windbg调试实战（二）

最新推荐文章于 2024-07-27 23:19:00 发布

风清扬_jd

最新推荐文章于 2024-07-27 23:19:00 发布

阅读量945

点赞数 1

分类专栏： windbg调试文章标签： windbg

本文链接：https://blog.csdn.net/jiangdong2007/article/details/80911734

版权

windbg调试专栏收录该内容

5 篇文章 0 订阅

订阅专栏

1、测试代码：

#include "stdafx.h"
#include <string.h>
#include <stdlib.h>
#include <stdio.h>


int _tmain(int argc, _TCHAR* argv[])
{
    
char *ptest = NULL;
char ch[] = {"test"};
strcpy_s(ptest,sizeof(ch),ch); //空指针崩溃
return 0;


}

2、转存dmp文件

3、用windbg打开 配置好符号和代码路径

     需要windows符号的 在windbg里面添加如下：

     

Microsoft Public Symbols
Microsoft has a Web site that makes Windows symbols publicly available. You can refer directly to this site in your symbol path in the following manner:

set _NT_SYMBOL_PATH=srv*DownstreamStore*http://msdl.microsoft.com/download/symbols


DownstreamStore must specify a directory on your local computer or network that will be used to cache symbols. This downstream store holds symbols that the debugger has accessed; the vast majority of symbols that have never been accessed remain on the symbol store at Microsoft. This keeps your downstream store relatively small and allows the symbol server to work quickly, only downloading each file once.

To avoid typing this long symbol path, use the .symfix (Set Symbol Store Path) command. The following command appends the public symbol store to your existing symbol path:

.symfix+ DownstreamStore 

Note  To successfully access Microsoft's public symbol store, you will need a fast internet connection. If your internet connection is only 56 Kps or slower, you should install Windows symbols directly onto your hard drive. For details, see Installing Windows Symbol Files.

For more information about the public symbol store, see the  Windows Symbols Web site.

4、打开dmp 输入!analyze -v

 FAULTING_IP: 
msvcr90!crt_debugger_hook+0
73831661 8325a0d7857300  and     dword ptr [msvcr90!_pioinfo+0x100 (7385d7a0)],0

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 73831661 (msvcr90!crt_debugger_hook)
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 1
   Parameter[0]: 00000000
//大概意思就是第一个参数空 所以导致异常。
DEFAULT_BUCKET_ID:  WRONG_SYMBOLS

PROCESS_NAME:  test_task.exe

ADDITIONAL_DEBUG_TEXT:  
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.


MODULE_NAME: msvcr90


FAULTING_MODULE: 772b0000 ntdll


DEBUG_FLR_IMAGE_TIMESTAMP:  5a7d2648


ERROR_CODE: (NTSTATUS) 0x80000003 - {


EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - <Unable to get error code text>


EXCEPTION_PARAMETER1:  00000000


FAULTING_THREAD:  00001fc8


PRIMARY_PROBLEM_CLASS:  WRONG_SYMBOLS


BUGCHECK_STR:  APPLICATION_FAULT_WRONG_SYMBOLS


LAST_CONTROL_TRANSFER:  from 737f6d36 to 73831661


STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
0102f7f0 737f6d36 00000000 00000000 00000000 msvcr90!crt_debugger_hook
0102f818 00f2102f 00000000 00000005 0102f82c msvcr90!strcpy_s+0x2c
0102f834 00f211ac 00000001 01644c88 01647840 test_task!wmain+0x2f [d:\xx\test_task\test_task\test_task.cpp @ 21]
0102f878 770c8484 00cb1000 770c8460 02ae50ab test_task!__tmainCRTStartup+0x10f [f:\dd\vctools\crt_bld\self_x86\crt\src\crtexe.c @ 583]
0102f88c 77312fea 00cb1000 029cad00 00000000 kernel32!BaseThreadInitThunk+0x24
0102f8d4 77312fba ffffffff 7732ec2b 00000000 ntdll!RtlValidSecurityDescriptor+0x11a
0102f8e4 00000000 00f212f4 00cb1000 00000000 ntdll!RtlValidSecurityDescriptor+0xea

STACK_COMMAND:  ~0s; .ecxr ; kb

FOLLOWUP_IP: 
msvcr90!crt_debugger_hook+0
73831661 8325a0d7857300  and     dword ptr [msvcr90!_pioinfo+0x100 (7385d7a0)],0

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  msvcr90!crt_debugger_hook+0

FOLLOWUP_NAME:  MachineOwner

IMAGE_NAME:  msvcr90.dll

BUCKET_ID:  WRONG_SYMBOLS

FAILURE_BUCKET_ID:  WRONG_SYMBOLS_80000003_msvcr90.dll!crt_debugger_hook

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/test_task_exe/0_0_0_0/5b3c6545/msvcr90_dll/9_0_30729_9415/5a7d2648/80000003/00071661.htm?Retriage=1

Followup: MachineOwner



---------

0102f818 00f2102f 00000000 00000005 0102f82c msvcr90!strcpy_s+0x2c

从第三个参数开始 表示strcpy_s三个参数  {ptest,5,"test"}

在命令行输入 da da 0102f82c  可以验证参数 此处只验证第三个参数！别的自行验证！

 0:000> da 0102f82c

0102f82c  "test" 

5、说明strcpy_s第一参数为空，导致拷贝异常崩溃！