Questions tagged [postmortem-debugging]

Postmortem debugging concerns debugging of programs that have already terminated.

Postmortem debugging concerns debugging of programs that have already terminated, often through the inspection of memory dumps created on program crash.

See :

89 questions
1
vote
1 answer

Debugging MiniDump

I have compiled a Debug-Version of my application in one folder. There are now all dll's, pdb's and the exe with the pdb. I have now created a MiniDump of my running application started out of this path with Taskmanager. Now, I can open this…
BennoDual
  • 4,997
  • 13
  • 55
  • 131
1
vote
1 answer

How can I know the type of a Windows dump file?

I have a dump file and I would like to know its "type", for example according Collecting User-Mode Dumps user mode dump has three basic DumpType: 0: Custom dump, 1: Mini dump, 2: Full dump. According to Varieties of Kernel-Mode Dump Files kernel…
Alessandro Jacopson
  • 16,221
  • 13
  • 91
  • 139
1
vote
1 answer

How to post-mortem debug .NET process and run powershell script as debugger action?

Is there an easy way to monitor a given Windows process for a well defined .NET exception (either first or second chance) and run a powershell script when that exception is raised? I don't really need a process dump (yet).
user2368632
  • 712
  • 1
  • 5
  • 20
1
vote
1 answer

Analyze container file system on kubernetes after it exits/crashes

Perhaps a silly question with no sense: In a kubernetes deployment (or minikube), when a pod container crashes, i would like to analyze the file system at that moment. In this way, i could see core dumps or any other useful information. I know that…
eramos
  • 122
  • 1
  • 10
1
vote
1 answer

Search through memory in VS2017

I have opened a minidump file of my C++ application in Visual Studio 2017. The dump is of a program crashing with an access violation. I am suspecting heap/stack corruption, so I am spending a lot of time in the memory/disassembly window, trying to…
1
vote
2 answers

Globally assign per-pod UUID/unique-ID for all pods

Is there a UUID attribute (or something similar) that is either automatically assigned to all K8S pods, or that can be globally configured for a cluster? I have an application that acts as a database (DB) front-end in my cluster, where some (but not…
Cloud
  • 17,212
  • 12
  • 64
  • 137
1
vote
0 answers

How to load seperate debug file e.g. abc.debug file instead of binary to debug in GDB?

"gdb program core.11230" is the actual format of loading core to gdb. But I don't have 'program' binary. instead I have separate debug file along with core. So I am loading .debug file instead of binary as "gdb coredump.debug…
1
vote
1 answer

Getting Symbols from crashes at Microsoft Dev Dashboard

The Microsoft Windows Dev Center Dashboard lets me collect stack traces from failures in my native desktop app in the wild. Unfortunately, minidumps aren't avaialble. I just get a TSV file that (sometimes) has a stack trace in it, which looks like…
1
vote
2 answers

Unwind known stack and instruction pointer with GDB

I have a core dump on Linux x64. At some point SIGSEGV happened and unfortunately application handled this signal (but still failed in the end). So core dump doesn't directly contain frames of original SIGSEGV. I was able to determine SP and IP (and…
norekhov
  • 2,557
  • 18
  • 34
1
vote
1 answer

Does MacOS/X have a separated-debug-info mechanism similar to Windows' PDB files?

When developing and deploying an application under Windows, the developer has the option to store locally the .pdb files that are generated by the compiler as part of each build, and have his program call MiniDumpWriteDump in response to a crash to…
Jeremy Friesner
  • 57,675
  • 12
  • 103
  • 196
1
vote
1 answer

High memory usage for a .Net application with lots of handles

I'm doing postmortem analysis on a high memory pressure .net application using WinDbg with a process dump and this process is a Windows service. I got a feeling that most of this 14GB of this process memory consumption comes from aborted threads…
sophia liu
  • 81
  • 1
  • 5
1
vote
2 answers

grails integration test case preserve data for investigation

We were used to running our grails integration test against in memory HSQLDB database, but at the failure point it was difficult to investigate as the data was lost. We migrated to running the test against the physical database(postgres) and all is…
Prakash
  • 413
  • 2
  • 5
  • 15
1
vote
0 answers

Post mortem debugging with the MSVC .map file

I have deployed a Windows application, which crashes sporadically. I built the application in release mode without debug symbols, but with the /MAP option in order to track down bugs after the fact. The error message is: "Unhandled exception at…
bgp2000
  • 1,190
  • 10
  • 27
1
vote
1 answer

Getting information about handles from hang analysis

I have the following results of !analyze -hang -v on a dump file I have. I see that thread 0 is waiting for some handle to be released, as specified in derived_wait_chain. How can I get more information about this handle? !handle 784.183c returns an…
user884248
  • 1,873
  • 2
  • 27
  • 49
1
vote
2 answers

Windows Error Reporting insists on NOT creating full dumps on software crashes

I'm trying to debug my application on a production machine. It crashes about once every 2 days and I don't know why. I've been trying for days now to make that production machine produce full crash dumps whenever a program crashes. Sometimes it…