Advanced Debugging
About AdvDbg Consult Train Services Products Tools Community Contact  
欢迎光临 高端调试 登录 | 注册 | FAQ
 
  ACPI调试
Linux内核调试
Windows内核调试
 
  调试战役
调试原理
新工具观察
 
  Linux
Windows Vista
Windows
 
  Linux驱动
WDF
WDM
 
  PCI Express
PCI/PCI-X
USB
无线通信协议
 
  64位CPU
ARM
IA-32
  CPU Info Center
 
  ACPI标准
系统认证
Desktop
服务器
 
  Embedded Linux
嵌入式开发工具
VxWorks
WinCE
嵌入式Windows
 
  格蠹调试套件(GDK)
  格蠹学院
  小朱书店
  老雷的微博
  《软件调试》
  《格蠹汇编》
  《软件调试(第二版)》
沪ICP备11027180号-1

Windows内核调试

帖子发起人: Hanjey   发起时间: 2015-09-22 17:20 下午   回复: 0

Print Search
帖子排序:    
   2015-09-22, 17:20 下午
Hanjey 离线,最后访问时间: 2015/9/16 11:09:14 Hanjey

无等级
注册: 2015-09-16
发 贴: 1
IDT重构问题求解
Reply Quote
各位老师,小弟想重构下IDT并使其中的内核函数地址都指向自己重载的内核。但是构建好后,在未作任何设置的情况下(即并没有修改IDTR),加载驱动成功后大概-10-20秒,就出现问题,具体dbg调试代码如下

new_itemAddress[f4] = 0x857d53f3
 new_itemAddress[f5] = 0x857d53fa
 new_itemAddress[f6] = 0x857d5401
 new_itemAddress[f7] = 0x857d5408
 new_itemAddress[f8] = 0x857d540f
 new_itemAddress[f9] = 0x857d5416
 new_itemAddress[fa] = 0x857d541d
 new_itemAddress[fb] = 0x857d5424
 new_itemAddress[fc] = 0x857d542b
 new_itemAddress[fd] = 0x857d5432
 new_itemAddress[fe] = 0x857d5439
 new_itemAddress[ff] = 0x857d5440
Assertion: *** DPC watchdog timeout
    This is NOT a break in update time
    This is most likely a BUG in an ISR
    Perform a stack trace to find the culprit
    The period will be doubled on continuation
    Use gh to continue!!

nt!KeAccumulateTicks+0x3c5:
83c4e67f cd2c            int     2Ch
kd> g
Continuing an assertion failure can result in the debuggee
being terminated (bugchecking for kernel debuggees).
If you want to ignore this assertion, use 'ahi'.
If you want to force continuation, use 'gh' or 'gn'.
kd> gn
Assertion: *** DPC watchdog timeout
    This is NOT a break in update time
    This is most likely a BUG in an ISR
    Perform a stack trace to find the culprit
    The period will be doubled on continuation
    Use gh to continue!!

nt!KeAccumulateTicks+0x3c5:
83c4e67f cd2c            int     2Ch
kd> gh
Assertion: *** DPC watchdog timeout
    This is NOT a break in update time
    This is most likely a BUG in an ISR
    Perform a stack trace to find the culprit
    The period will be doubled on continuation
    Use gh to continue!!

nt!KeAccumulateTicks+0x3c5:
83c4e67f cd2c            int     2Ch





上边是我打印的IDT中的函数地址,这里显示了一部分


IP 地址: 已记录   报告
高端调试 » 软件调试 » Windows内核调试 » IDT重构问题求解

 
Legal Notice Privacy Statement Corporate Governance Corporate Governance
(C)2004-2020 ADVDBG.ORG All Rights Reserved.