Download Safari Books Online apps: Apple iOS | Android

Entire Site

Safari Books Online

    Free Trial

    Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.


    Copyright
    Presentation Slides and Transcript
    Practice Exercises
    Exercise 0: Download, setup and verify your WinDbg installation
    Exercise P1: Analysis of a normal application process dump (32-bit notepad)
    Exercise P2: Analysis of a normal application process dump (64-bit notepad)
    Exercise P3: Analysis of a normal application process dump (32-bit IE)
    Exercise P4: Analysis of an application process dump (ApplicationK, no symbols)
    Exercise P5: Analysis of an application process dump (ApplicationK, with application symbols)
    Exercise P6: Analysis of application process dump (ApplicationL, 32-bit)
    Exercise P7: Analysis of an application process dump (ApplicationL, 64-bit)
    Exercise P8: Analysis of an application process dump (ApplicationM, 32-bit)
    Exercise P9: Analysis of an application process dump (ApplicationN, 64-bit)
    Exercise P10: Analysis of an application process dump (ApplicationO, 64-bit)
    Exercise P11: Analysis of an application process dump (ApplicationP, 32-bit)
    Exercise P12: Analysis of an application process dump (ApplicationR, 32-bit)
    Exercise P13: Analysis of an application process dump (ApplicationA, 32-bit)
    Exercise P14: Analysis of an application process dump (ApplicationS, 32-bit)
    Exercise K1: Analysis of a normal kernel dump (32-bit)
    Exercise K2: Analysis of a kernel dump with pool leak (32-bit)
    Exercise K3: Analysis of a kernel dump with pool corruption (32-bit)
    Exercise K4: Analysis of a kernel dump with code corruption (32-bit)
    Exercise K5: Analysis of a kernel dump with hang I/O (32-bit)
    Exercise C1: Analysis of a normal complete dump (32-bit)
    Exercise C2: Analysis of a problem complete dump (32-bit)
    Application Source Code
    Selected Q&A
    • Create BookmarkCreate Bookmark
    • Create Note or TagCreate Note or Tag
    • DownloadDownload
    • PrintPrint
    Share this Page URL
    Help

    Practice Exercises > Exercise P7: Analysis of an application process dump (Appl... - Pg. 115

    Exercise P7: Analysis of an application process dump (ApplicationL, 64-bit) Goal: Learn how to recognize heap corruption and check error and status codes. Patterns: Exception Thread; Heap Corruption 1. 2. 3. Launch WinDbg from Debugging Tools for Windows or Debugging Tools for Windows (x86) Open \AWMDA-Dumps\64-bit\Processes\ApplicationL.exe.2940.dmp If you are presented with this dialog say No: 4. We get the dump file loaded: