阅读:1210回复:6
about dead blue screen
在SOFTICE运行的时候,如果系统出现了 错误,SI会拦截到,可这个时候没有环境,如何定位系统(页)错误的位置,此时如何进行SRC调式?
在系统出现“蓝屏”的时候,会提示用户正在DUMP数据,这些DUMP出来的数据防在什么地方的?如何分析这些数据得到错误帮助?? :( :( :( |
|
|
沙发#
发布于:2002-04-18 16:13
查看“控制面板”-》“系统”-》“高级”-》“启动和故障恢复”
可以知道dump文件在哪里 |
|
|
板凳#
发布于:2002-04-18 16:21
启动Windbg
点击文件\\Open Cursh Dump,一般会出现DUMP文件的默认路径,选中这个文件,打开。 然后在Windbg的命令行输入kd,Windbg即会调用这个出错部分源码。 |
|
|
地板#
发布于:2002-04-18 16:27
不过据说要靠分析这些文件来找到错误非常困难
|
|
|
地下室#
发布于:2002-04-18 16:35
是的,不过有一些比较常见的错误如0D,0E,1E等还是可以分析。Art Baker Jerry Lozano著的《Windows 2000设备驱动程序设计指南》一书附录中讲了这些错误的原因和相关参数,有利于故障分析。
|
|
|
5楼#
发布于:2002-04-18 16:42
如下的分析能说明什么问题?
Loading Dump File [D:\\WINNT\\MEMORY.DMP] Kernel Dump File: Full address space is available Loaded dbghelp extension DLL Loaded ext extension DLL Loaded kext extension DLL Loaded kdextx86 extension DLL Microsoft (R) Windows Kernel Debugger Version 4.0.0018.0 Copyright (c) Microsoft Corporation. All rights reserved. Symbol search path is: D:\\WINNT\\Symbols Executable search path is: *** WARNING: symbols timestamp is wrong 0x384d9b17 0x39760637 for ntoskrnl.exe KdDebuggerDataBlock Size field is 0 - can not read datablock further KdDebuggerData.KernBase < SystemRangeStart Windows 2000 Kernel Version 2195 UP Free x86 compatible Kernel base = 0x80400000 PsLoadedModuleList = 0x8046a4c0 Debug session time: Thu Apr 18 14:12:45 2002 System Uptime: 0 days 0:07:18 KiProcessorBlock[0] could not be read WaitForEvent failed Extension called without current PC ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck D1, {ed5ada30, 1, 0, ed5ada30} This problem has a known fix or solution: ------------------------------------------ The failure data gathered by the operating system was incomplete. Further analysis of this failure is not possible. StackTrace failed :( :( :( |
|
|
6楼#
发布于:2002-04-19 10:30
DDK的头文件bugcodes.h
中查到stop code 0xD1 是DRIVER_IRQL_NOT_LESS_OR_EQUAL |
|
|