约有 28 项符合查询结果, 以下是第 3 - 3项。
费时 < 1 秒。
在win内核中dbgprint函数在真正向调试器输出内容之前,是否需要等待时钟中断的到来才能触发?当用dbgprint输出线程调度信息,输出的信息是否真实?dbgprint对系统运行有什么消极影响么?
Posted in Windows内核调试
by
pch
on 2008-09-18
非常感谢!
我做的实验是想提取windows运行过程中所有线程的所有状态变换,以及一些中断信息。对于内核调试懂得不多,可否给我推荐些学习的材料。
Posted in Windows内核调试
by
pch
on 2008-08-29
首先感谢你的回复。
可能是irql级别的问题,但是不知道怎么修改,下面是我改动的地方。我做的实验是想提取windows运行过程中所有线程的状态变换,除了用DbgPrint来输出信息,有没有其他的办法。
VOID
KiQuantumEnd (
VOID
)
/*++
Routine Description:
This function is called when a quantum end event occurs on the current
processor. Its function is to determine whether the thread priority should
be ...
Posted in Windows内核调试
by
pch
on 2008-08-29
我想在KiQuantumEnd 函数中加入DbgPrint获取一些系统运行信息,线程id和状态,但是DbgPrint and DbgPrintEx can be called at IRQL<=DIRQL,DIRQL = 3~26,而KiQuantumEnd is called at DISPATCH level and returns at DISPATCH level. 是不是要改变Irql级别啊,如何改啊?请推荐些资料参考。
Posted in Windows内核调试
by
pch
on 2008-08-27
我想在KiQuantumEnd 函数中加入DbgPrint获取一些系统运行信息,但是DbgPrint and DbgPrintEx can be called at IRQL<=DIRQL,DIRQL = 3~26,而KiQuantumEnd is called at DISPATCH level and returns at DISPATCH level.
Posted in Windows内核调试
by
pch
on 2008-08-27
首先谢谢您的回复;
我是在KiQuantumEnd()中加入了一条DbgPrint,用来输出在KiQuantumEnd()中进行修改的线程的状态。难道是这地方IRQL过高了?
Posted in Windows内核调试
by
pch
on 2008-08-26
*** Fatal System Error: 0x0000000a
(0x00000002,0x0000001B,0x00000000,0x8087DCCC)
Break instruction exception - code 80000003 (first chance)
A fatal system error has occurred.
Debugger entered on first try; Bugcheck callbacks have not been invoked.
A fatal system error has occurred.
Connected to Windows Server ...
Posted in Windows内核调试
by
pch
on 2008-08-26