Release版 Windbg 调试Dump问题 没有堆栈信息
最近接手一个老项目,收到客户那边程序崩溃的Dump文件,可是用Windbg 分析后的信息如下,
堆栈信息都是空的,只有一个出错的地址,完全不知道从何下手, 求哪位大神提点一下
Loading Dump File [E:\release\release v2.89c\V2.89c-20180913-060315.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
Symbol search path is: SRV*E:\release\release v2.89c*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: EmbeddedNT SingleUserTS
Machine Name:
Debug session time: Thu Sep 13 06:03:16.000 2018 (UTC + 8:00)
System Uptime: not available
Process Uptime: 1 days 15:13:56.000
............................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(c48.c70): Access violation - code c0000005 (first/second chance not available)
eax=13971b80 ebx=13971c28 ecx=00000006 edx=00000074 esi=13971be8 edi=0af6e670
eip=77c770b4 esp=0af6e330 ebp=0af6e340 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
ntdll!KiFastSystemCallRet:
77c770b4 0000 add byte ptr [eax],al ds:0023:13971b80=??
0:009> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
*** ERROR: Symbol file could not be found. Defaulted to export symbols for user32.dll -
*** WARNING: Unable to verify checksum for GPXc.exe
Failed calling InternetOpenUrl, GLE=12029
FAULTING_IP:
+0
006702a7 0000 add byte ptr [eax],al
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 006702a7
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000008
Parameter[1]: 006702a7
Attempt to execute non-executable address 006702a7
PROCESS_NAME: GPXc.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x%08lx
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - 0x%08lx
EXCEPTION_PARAMETER1: 00000008
EXCEPTION_PARAMETER2: 006702a7
WRITE_ADDRESS: 006702a7
FOLLOWUP_IP:
+0
006702a7 0000 add byte ptr [eax],al
FAILED_INSTRUCTION_ADDRESS:
+0
006702a7 0000 add byte ptr [eax],al
MOD_LIST: <ANALYSIS/>
APPLICATION_VERIFIER_FLAGS: 0
ADDITIONAL_DEBUG_TEXT: Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]
LAST_CONTROL_TRANSFER: from 00000000 to 006702a7
FAULTING_THREAD: ffffffff
BUGCHECK_STR: APPLICATION_FAULT_STACKIMMUNE_SOFTWARE_NX_FAULT_INVALID
PRIMARY_PROBLEM_CLASS: STACKIMMUNE
DEFAULT_BUCKET_ID: STACKIMMUNE
IP_ON_HEAP: 006702a7
The fault address in not in any loaded module, please check your build's rebase
log at <releasedir>\bin\build_logs\timebuild\ntrebase.log for module which may
contain the address if it were loaded.
STACK_TEXT:
00000000 00000000 gpxc.exe+0x0
SYMBOL_NAME: gpxc.exe
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: gpxc
IMAGE_NAME: GPXc.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 5b9075ef
STACK_COMMAND: ** Pseudo Context ** ; kb
FAILURE_BUCKET_ID: STACKIMMUNE_c0000005_GPXc.exe!Unknown
BUCKET_ID: APPLICATION_FAULT_STACKIMMUNE_SOFTWARE_NX_FAULT_INVALID_BAD_IP_gpxc.exe
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/GPXc_exe/0_0_1_0/5b9075ef/unknown/0_0_0_0/bbbbbbb4/c0000005/006702a7.htm?Retriage=1
Followup: MachineOwner
---------
0:009> kb
ChildEBP RetAddr Args to Child
0af6e32c 00000000 00000000 00000000 00000000 ntdll!KiFastSystemCallRet
0:009> !teb
TEB at 7ffd4000
error InitTypeRead( TEB )...
0:009> k
ChildEBP RetAddr
0af6e32c 00000000 ntdll!KiFastSystemCallRet
0:009> !heap
No heaps to display.
You must specify the actual heap address since
array of process heaps is inaccessible