请帮助 - 我被要求调试一个小型转储故障转储,其中IEXPORE.EXE似乎是失败的主映像,MSCORWKS被指向故障模块。至少在我使用WinDBG打开崩溃时的样子。我能够加载SOS扩展,但尝试执行类似!clrstack和!threads的操作失败:
0:005> !clrstack -p
OS Thread Id: 0x764 (5)
Unable to walk the managed stack. The current thread is likely not a
managed thread. You can run !threads to get a list of managed threads in
the process
0:005> !threads
Failed to request ThreadStore
我的同情心设置如下(没有线条,为了便于阅读,我添加了换行符)。我的本地缓存是第一个,接下来是产品符号服务器,然后是MS符号服务器:
cache*d:\localSymCache;
srv*\\bn-netapp01\Dev1\Dragon\symbols;
srv*\\bn-dns-builds\S\symbols\Dragon\secondaryE;
srv*\\bn-dnsbuilds\S\symbols\Dragon\secondaryO;
srv*http://msdl.microsoft.com/download/symbols
当我执行analyze -v命令时,我得到以下内容,但我不确定它的含义。
0:005> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
Unable to load image C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\dae02331a443fb52216ca83292cb2f21\mscorlib.ni.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mscorlib.ni.dll
*** WARNING: Unable to verify timestamp for ieui.dll
*** WARNING: Unable to verify timestamp for ScriptSn.20130301183149.dll
*** ERROR: Module load completed but symbols could not be loaded for ScriptSn.20130301183149.dll
*** WARNING: Unable to verify timestamp for mfc100u.dll
FAULTING_IP:
kernel32!RaiseException+53
7c812fd3 5e pop esi
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 7c812fd3 (kernel32!RaiseException+0x00000053)
ExceptionCode: e0434f4d (CLR exception)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 80004005
CONTEXT: 00000000 -- (.cxr 0x0;r)
eax=02500000 ebx=1450efa8 ecx=00000007 edx=7c90e514 esi=1450ef80 edi=1450efd8
eip=7c90e514 esp=01b5e560 ebp=01b5e570 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
ntdll!KiFastSystemCallRet:
7c90e514 c3 ret
DEFAULT_BUCKET_ID: WRONG_SYMBOLS
PROCESS_NAME: iexplore.exe
ERROR_CODE: (NTSTATUS) 0xe0434f4d - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xe0434f4d - <Unable to get error code text>
EXCEPTION_PARAMETER1: 80004005
ADDITIONAL_DEBUG_TEXT: ;!threads returned "Failed to request ThreadStore".
APP: iexplore.exe
ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) x86fre
MANAGED_STACK: !dumpstack -EE
OS Thread Id: 0x764 (5)
TEB information is not available so a stack size of 0xFFFF is assumed
Current frame:
ChildEBP RetAddr Caller,Callee
PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS
BUGCHECK_STR: APPLICATION_FAULT_WRONG_SYMBOLS_CLR_EXCEPTION
LAST_CONTROL_TRANSFER: from 79efcaf4 to 7c812fd3
STACK_TEXT:
01b5fb08 79efcaf4 e0434f4d 00000001 00000001 kernel32!RaiseException+0x53
01b5fb68 7a0bdb35 1d5f5b0c 00000000 00000000 mscorwks!RaiseTheExceptionInternalOnly+0x2a8
01b5fb80 7a0bdba7 1d5f5b0c 00000000 01b5fd08 mscorwks!RaiseTheException+0x4e
01b5fba8 7a0bdbd8 00000000 03a64c70 ac27a4d9 mscorwks!RaiseTheException+0xc0
01b5fbd4 7a0bdbe6 1d5f5b0c 00000000 01b5fd14 mscorwks!RealCOMPlusThrow+0x30
01b5fbe4 7a12e2a3 1d5f5b0c f3d6a570 79fbc368 mscorwks!RealCOMPlusThrow+0xd
01b5fd14 7a130435 00000000 01b5fd4c 01b5fdbc mscorwks!Thread::RaiseCrossContextException+0x41f
01b5fdc8 7a0ef635 00000002 7a0ef59d 01b5fdec mscorwks!Thread::DoADCallBack+0x2a2
01b5fe20 03f327c1 ffffffff 03a64c70 01b5fe50 mscorwks!UM2MDoADCallBack+0x7c
WARNING: Frame IP not in any known module. Following frames may be wrong.
01b5fe48 7e418734 01b2091a 00000202 00000000 0x3f327c1
01b5fe74 7e418816 0809f522 01b2091a 00000202 user32!InternalCallWinProc+0x28
01b5fedc 7e4189cd 00000000 0809f522 01b2091a user32!UserCallWinProcCheckWow+0x150
01b5ff3c 7e418a10 01b5ff64 00000000 01b5ffb4 user32!DispatchMessageWorker+0x306
01b5ff4c 3e25e77b 01b5ff64 0012e490 0012e5b8 user32!DispatchMessageW+0xf
01b5ffb4 7c80b729 001ab758 0012e490 0012e5b8 ieframe!CTabWindow::_TabWindowThreadProc+0x189
01b5ffec 00000000 3e25e544 001a0c70 00000000 kernel32!BaseThreadStart+0x37
STACK_COMMAND: ~5s; .ecxr ; kb
FOLLOWUP_IP:
mscorwks!Thread::DoADCallBack+2a2
7a130435 8b4d0c mov ecx,dword ptr [ebp+0Ch]
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: mscorwks!Thread::DoADCallBack+2a2
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: mscorwks
IMAGE_NAME: mscorwks.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 5266e523
FAILURE_BUCKET_ID: WRONG_SYMBOLS_e0434f4d_mscorwks.dll!Thread::DoADCallBack
BUCKET_ID: APPLICATION_FAULT_WRONG_SYMBOLS_CLR_EXCEPTION_mscorwks!Thread::DoADCallBack+2a2
WATSON_IBUCKET: 179080875
WATSON_IBUCKETTABLE: 17
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:wrong_symbols_e0434f4d_mscorwks.dll!thread::doadcallback
FAILURE_ID_HASH: {6d7d59d3-fc43-baf6-fb00-7f304070aba8}
Followup: MachineOwner
---------