Hi,
This is driving me a little crazy - lol. It seems that if I try breakpoints under different conditions I get different results. Sometimes they are set, other times they are not.
If I use the sxe command, the !mbp command doesn't work!! Does anyone else suffer this?
To demonstrate I've posted two different results: one using sxe and one without it (see below). My inputs are displayed in bold. What's interesting is that the failed version thinks there is a breakpoint there when I use the !mbl, yet fails to break!!
Anyone have any ideas?
Thanks for your help, Paul
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86 Copyright (c) Microsoft Corporation. All rights reserved.
CommandLine: App.exe Symbol search path is: *** Invalid *** **************************************************************************** * Symbol loading may be unreliable without a symbol search path. * * Use .symfix to have the debugger choose a symbol path. * * After setting your symbol path, use .reload to refresh symbol locations. * **************************************************************************** Executable search path is: ModLoad: 00160000 00168000 App.exe ModLoad: 76fb0000 770d7000 ntdll.dll ModLoad: 707f0000 70836000 C:\Windows\system32\mscoree.dll ModLoad: 76550000 7662b000 C:\Windows\system32\KERNEL32.dll (1a94.1d6c): Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=00000000 ecx=0037f86c edx=77009a94 esi=fffffffe edi=7700b6f8 eip=76ff7dfe esp=0037f884 ebp=0037f8b4 iopl=0 nv up ei pl zr na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll - ntdll!DbgBreakPoint: 76ff7dfe cc int 3 0:000> .symfix 0:000> .reload Reloading current modules .... 0:000> sxe ld mscorwks 0:000> g ModLoad: 6f6c0000 6fc50000 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll eax=004cc778 ebx=00000000 ecx=004cc778 edx=00000018 esi=7ffde000 edi=20000000 eip=77009a94 esp=0037eedc ebp=0037ef20 iopl=0 nv up ei pl zr na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!KiFastSystemCallRet: 77009a94 c3 ret 0:000> .load sosex 0:000> !mbp App.cs 4 0:000> !mbl 0 eu: App.cs, line 4: pass=1 oneshot=false thread=ANY 0:000> g Hello world eax=7082e8a0 ebx=00000000 ecx=00008101 edx=00000001 esi=6f82c468 edi=00000001 eip=77009a94 esp=0037fa40 ebp=0037fa50 iopl=0 nv up ei pl zr na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!KiFastSystemCallRet: 77009a94 c3 ret 0:000> .lastevent Last event: 1a94.1d6c: Exit process 0:1a94, code 0 debugger time: Mon Aug 17 13:47:11.266 2009 (GMT+1) 0:000>
NOW, if I run the following WITHOUT using the sxe command this works correctly as expected!
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86 Copyright (c) Microsoft Corporation. All rights reserved.
CommandLine: App.exe Symbol search path is: *** Invalid *** **************************************************************************** * Symbol loading may be unreliable without a symbol search path. * * Use .symfix to have the debugger choose a symbol path. * * After setting your symbol path, use .reload to refresh symbol locations. * **************************************************************************** Executable search path is: ModLoad: 00160000 00168000 App.exe ModLoad: 76fb0000 770d7000 ntdll.dll ModLoad: 707f0000 70836000 C:\Windows\system32\mscoree.dll ModLoad: 76550000 7662b000 C:\Windows\system32\KERNEL32.dll (1e14.b1c): Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=00000000 ecx=0029f514 edx=77009a94 esi=fffffffe edi=7700b6f8 eip=76ff7dfe esp=0029f52c ebp=0029f55c iopl=0 nv up ei pl zr na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll - ntdll!DbgBreakPoint: 76ff7dfe cc int 3 0:000> .symfix 0:000> .reload Reloading current modules .... 0:000> .load sosex.dll 0:000> !mbp App.cs 4 The CLR has not yet been initialized in the process. Breakpoint resolution will be attempted when the CLR is initialized. 0:000> g ModLoad: 76930000 769f6000 C:\Windows\system32\ADVAPI32.dll ModLoad: 76830000 768f2000 C:\Windows\system32\RPCRT4.dll ModLoad: 77100000 77158000 C:\Windows\system32\SHLWAPI.dll ModLoad: 76a00000 76a4b000 C:\Windows\system32\GDI32.dll ModLoad: 76dd0000 76e6d000 C:\Windows\system32\USER32.dll ModLoad: 758b0000 7595a000 C:\Windows\system32\msvcrt.dll ModLoad: 77160000 7717e000 C:\Windows\system32\IMM32.DLL ModLoad: 75960000 75a28000 C:\Windows\system32\MSCTF.dll ModLoad: 770f0000 770f9000 C:\Windows\system32\LPK.DLL ModLoad: 75830000 758ad000 C:\Windows\system32\USP10.dll ModLoad: 10000000 10015000 C:\Windows\system32\APSHook.dll ModLoad: 754e0000 754e8000 C:\Windows\system32\VERSION.dll ModLoad: 755c0000 755c7000 C:\Windows\system32\PSAPI.DLL ModLoad: 48000000 48027000 C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL ModLoad: 76900000 7692d000 C:\Windows\system32\WS2_32.dll ModLoad: 770e0000 770e6000 C:\Windows\system32\NSI.dll ModLoad: 754b0000 754d1000 C:\Windows\system32\NTMARTA.DLL ModLoad: 76630000 7667a000 C:\Windows\system32\WLDAP32.dll ModLoad: 75490000 754a1000 C:\Windows\system32\SAMLIB.dll ModLoad: 75660000 757a4000 C:\Windows\system32\ole32.dll ModLoad: 750e0000 7527e000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dl l ModLoad: 6f6c0000 6fc50000 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll ModLoad: 709e0000 70a7b000 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\MSVCR80.dll ModLoad: 75a40000 76550000 C:\Windows\system32\shell32.dll ModLoad: 6e0c0000 6ebb7000 C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\c068708e16abf0be77a21b9f29817d83\mscorlib.ni.dll (1e14.b1c): CLR notification exception - code e0444143 (first chance) *** WARNING: Unable to verify checksum for C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\c068708e16abf0be77a21b9f29817d83\mscorlib.ni.dll (1e14.b1c): CLR notification exception - code e0444143 (first chance)
"sorttbls.nlp" was not found in the image list. Debugger will attempt to load "sorttbls.nlp" at given base 00000000.
Please provide the full image name, including the extension (i.e. kernel32.dll) for more reliable results.Base address and size overrides can be given as .reload <image.ext>=<base>,<size>. Unable to add module at 00000000
"sorttbls.ni.nlp" was not found in the image list. Debugger will attempt to load "sorttbls.ni.nlp" at given base 00000000.
Please provide the full image name, including the extension (i.e. kernel32.dll) for more reliable results.Base address and size overrides can be given as .reload <image.ext>=<base>,<size>. Unable to add module at 00000000 (1e14.b1c): CLR notification exception - code e0444143 (first chance)
"sortkey.nlp" was not found in the image list. Debugger will attempt to load "sortkey.nlp" at given base 00000000.
Please provide the full image name, including the extension (i.e. kernel32.dll) for more reliable results.Base address and size overrides can be given as .reload <image.ext>=<base>,<size>. Unable to add module at 00000000
"sortkey.ni.nlp" was not found in the image list. Debugger will attempt to load "sortkey.ni.nlp" at given base 00000000.
Please provide the full image name, including the extension (i.e. kernel32.dll) for more reliable results.Base address and size overrides can be given as .reload <image.ext>=<base>,<size>. Unable to add module at 00000000 (1e14.b1c): CLR notification exception - code e0444143 (first chance) *** WARNING: Unable to verify checksum for App.exe Breakpoint: Matching method sample.Main resolved, but not yet jitted. Setting JIT notification... ModLoad: 70180000 701db000 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll (1e14.b1c): CLR notification exception - code e0444143 (first chance) Breakpoint: JIT notification received for method sample.Main(). Breakpoint set at sample.Main(). Breakpoint 0 hit eax=002c32c0 ebx=0029ee7c ecx=0029ef30 edx=00000000 esi=003dabd0 edi=00000000 eip=003a0081 esp=0029ee50 ebp=0029ee50 iopl=0 nv up ei pl zr na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 003a0081 90 nop 0:000> .lastevent Last event: 1e14.b1c: Hit breakpoint 0 debugger time: Mon Aug 17 13:41:22.171 2009 (GMT+1) 0:000> |