Worked Examples

The following collection of worked examples illustrate how to use the debugging tools, in particular the Dump Formatter and Kernel Debugger to obtain information from a system under diagnosis.

The following topics are included:

Finding File System information

This gives techniques for obtianing open file information and correlating open file names to handles and vice versa and finding out about record locking.
Exploring Memory Management
This gives techniques for obtaining memory owner ownership and discovering who allocated a particular memory object. Name shared memory and Kernel heap memory are also discussed.
Exploring Presentation Manager
This give techniques for finding Message Queues, Window Procedures and Window structures.
Debugging Ring 0 Loops from a Dump
Dealing with ring 0 loops is relatively straight forward from the Kernel Debugger. It is also possible to diagnose Ring 0 problems from a dump if the current registers can be determined. This section given an example of using this technique in a File System Driver loop.

---

[Back: Program Design Issues and Weaknesses]
[Next: How to Find File System Information]