问题描述
我尝试分析一些内存转储.但我堆叠了一些 Microsoft dll (sechost.dll
) 的调试符号.我做什么:
I try to analyze some memory dump. But I stack on debug symbols of some Microsoft dll (sechost.dll
).What I do:
1) !sym 嘈杂
2) .symfix
3) .sympath
我的 .sympath
是:
Symbol search path is: srv*
Expanded Symbol search path is: cache*;SRV*http://msdl.microsoft.com/download/symbols
4) 分析 -v
之后我看到符号加载.但是对于某些符号,我有
4) analyze -v
After it I saw symbols loading.But for some symbols I have
......
SYMSRV: The operation timed out
SYMSRV: http://msdl.microsoft.com/download/symbols/sechost.pdb/C4FD72A96E384F62A5F796624D37EAB42/sechost.pdb not found
SYMSRV: C:\ProgramData\dbg\sym\sechost.pdb\C4FD72A96E384F62A5F796624D37EAB42\sechost.pdb not found
DBGHELP: sechost.pdb - file not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for sechost.dll -
DBGHELP: sechost - export symbols
......
当实际分析开始时,我看到:
When actual analyze start I saw:
.....
IMAGE_NAME: sechost.dll
BUCKET_ID: WRONG_SYMBOLS
FAILURE_BUCKET_ID: WRONG_SYMBOLS_80000003_sechost.dll!SubscribeServiceChangeNotifications
.....
我知道我没有这个 DLL 的 PDB.我尝试使用 .reload/f sechost.dll
加载它.但是分析卡在同一个地方.如何处理?也许有可能增加连接超时或其他方式来获得我需要的东西?
I understand that I don't have PDB for this DLL. I try load it with .reload /f sechost.dll
. But analyze got stuck on same place.How to deal with this?Maybe there is possibility to increase connection timeout or other way to get what I need?
推荐答案
我问过这个 Microsoft 和 Andy Luhrs 回复我说微软需要 3 天时间来发布新版本的符号/Windows 10 更新.
I asked this Microsoft and Andy Luhrs replied me that Microsoft needs 3 days to publish the symbols for new builds/ Windows 10 updates.
因此,如果您在更新发布后分析转储,请尝试在更新发布 3 天后加载符号.
So if you analyze dumps after updates have been published, try to load symbols 3 days after the update was published.
这篇关于Microsoft 调试符号不起作用的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持!