我有一个已停止正常工作的.NET 2.0.50727.6421进程的32位内存转储。它的一些工作是从System.Threading.Timer驱动的。计时器应该触发一些处理。
我在想可能会停止计时器，但我无法弄清楚如何从内存转储中看到这个。
如何从内存转储中了解.NET 2.0 System.Threading.Timer的状态？
我已经转储了计时器对象。在里面，有一个TimerBase对象：
0:000> !do 0204f72c
Name: System.Threading.Timer
MethodTable: 74037344
EEClass: 73e04230
Size: 16(0x10) bytes
(C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll)
Fields:
MT Field Offset Type VT Attr Value Name
74050924 400018a 4 System.Object 0 instance 00000000 __identity
740373cc 4000687 8 ...reading.TimerBase 0 instance 0204f73c timerBase
我也抛弃了TimerBase对象。里面有一个手柄：
0:000> !do 0204f73c
Name: System.Threading.TimerBase
MethodTable: 740373cc
EEClass: 73e699dc
Size: 24(0x18) bytes
(C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll)
Fields:
MT Field Offset Type VT Attr Value Name
740535d0 4000682 4 System.IntPtr 1 instance 52b0508 timerHandle
740535d0 4000683 8 System.IntPtr 1 instance 146f798 delegateInfo
74052f54 4000684 c System.Int32 1 instance 0 timerDeleted
74052f54 4000685 10 System.Int32 1 instance 0 m_lock
我不确定如何检查timerHandle。我可以看看原始记忆，但这并没有告诉我多少：
0:000> dd 52b0508
052b0508 01465ae8 014b2fe0 008632fd 74a498c9
052b0518 0146f798 00001770 00000000 00000003
052b0528 00000001 ffffffff ffffffff 00000000
052b0538 00000000 00000000 00000000 00000000
052b0548 3980d87d 8a002250 00440050 00430049
052b0558 0072006f 004c0065 00430049 006e006f
052b0568 00690066 002e0067 006d0058 0053006c
052b0578 00720065 00610069 0069006c 0065007a
我不确定句柄指向的是什么。我试着将它作为_KTIMER对象转储，但我不知道这是否是正确的对象，如果是，它是什么样的东西：
0:000> dt -r _KTIMER 52b0508
ntdll!_KTIMER
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : 0xe8 ''
+0x001 TimerControlFlags : 0x5a 'Z'
+0x001 Absolute : 0y0
+0x001 Wake : 0y1
+0x001 EncodedTolerableDelay : 0y010110 (0x16)
+0x001 Abandoned : 0x5a 'Z'
+0x001 Signalling : 0x5a 'Z'
+0x002 ThreadControlFlags : 0x46 'F'
+0x002 CycleProfiling : 0y0
+0x002 CounterProfiling : 0y1
+0x002 GroupScheduling : 0y1
+0x002 AffinitySet : 0y0
+0x002 Reserved : 0y0100
+0x002 Hand : 0x46 'F'
+0x002 Size : 0x46 'F'
+0x003 TimerMiscFlags : 0x1 ''
+0x003 Index : 0y1
+0x003 Processor : 0y00000 (0)
+0x003 Inserted : 0y0
+0x003 Expired : 0y0
+0x003 DebugActive : 0x1 ''
+0x003 DpcActive : 0x1 ''
+0x000 Lock : 0n21388008
+0x000 LockNV : 0n21388008
+0x004 SignalState : 0n21704672
+0x008 WaitListHead : _LIST_ENTRY [ 0x8632fd - 0x74a498c9 ]
+0x000 Flink : 0x008632fd _LIST_ENTRY
+0x004 Blink : 0x74a498c9 _LIST_ENTRY [ 0x6aec8b55 - 0xc75ff01 ]
+0x010 DueTime : _ULARGE_INTEGER 0x00001770`0146f798
+0x000 LowPart : 0x146f798
+0x004 HighPart : 0x1770
+0x000 u : <unnamed-tag>
+0x000 LowPart : 0x146f798
+0x004 HighPart : 0x1770
+0x000 QuadPart : 0x00001770`0146f798
+0x018 TimerListEntry : _LIST_ENTRY [ 0x0 - 0x3 ]
+0x000 Flink : (null)
+0x004 Blink : 0x00000003 _LIST_ENTRY
+0x000 Flink : ????
+0x004 Blink : ????
+0x020 Dpc : 0x00000001 _KDPC
+0x000 Type : ??
+0x001 Importance : ??
+0x002 Number : ??
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : ????
+0x004 Blink : ????
+0x00c DeferredRoutine : ????
+0x010 DeferredContext : ????
+0x014 SystemArgument1 : ????
+0x018 SystemArgument2 : ????
+0x01c DpcData : ????
+0x024 Period : 0xffffffff
倾倒手柄会给我一个错误：
0:000> !handle 52b0508 f
ERROR: !handle: extension exception 0x80004002.
"Unable to read handle information"
我可以看到有9个托管主题：
0:000> !threads
ThreadCount: 148
UnstartedThread: 0
BackgroundThread: 8
PendingThread: 0
DeadThread: 139
Hosted Runtime: no
PreEmptive GC Alloc Lock
ID OSID ThreadOBJ State GC Context Domain Count APT Exception
0 1 2b5c 01448d50 a020 Enabled 00000000:00000000 01444930 0 MTA
2 2 988 01456d40 b220 Enabled 00000000:00000000 01444930 0 MTA (Finalizer)
3 4 1ae0 014a1f88 180b220 Enabled 14344f30:143467a0 01444930 0 MTA (Threadpool Worker)
4 5 315c 014b6278 80a220 Enabled 00000000:00000000 01444930 0 MTA (Threadpool Completion Port)
7 6 2034 05276be0 180b220 Enabled 00000000:00000000 01444930 0 MTA (Threadpool Worker)
9 7 1b74 052c2618 200b220 Enabled 1414f654:14151330 01444930 1 MTA
[snip]
16 31 19bc 08195e00 180b220 Enabled 1436cb64:1436e7a0 01444930 0 MTA (Threadpool Worker)
17 28 2208 08196da0 180b220 Enabled 00000000:00000000 01444930 0 MTA (Threadpool Worker)
18 21 3290 08195248 880b220 Enabled 00000000:00000000 01444930 0 MTA (Threadpool Completion Port)
[snip]
线程0是此Windows服务的主线程。线程2是GC终结器线程。
主题4：
0:004> !dumpstack
OS Thread Id: 0x315c (4)
Current frame: ntdll!NtDelayExecution+0xc
ChildEBP RetAddr Caller,Callee
04defb68 77a411f8 KERNELBASE!SleepEx+0x62, calling ntdll!NtDelayExecution
04defba0 77a5b1e4 KERNELBASE!SleepEx+0x39, calling ntdll!RtlActivateActivationContextUnsafeFast
04defbd0 74a48e23 mscorwks!ThreadpoolMgr::TimerThreadFire+0x6d, calling KERNELBASE!SleepEx
04defc4c 74a48cd1 mscorwks!ThreadpoolMgr::TimerThreadStart+0x57, calling mscorwks!ThreadpoolMgr::TimerThreadFire
04defc58 761186e3 kernel32!BaseThreadInitThunk+0xe
04defc64 77c0aa29 ntdll!__RtlUserThreadStart+0x72
04defca8 77c0a9fc ntdll!_RtlUserThreadStart+0x1b, calling ntdll!__RtlUserThreadStart
线程9是System.Net.Timer线程：
0:009> !dso
OS Thread Id: 0x1b74 (9)
ESP/REG Object Name
061bef84 1414f63c System.Object[] (System.Threading.WaitHandle[])
061bef98 1414f63c System.Object[] (System.Threading.WaitHandle[])
061befa8 1414f5fc System.Net.TimerThread+TimerNode
061befac 024c83a4 System.Net.TimerThread+TimerQueue
061befd8 1414f5a4 System.Net.TimerThread+TimerNode
061beff8 024c812c System.Net.ConnectionPool
061bf054 1414f63c System.Object[] (System.Threading.WaitHandle[])
061bf090 01ffde94 System.Object[] (System.Threading.WaitHandle[])
061bf09c 024c83a4 System.Net.TimerThread+TimerQueue
061bf0bc 01ffdde8 System.Collections.Generic.LinkedList`1[[System.WeakReference, mscorlib]]
061bf0c0 01ffddcc System.Collections.Generic.LinkedList`1[[System.WeakReference, mscorlib]]
061bf120 02003cc0 System.Threading.ThreadHelper
061bf378 02003cd4 System.Threading.ThreadStart