Windbg unable to load unloaded module list

This is a discussion on Windbg unable to load unloaded module list within the Tech Board forums, part of the Community Boards category; When trying to debug crashdump, I'm having windbg stop while trying to load unloaded modules. I checked the modules list ...

  1. #1
    (?<!re)tired Mario F.'s Avatar
    Join Date
    May 2006
    Location
    Portugal
    Posts
    7,579

    Windbg unable to load unloaded module list

    When trying to debug crashdump, I'm having windbg stop while trying to load unloaded modules. I checked the modules list and this is what comes up as part of the unloaded modules:

    Code:
    <Unloaded>    a348a000    a34f4000    Thu Jan 01 00:00:00 1970 (00000000)    00000000    None    spsys.sys
    <Unloaded>    a406b000    a4083000    Thu Jan 01 00:00:00 1970 (00000000)    00000000    None    parport.sys
    <Unloaded>    8d627000    8d634000    Thu Jan 01 00:00:00 1970 (00000000)    00000000    None    crashdmp.sys
    <Unloaded>    8d634000    8d63f000    Thu Jan 01 00:00:00 1970 (00000000)    00000000    None    dump_ataport
    <Unloaded>    8d63f000    8d648000    Thu Jan 01 00:00:00 1970 (00000000)    00000000    None    dump_atapi.s
    <Unloaded>    8d648000    8d659000    Thu Jan 01 00:00:00 1970 (00000000)    00000000    None    dump_dumpfve
    No checksum and a 0 timestamp. Have I the wrong symbols? Not that there's much to choose from under Windows 7 symbol package lists. I've downloaded and installed to c:\symbols the first entry under symbols for Windows 7 and Windows Server 2008 R2. My symbol path is set as:
    Code:
    srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    Why I try to reload one of them, I get the following:
    Code:
    0: kd> .reload /f @"spsys.sys"
    
    "spsys.sys" was not found in the image list.
    Debugger will attempt to load "spsys.sys" at given base 00000000.
    
    Please provide the full image name, including the extension (i.e. kernel32.dll)
    for more reliable results.Base address and size overrides can be given as
    .reload <image.ext>=<base>,<size>.
    SYMSRV:  c:\symbols\spsys.sys\FFFFFFFE\spsys.sys not found
    SYMSRV:  http://msdl.microsoft.com/download/symbols/spsys.sys/FFFFFFFE/spsys.sys not found
    DBGHELP: C:\Program Files\Debugging Tools for Windows (x86)\spsys.sys - file not found
    SYMSRV:  c:\symbols\spsys.sys\FFFFFFFE\spsys.sys not found
    SYMSRV:  http://msdl.microsoft.com/download/symbols/spsys.sys/FFFFFFFE/spsys.sys not found
    DBGENG:  spsys.sys - Image mapping disallowed by non-local path.
    Unable to load image spsys.sys, Win32 error 0n2
    DBGENG:  spsys.sys - Partial symbol image load missing image info
    DBGHELP: No header for spsys.sys.  Searching for dbg file
    DBGHELP: .\spsys.dbg - file not found
    DBGHELP: .\sys\spsys.dbg - path not found
    DBGHELP: .\symbols\sys\spsys.dbg - path not found
    DBGHELP: spsys.sys missing debug info.  Searching for pdb anyway
    DBGHELP: Can't use symbol server for spsys.pdb - no header information available
    DBGHELP: spsys.pdb - file not found
    DBGHELP: spsys - no symbols loaded
    Unable to add module at 00000000
    The programmer’s wife tells him: “Run to the store and pick up a loaf of bread. If they have eggs, get a dozen.”
    The programmer comes home with 12 loaves of bread.


    Originally Posted by brewbuck:
    Reimplementing a large system in another language to get a 25% performance boost is nonsense. It would be cheaper to just get a computer which is 25% faster.

  2. #2
    Registered User Codeplug's Avatar
    Join Date
    Mar 2003
    Posts
    4,701
    >> Have I the wrong symbols?
    I've never used a symbol package - instead I just use the MS symbol server, same as you have configured.

    >> ... this is what comes up as part of the unloaded modules:
    I wouldn't worry about the unloaded modules - unless of course that is where the crash is being reported.

    Being Win7, you may want to run Windbg as administrator.

    It's good to check for a new version of Windbg every once in a while too (it's at 6.12.2.633 as of this post).

    gg

  3. #3
    (?<!re)tired Mario F.'s Avatar
    Join Date
    May 2006
    Location
    Portugal
    Posts
    7,579
    Yes. I have the latest one. Problem really is that the debugger stops while trying to load these unloaded modules and doesn't seem to do the minidump analysis. If I set it to automatically open the disassembly, the disassembly window does open and places me under the bugcheck. But there's no analysis in the command window.
    The programmer’s wife tells him: “Run to the store and pick up a loaf of bread. If they have eggs, get a dozen.”
    The programmer comes home with 12 loaves of bread.


    Originally Posted by brewbuck:
    Reimplementing a large system in another language to get a 25% performance boost is nonsense. It would be cheaper to just get a computer which is 25% faster.

  4. #4
    (?<!re)tired Mario F.'s Avatar
    Join Date
    May 2006
    Location
    Portugal
    Posts
    7,579
    Nevermind I'm an idiot. It's all well. I was just used to see a header before doing "!analyze -v". That header for some reason isn't there anymore, but I can do the analysis nonetheless.
    The programmer’s wife tells him: “Run to the store and pick up a loaf of bread. If they have eggs, get a dozen.”
    The programmer comes home with 12 loaves of bread.


    Originally Posted by brewbuck:
    Reimplementing a large system in another language to get a 25% performance boost is nonsense. It would be cheaper to just get a computer which is 25% faster.

  5. #5
    Registered User Codeplug's Avatar
    Join Date
    Mar 2003
    Posts
    4,701
    >> It's all well.
    At least you didn't post #4.

    gg

  6. #6
    Captain Crash brewbuck's Avatar
    Join Date
    Mar 2007
    Location
    Portland, OR
    Posts
    7,274
    You can't get symbols for spsys.sys because it is part of the Windows licensing mechanism. Microsoft chooses not to make symbols available externally for this module for some reasons that should hopefully be obvious.

    However, that wasn't really your problem (which you seem to have solved on your own)
    Code:
    //try
    //{
    	if (a) do { f( b); } while(1);
    	else   do { f(!b); } while(1);
    //}

  7. #7
    (?<!re)tired Mario F.'s Avatar
    Join Date
    May 2006
    Location
    Portugal
    Posts
    7,579
    I've been doing the analysis of the minidumps for those BSODs I experienced before. And all 5 of them, including an isolated one I got yesterday while running the computer under default BIOS settings, happen with memory transfer actions. The last one is in fact clearly indicated as memory_corruption in the image name.

    I've ran memtest86+ all night and it consistently reports errors on test 5, and only on test 5. Weird. The summary report lists them as ECC Recoverable Errors. But there are two many for comfort. 606 in 11 passes.

    Being unlucky with this machine for sure. Seems I've been having bad ram all along.

    >> At least you didn't post #4.

    At least I didn't run it...
    Last edited by Mario F.; 02-26-2011 at 09:03 AM.
    The programmer’s wife tells him: “Run to the store and pick up a loaf of bread. If they have eggs, get a dozen.”
    The programmer comes home with 12 loaves of bread.


    Originally Posted by brewbuck:
    Reimplementing a large system in another language to get a 25% performance boost is nonsense. It would be cheaper to just get a computer which is 25% faster.

  8. #8
    Registered User
    Join Date
    Dec 2006
    Location
    Canada
    Posts
    3,183
    That's pretty clearly bad memory. If they are running at stock settings, they are defective and you should return them.

    When it comes to memory 1 error is 1 too many, and they usually worsen as the memory goes through thermal cycles.

    There's also a chance it's the memory controller or something else (power supply, etc), but 95% of the time it's the sticks.

  9. #9
    (?<!re)tired Mario F.'s Avatar
    Join Date
    May 2006
    Location
    Portugal
    Posts
    7,579
    >> There's also a chance it's the memory controller or something else (power supply, etc), but 95% of the time it's the sticks.

    Yeah, that occurred to me. Especially when I read memtest documentation. So after testing both DIMMS on their normal positions, I tested them individually (I also wanted to find out if it was both DIMMs, or just one).

    It's indeed one of the DIMMs. The other is fine after 5 passes (about 1 hour testing). I suppose if both had failed it could still mean another hardware problem. But with both being tested individually on the same slot and one of them passing while the other not, I think pretty much covers that up.
    The programmer’s wife tells him: “Run to the store and pick up a loaf of bread. If they have eggs, get a dozen.”
    The programmer comes home with 12 loaves of bread.


    Originally Posted by brewbuck:
    Reimplementing a large system in another language to get a 25% performance boost is nonsense. It would be cheaper to just get a computer which is 25% faster.

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. Find Injected DLLs In A Process?
    By pobri19 in forum Windows Programming
    Replies: 35
    Last Post: 02-06-2010, 09:53 AM
  2. circularly linked list
    By BlackOps in forum C Programming
    Replies: 0
    Last Post: 07-18-2009, 09:12 AM
  3. Replies: 3
    Last Post: 03-04-2005, 02:46 PM
  4. 1st Class LIST ADT
    By Unregistered in forum C++ Programming
    Replies: 1
    Last Post: 11-09-2001, 07:29 PM
  5. singly linked list
    By clarinetster in forum C Programming
    Replies: 2
    Last Post: 08-26-2001, 11:21 PM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21