7d1f5edb 000000a8 0012fc34 0000021a kernel32!ReadFile+0x16c
0012fb9c 7d1f5f82 000000a8 0012fc34 0000021a advapi32!ScGetPipeInput+0x2a
0012fc10 7d247667 000000a8 0012fc34 0000021a advapi32!ScDispatcherLoop+0x51
0012fe54 00401722 0012fe68 0012fe84 0012fe84 advapi32!StartServiceCtrlDispatcherA+0x93
0012fe78 0040207a 00000001 004089a4 66727553 schedservice!CNTService::StartServiceA+0x42 [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\ntservice.cpp @ 329]
0012ff60 00405f27 00000001 003249d8 00322a50 schedservice!main+0x5a [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\schdsrvcapp.cpp @ 39]
0012ffc0 77e6f23b 00000000 00000000 7ffda000 schedservice!mainCRTStartup+0x143 [f:\vs70builds\3077\vc\crtbld\crt\src\crtexe.c @ 398]
0012fff0 00000000 00405de4 00000000 78746341 kernel32!BaseProcessStart+0x23
1 Id: 1d9c.1d1c Suspend: 1 Teb: 7ffdd000 Unfrozen
ChildEBP RetAddr Args to Child
009ffe98 7c827d29 77e61d1e 00000090 00000000 ntdll!KiFastSystemCallRet
009ffe9c 77e61d1e 00000090 00000000 00000000 ntdll!ZwWaitForSingleObject+0xc
009fff0c 77e61c8d 00000090 ffffffff 00000000 kernel32!WaitForSingleObjectEx+0xac
009fff20 628f28c9 00000090 ffffffff 00000000 kernel32!WaitForSingleObject+0x12
009fffb8 77e6482f 62909fd8 00000000 00000000 SCLogClient!LogLevelAdjusterThread+0x99 [c:\_sandboxes\webfilter_5_5_3_full\webfilter\logging\sclogclient\logger.cpp @ 573]
009fffec 00000000 628f2830 62909fd8 00000000 kernel32!BaseThreadStart+0x34
2 Id: 1d9c.1dd0 Suspend: 1 Teb: 7ffdc000 Unfrozen
ChildEBP RetAddr Args to Child
00affe98 7c827d19 77e6202c 00000002 00affee8 ntdll!KiFastSystemCallRet
00affe9c 77e6202c 00000002 00affee8 00000001 ntdll!NtWaitForMultipleObjects+0xc
00afff44 77e62fbe 00000002 00afff84 00000000 kernel32!WaitForMultipleObjectsEx+0x11a
00afff60 00403685 00000002 00afff84 00000000 kernel32!WaitForMultipleObjects+0x18
00afff98 004017db 0012fe84 00afffb8 7d1f5e91 schedservice!CScSchedService::Run+0xf5 [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\scschedservice.cpp @ 197]
00afffa4 7d1f5e91 00000001 0014db04 00000000 schedservice!CNTService::ServiceMain+0x9b [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\ntservice.cpp @ 373]
00afffb8 77e6482f 0014daf8 00000000 00000000 advapi32!ScSvcctrlThreadA+0x21
00afffec 00000000 7d1f5e70 0014daf8 00000000 kernel32!BaseThreadStart+0x34
3 Id: 1d9c.df8 Suspend: 1 Teb: 7ffdb000 Unfrozen
ChildEBP RetAddr Args to Child
00bffecc 7c827d29 77e61d1e 0000008c 00000000 ntdll!KiFastSystemCallRet
00bffed0 77e61d1e 0000008c 00000000 00bfff14 ntdll!ZwWaitForSingleObject+0xc
00bfff40 77e61c8d 0000008c 0000ea60 00000000 kernel32!WaitForSingleObjectEx+0xac
00bfff54 00403a59 0000008c 0000ea60 4c6d3958 kernel32!WaitForSingleObject+0x12
00bfff84 7c349565 0012fe84 00000000 00000000 schedservice!CScSchedService::ClockThreadProc+0x79 [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\scschedservice.cpp @ 363]
00bfffb8 77e6482f 00325150 00000000 00000000 msvcr71!_threadstartex+0x6f [f:\vs70builds\3052\vc\crtbld\crt\src\threadex.c @ 241]
00bfffec 00000000 7c3494f6 00325150 00000000 kernel32!BaseThreadStart+0x34
4 Id: 1d9c.1584 Suspend: 1 Teb: 7ffd9000 Unfrozen
ChildEBP RetAddr Args to Child
00cfc514 7c827d29 7c83d266 000002f4 00000000 ntdll!KiFastSystemCallRet
00cfc518 7c83d266 000002f4 00000000 00000000 ntdll!ZwWaitForSingleObject+0xc
00cfc554 7c83d2b1 000002f4 00000004 00000001 ntdll!RtlpWaitOnCriticalSection+0x1a3
00cfc574 7c82d263 7c8897a0 00400000 7c8897ec ntdll!RtlEnterCriticalSection+0xa8
00cfc5a8 77e63cd8 00000001 00000000 00cfc5e4 ntdll!LdrLockLoaderLock+0xe4
00cfc608 5bb378d0 00400000 00cfce68 00000200 kernel32!GetModuleFileNameW+0x77
00cfc630 4ca650fb 00400000 00cfce68 00000200 sqlunirl!GetModuleFileName+0x21
00cfd2d8 4ca64b76 4cab50a0 00000105 007a1ecc sqlsrv32!SetRegConnectionOptions+0x35f
00cfd510 4ca649dc 00cfd524 4ca649c8 007a1ecc sqlsrv32!DvrInit+0x1c2
00cfd518 4ca649c8 007a1ecc 00cfd560 488975e3 sqlsrv32!SQLAllocEnv+0xa
00cfd524 488975e3 00000001 00000000 007a1ecc sqlsrv32!SQLAllocHandle+0x50
00cfd560 488977b3 00000000 007a3590 0000fffe odbc32!TraceSQLBrowseConnectW+0x35a
00cfd580 48892b06 007a3590 00010018 007a59a0 odbc32!SQLInternalDriverConnectW+0x1a
00cfdcdc 488c1988 007a3590 00010018 007a35f8 odbc32!SQLDriverConnectW+0xa8e
00cfdd14 7c1bf48f 007a5588 00010018 018c8828 odbc32!SQLDriverConnect+0x125
00cfdf54 7c1bfe43 0000000c 00000002 01a056d8 mfc71!CDatabase::Connect+0x69 [f:\vs70builds\3077\vc\mfcatl\ship\atlmfc\src\mfc\dbcore.cpp @ 735]
00cfdf84 62f018cf 01c6d778 0000000c 01a056d8 mfc71!CDatabase::OpenEx+0x48 [f:\vs70builds\3077\vc\mfcatl\ship\atlmfc\src\mfc\dbcore.cpp @ 279]
00cfdfbc 62f058bd 01a056d8 01f249c8 00000005 CSP_InternalSites!CCompanyIntranetSites::ConnectToDatabase+0xdf [c:\_sandboxes\webfilter_5_5_3_full\webfilter\common\companyintranetsites.cpp @ 99]
00cfe0a4 62f06720 0172900c 0168da30 0172900c CSP_InternalSites!CCompanyIntranetSites::Load+0x3d [c:\_sandboxes\webfilter_5_5_3_full\webfilter\common\companyintranetsites.cpp @ 209]
00cfe0d0 6213b04d 0172900c 0032bddc 0172203e CSP_InternalSites!csp_Startup+0x100 [c:\_sandboxes\webfilter_5_5_3_full\portalauthority\contentserviceproviders\csp_internalsites\csp_internalsites.cpp @ 312]
00cfe0f4 62139f3c 0172900c 0032bddc 0172203e ServiceHandler!CshCSPClient::cat_Startup+0x1d [d:\sandbox\swf55_201_ei486\portalauthority\servicehandler\shcspclient.cpp @ 220]
00cfe34c 6213a18e 0172203e 0032bd38 01f414d0 ServiceHandler!CServiceHandlerApp::LoadContentProvider+0x34c [d:\sandbox\swf55_201_ei486\portalauthority\servicehandler\servicehandler.cpp @ 2089]
00cfe3a0 6213a974 0032bd38 00cfe870 00cfe884 ServiceHandler!CServiceHandlerApp::ReadProviderConfiguration+0xbe [d:\sandbox\swf55_201_ei486\portalauthority\servicehandler\servicehandler.cpp @ 1936]
00cfe458 62e32c07 00cfe4f8 00000000 00000000 ServiceHandler!CServiceHandlerApp::Startup+0x5b4 [d:\sandbox\swf55_201_ei486\portalauthority\servicehandler\servicehandler.cpp @ 349]
00cfe884 629e8585 016a0ca0 00000003 00000000 Genliveupdate!Trigger+0x1a7 [d:\sandbox\swf55_201_ei486\webfilter\liveupdate\genliveupdate\genliveupdate.cpp @ 158]
00cfff5c 004039ba 00000000 0000008c 00000000 SCEventHandler!SCE_TriggerEvent+0x1a5 [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\eventhandler\eventhandler.cpp @ 777]
00cfff84 7c349565 0012fe84 00000000 00000000 schedservice!CScSchedService::TriggerEventThreadProc+0x8a [c:\_sandboxes\webfilter_5_5_3_full\webfilter\scheduler\schedservice\scschedservice.cpp @ 332]
00cfffb8 77e6482f 003251e8 00000000 00000000 msvcr71!_threadstartex+0x6f [f:\vs70builds\3052\vc\crtbld\crt\src\threadex.c @ 241]
00cfffec 00000000 7c3494f6 003251e8 00000000 kernel32!BaseThreadStart+0x34
5 Id: 1d9c.2ec Suspend: 1 Teb: 7ffde000 Unfrozen
ChildEBP RetAddr Args to Child
0396fee4 7c827d29 77e61d1e 000000f8 00000000 ntdll!KiFastSystemCallRet
0396fee8 77e61d1e 000000f8 00000000 0396ff2c ntdll!ZwWaitForSingleObject+0xc
0396ff58 77e61c8d 000000f8 000001f4 00000000 kernel32!WaitForSingleObjectEx+0xac
0396ff6c 6213254b 000000f8 000001f4 00000000 kernel32!WaitForSingleObject+0x12
0396ff84 7c349565 0032bdc0 00000000 00000000 ServiceHandler!CCSPConfig::EventThread+0x2b [d:\sandbox\swf55_201_ei486\portalauthority\common\cspconfig.cpp @ 933]
0396ffb8 77e6482f 018c8ac8 00000000 00000000 msvcr71!_threadstartex+0x6f [f:\vs70builds\3052\vc\crtbld\crt\src\threadex.c @ 241]
0396ffec 00000000 7c3494f6 018c8ac8 00000000 kernel32!BaseThreadStart+0x34
6 Id: 1d9c.1eac Suspend: 1 Teb: 7ffd8000 Unfrozen
ChildEBP RetAddr Args to Child
03a6fbc8 7c827d29 7c83d266 000002f4 00000000 ntdll!KiFastSystemCallRet
03a6fbcc 7c83d266 000002f4 00000000 00000000 ntdll!ZwWaitForSingleObject+0xc
03a6fc08 7c83d2b1 000002f4 00000004 00000000 ntdll!RtlpWaitOnCriticalSection+0x1a3
03a6fc28 7c82ee5b 7c8897a0 00000000 7ffda000 ntdll!RtlEnterCriticalSection+0xa8
03a6fcb8 7c82ecbf 03a6fd28 03a6fd28 00000000 ntdll!LdrpInitializeThread+0x68
03a6fd14 7c8284e5 03a6fd28 7c800000 00000000 ntdll!_LdrpInitialize+0x16f
00000000 00000000 00000000 00000000 00000000 ntdll!KiUserApcDispatcher+0x25
7 Id: 1d9c.834 Suspend: 1 Teb: 7ffd7000 Unfrozen
ChildEBP RetAddr Args to Child
03b6fe8c 7c827d19 77e6202c 00000002 03b6fedc ntdll!KiFastSystemCallRet
03b6fe90 77e6202c 00000002 03b6fedc 00000001 ntdll!NtWaitForMultipleObjects+0xc
03b6ff38 77e62fbe 00000002 016812c0 00000000 kernel32!WaitForMultipleObjectsEx+0x11a
03b6ff54 62ee89c9 00000002 016812c0 00000000 kernel32!WaitForMultipleObjects+0x18
03b6ff84 7c349565 7c220078 00000000 00000000 CSP_ManualListv2!EventThread+0x49 [c:\_sandboxes\webfilter_5_5_3_full\portalauthority\contentserviceproviders\csp_manuallistv2\cspreload.cpp @ 45]
03b6ffb8 77e6482f 018c89b0 00000000 00000000 msvcr71!_threadstartex+0x6f [f:\vs70builds\3052\vc\crtbld\crt\src\threadex.c @ 241]
03b6ffec 00000000 7c3494f6 018c89b0 00000000 kernel32!BaseThreadStart+0x34
Re: 不同版面Windbg分析结果不同，该信任哪一个分析结果
格蠹老雷
2010-09-20, 19:42 下午
上面一个（6.9）做的比较好，准确的找到了堵塞的线程，即4号线程
Re: 不同版面Windbg分析结果不同，该信任哪一个分析结果
heather
2010-09-21, 11:18 上午
谢谢,我也觉得6.9更准确
通过阅读有关帖子,觉得我这个hang dump也是一个死锁, 不知道是否正确.
分析
0:004> dt _RTL_CRITICAL_SECTION 0x7c8897a0
schedservice!_RTL_CRITICAL_SECTION
+0x000 DebugInfo : 0x7c8897c0 _RTL_CRITICAL_SECTION_DEBUG
+0x004 LockCount : -103
+0x008 RecursionCount : 0
+0x00c OwningThread : (null)
+0x010 LockSemaphore : 0x000002f4
+0x014 SpinCount : 0
0:004> .formats -0n103
Evaluate expression:
Hex: ffffff99
Decimal: -103
Octal: 37777777631
Binary: 11111111 11111111 11111111 10011001
Chars: ....
Time: ***** Invalid
Float: low -1.#QNAN high -1.#QNAN
Double: -1.#QNAN
Binary: 11111111 11111111 11111111 10011001
最低位为1的含义是这个关键区对象此时（观察时——也就是DUMP时）没有锁定。
次低位的0含义是已经唤醒了等待这个关键区的一个线程。
根据以上信息,是不是可以做出以下判断：
4号线程（1d9c.1584）在等待一个意外退出的线程已锁定的临界区.