-HOME  

-AUTHORS
-TABLE OF CONTENTS
-SAMPLE CHAPTER
-REVIEWS
-ENDORSEMENTS
-ERRATA
-DOWNLOADS

 
 

Print: First edition


Chapter 1 Page 6

Description Spelling error
Reported by Narasimha Vedala
Erratum Second paragraph -- "LeakdDiag"
Fix "LeakDiag"

Chapter 1 Page 8

Description Table 1.1
Reported by Walter Eder
Erratum Dbgrpc.exe Process server used for remote debugging
Fix Dbgsrv.exe Process server used for remote debugging

Chapter 1 Page 19

Description Command Line Mode
Reported by Daniel
Erratum The fourth bullet point explains that –p is essentially analogous to the Verifier tab in GUI mode is incorrect. GFLAGS GUI mode used to have a verifier tab but it has since been deprecated. The recommended approach for enabling and configuring page heap is by using the Application Verifier package available as a free download from Microsoft: (http://www.microsoft.com/downloads/details.aspx?FamilyID=bd02c19c-1250-433c-8c1b-2619bd93b3a2&DisplayLang=en)
Fix none

Chapter 1 Page 23

Description In headline and first paragraph:
Reported by Walter Eder
Erratum Erratum Windows Driver Kits.
Fix Erratum Windows Driver Kit.

Chapter 1 Page 23

Description In headline and first paragraph:
Reported by Walter Eder
Erratum Download Point http://www.microsoft.com/whdc/DevTools/WDK/betawdk.mspx
Fix Download Point http://www.microsoft.com/whdc/DevTools/WDK/WDKpkg.mspx

Chapter 1 Page 26

Description Ethereal has changed name to Wireshark, Headline and all occurrences in this chapter, also on Page 605 and Index
Reported by Walter Eder
Erratum Ethereal
Fix Wireshark

Chapter 1 Page 26

Description Ethereal has changed name to Wireshark
Reported by Walter Eder
Erratum Download Point: http://www.ethereal.com/download.html
Fix Download Point: http://www.wireshark.org/download.html

Chapter 2 Page 45

Description paragraph Basic Debugger Tasks
Reported by Walter Eder
Erratum you should see a command prompt or a debugger windows waiting for your commands.
Fix you should see a command prompt or a debugger window waiting for your commands.

Chapter 2 Page 52

Description paragraph Symbol Path (to be consistent with Listing 2.9 output)
Reported by Walter Eder
Erratum 0:000>.sympath C:\SymPath1;\\mysymbols\symbols
Fix 0:000>.sympath C:\SymPath;\\mysymbols\symbols

Chapter 2 Page 54

Description paragraph Symbol Cache
Reported by Walter Eder
Erratum The debugger recognizes the cache* directive and treats the folder following the start (*) character as a cache location.
Fix The debugger recognizes the cache* directive and treats the folder following the asterix (*) character as a cache location

Chapter 2 Page 54

Description Listing 2.10 and 2.11
Reported by Stefan Okrongli
Erratum .srvpath
Fix .sympath

Chapter 2 Page 61

Description
Reported by Stefan Okrongli
Erratum .sym noisy
Fix !sym noisy

Chapter 2 Page 61

Description first line
Reported by Walter Eder
Erratum 0:000>.reload =start, length
Fix 0:000>.reload =start,size

Chapter 2 Page 62

Description Last paragraph (substitute with the actual prefix)
Reported by Walter Eder
Erratum 0:000>x module!prefix*
Fix 0:000>x module!*

Chapter 2 Page 64

Description Last paragraph, wrong hyphenation
Reported by Walter Eder
Erratum This mode can be controlled by another command .src-noisy <0|1>.
Fix This mode can be controlled by another command .srcnoisy <0|1>.

Chapter 2 Page 75

Description Figure 2.5
Reported by Multiple
Erratum The return address is stored on the stack at the address 0006fc74
Fix The return address is stored on the stack at the address 0006fc70

Chapter 2 Page 76

Description Wrong reference in the last paragraph
Reported by Emiel Duys
Erratum kp shows all the parameters on a single line, with a reference to Listing 2.25.However, Listing 2.25 uses <[kP]> instead, displaying a line for each parameter.
Fix The reference to Listing 2.25 should have been placed after the [kP].

Chapter 2 Page 79

Description Listing 2.29
Reported by Multiple
Erratum 02sample!KBTest::Fibonacci
Fix 02sample!KBTest::Fibonacci_stdcall

Chapter 2 Page 80

Description Listing 2.31
Reported by Multiple
Erratum bm 02sample1!*kbtest*
Fix bm 02sample!*kbtest*

Chapter 2 Page 85

Description
Reported by Multiple
Erratum VOID _cdecl main( ULONG argc, PCHAR argv[] )
Fix VOID _cdecl wmain( ULONG argc, WCHAR argv[] )

Chapter 3 Page 168

Description
Reported by Narasimha Vedala
Erratum Last paragraph -- "influence results by unassambling..."
Fix "influence results by unassembling"

Chapter 5 Page 214, 216, 218, 221

Description
Reported by Tom Whalen
Erratum Figure 5.4/5.5/5.6/5.7 -- call simple!ProcA
Fix call 05stackdesc!ProcA

Chapter 5 Page 216, 218

Description
Reported by Tom Whalen
Erratum Figure 5.5/5.6 -- call esp, 0x14
Fix sub esp, 0x14

Chapter 5 Page 219

Description
Reported by Tom Whalen
Erratum Last paragraph -- From Figure 5.4 we can see that...
Fix From Figure 5.6 we can see that...

Chapter 5 Page 238

Description
Reported by Multiple
Erratum ba w4 0006fcf0
Fix ba w4 0007fcf8

Chapter 5 Page 243

Description
Reported by Narasimha Vedala, Kiran Thonse
Erratum Table 5.1 - 'this' pointer passed via exc register
Fix 'this' pointer passed via ecx register

Chapter 6 Page 276

Description
Reported by Calin Popa
Erratum is in reality 0xb8*8 = 0x558
Fix is in reality 0xa8*8 = 0x558

Chapter 7 Page 331

Description
Reported by Narasimha Vedala
Erratum First paragraph -- In Listing 7-9, we use a different running instance of the 02sample.exe.
Fix In Listing 7.9, we use a different running instance of the 07sample.exe

Chapter 10 Page N/A

Description “Orphaned Critical Section Scenario 2 – Thread Termination”
Reported by
Erratum Binary: 10termthread.exe.
In order to debug the thread termination scenario a consistent reproduction of the problem must be available. Due to the nature of the heap manager synchronization techniques it may be hard to get the problem to reproduce. If you are in fact having trouble getting the problem to reproduce, there are a couple of options:
Fix 1. Load the system while running the executable. By putting excessive load on the system (such as running the executable concurrently in a tight loop) you may be able to increase the chance of reproducing the problem
2. Download the mini dump file here (http://www.advancedwindowsdebugging.com/errata/10termthread.cab). The mini dump file was taken one a system where the problem had reproduced. Use the –z switch when attaching the debugger to the mini dump file.

 

 

 

Home | Authors | Table of Contents | Sample Chapter | Reviews | Endorsements | Errata | Downloads | Contact Us

Copyright © Advanced Windows Debugging. | designed by A. Hewardt @ Easy Web Launch