Chapter 1 Page 6
|
| Description |
Spelling error |
| Reported by |
Narasimha Vedala |
| Erratum |
Second paragraph -- "LeakdDiag" |
| Fix |
"LeakDiag" |
|
Chapter 1 Page 8
|
| Description |
Table 1.1 |
| Reported by |
Walter Eder |
| Erratum |
Dbgrpc.exe Process server used for remote debugging |
| Fix |
Dbgsrv.exe Process server used for remote debugging |
|
Chapter 1 Page 19
|
|
|
Chapter 1 Page 23
|
| Description |
In headline and first paragraph: |
| Reported by |
Walter Eder |
| Erratum |
Erratum Windows Driver Kits. |
| Fix |
Erratum Windows Driver Kit. |
|
Chapter 1 Page 23
|
| Description |
In headline and first paragraph: |
| Reported by |
Walter Eder |
| Erratum |
Download Point
http://www.microsoft.com/whdc/DevTools/WDK/betawdk.mspx
|
| Fix |
Download Point
http://www.microsoft.com/whdc/DevTools/WDK/WDKpkg.mspx |
|
Chapter 1 Page 26
|
| Description |
Ethereal has changed name to Wireshark, Headline and all
occurrences in this chapter, also on Page 605 and Index |
| Reported by |
Walter Eder |
| Erratum |
Ethereal |
| Fix |
Wireshark |
|
Chapter 1 Page 26
|
| Description |
Ethereal has changed name to Wireshark |
| Reported by |
Walter Eder |
| Erratum |
Download Point: http://www.ethereal.com/download.html |
| Fix |
Download Point: http://www.wireshark.org/download.html |
|
Chapter 2 Page 45
|
| Description |
paragraph Basic Debugger Tasks |
| Reported by |
Walter Eder |
| Erratum |
you should see a command prompt or a debugger windows
waiting for your commands. |
| Fix |
you should see a command prompt or a debugger window waiting
for your commands. |
|
Chapter 2 Page 52
|
| Description |
paragraph Symbol Path (to be consistent with Listing 2.9
output) |
| Reported by |
Walter Eder |
| Erratum |
0:000>.sympath C:\SymPath1;\\mysymbols\symbols |
| Fix |
0:000>.sympath C:\SymPath;\\mysymbols\symbols |
|
Chapter 2 Page 54
|
| Description |
paragraph Symbol Cache |
| Reported by |
Walter Eder |
| Erratum |
The debugger recognizes the cache* directive and treats the
folder following the start (*) character as a cache location. |
| Fix |
The debugger recognizes the cache* directive and treats the
folder following the asterix (*) character as a cache location |
|
Chapter 2 Page 54
|
| Description |
Listing 2.10 and 2.11 |
| Reported by |
Stefan Okrongli |
| Erratum |
.srvpath |
| Fix |
.sympath |
|
Chapter 2 Page 61
|
| Description |
|
| Reported by |
Stefan Okrongli |
| Erratum |
.sym noisy |
| Fix |
!sym noisy |
|
Chapter 2 Page 61
|
| Description |
first line |
| Reported by |
Walter Eder |
| Erratum |
0:000>.reload =start, length |
| Fix |
0:000>.reload =start,size |
|
Chapter 2 Page 62
|
| Description |
Last paragraph (substitute with the actual prefix) |
| Reported by |
Walter Eder |
| Erratum |
0:000>x module!prefix* |
| Fix |
0:000>x module!* |
|
Chapter 2 Page 64
|
| Description |
Last paragraph, wrong hyphenation |
| Reported by |
Walter Eder |
| Erratum |
This mode can be controlled by another command .src-noisy
<0|1>. |
| Fix |
This mode can be controlled by another command .srcnoisy
<0|1>. |
|
Chapter 2 Page 75
|
| Description |
Figure 2.5 |
| Reported by |
Multiple |
| Erratum |
The return address is stored on the stack at the address
0006fc74 |
| Fix |
The return address is stored on the stack at the address
0006fc70 |
|
Chapter 2 Page 76
|
| Description |
Wrong reference in the last paragraph |
| Reported by |
Emiel Duys |
| Erratum |
kp shows all the parameters on a single line, with a
reference to Listing 2.25.However, Listing 2.25 uses <[kP]>
instead, displaying a line for each parameter. |
| Fix |
The reference to Listing 2.25 should have been placed after
the [kP]. |
|
Chapter 2 Page 79
|
| Description |
Listing 2.29 |
| Reported by |
Multiple |
| Erratum |
02sample!KBTest::Fibonacci |
| Fix |
02sample!KBTest::Fibonacci_stdcall |
|
Chapter 2 Page 80
|
| Description |
Listing 2.31 |
| Reported by |
Multiple |
| Erratum |
bm 02sample1!*kbtest* |
| Fix |
bm 02sample!*kbtest* |
|
Chapter 2 Page 85
|
| Description |
|
| Reported by |
Multiple |
| Erratum |
VOID _cdecl main( ULONG argc, PCHAR argv[] ) |
| Fix |
VOID _cdecl wmain( ULONG argc, WCHAR argv[] ) |
|
Chapter 3 Page 168
|
| Description |
|
| Reported by |
Narasimha Vedala |
| Erratum |
Last paragraph -- "influence results by unassambling..." |
| Fix |
"influence results by unassembling" |
|
Chapter 5 Page 214, 216, 218, 221
|
| Description |
|
| Reported by |
Tom Whalen |
| Erratum |
Figure 5.4/5.5/5.6/5.7 -- call simple!ProcA |
| Fix |
call 05stackdesc!ProcA |
|
Chapter 5 Page 216, 218
|
| Description |
|
| Reported by |
Tom Whalen |
| Erratum |
Figure 5.5/5.6 -- call esp, 0x14 |
| Fix |
sub esp, 0x14 |
|
Chapter 5 Page 219
|
| Description |
|
| Reported by |
Tom Whalen |
| Erratum |
Last paragraph -- From Figure 5.4 we can see that... |
| Fix |
From Figure 5.6 we can see that... |
|
Chapter 5 Page 238
|
| Description |
|
| Reported by |
Multiple |
| Erratum |
ba w4 0006fcf0 |
| Fix |
ba w4 0007fcf8 |
|
Chapter 5 Page 243
|
| Description |
|
| Reported by |
Narasimha Vedala, Kiran Thonse |
| Erratum |
Table 5.1 - 'this' pointer passed via exc register |
| Fix |
'this' pointer passed via ecx register |
|
Chapter 6 Page 276
|
| Description |
|
| Reported by |
Calin Popa |
| Erratum |
is in reality 0xb8*8 = 0x558 |
| Fix |
is in reality 0xa8*8 = 0x558 |
|
Chapter 7 Page 331
|
| Description |
|
| Reported by |
Narasimha Vedala |
| Erratum |
First paragraph -- In Listing 7-9, we use a different
running instance of the 02sample.exe. |
| Fix |
In Listing 7.9, we use a different running instance of the
07sample.exe |
|
Chapter 10 Page N/A
|
| Description |
“Orphaned Critical Section Scenario 2 – Thread Termination” |
| Reported by |
|
| Erratum |
Binary: 10termthread.exe.
In order to debug the thread
termination scenario a consistent reproduction of the problem
must be available. Due to the nature of the heap manager
synchronization techniques it may be hard to get the problem to
reproduce. If you are in fact having trouble getting the problem
to reproduce, there are a couple of options: |
| Fix |
1. Load the system while running the executable. By putting
excessive load on the system (such as running the executable
concurrently in a tight loop) you may be able to increase the
chance of reproducing the problem
2. Download the mini dump file here
(http://www.advancedwindowsdebugging.com/errata/10termthread.cab).
The mini dump file was taken one a system where the problem had
reproduced. Use the –z switch when attaching the debugger to the
mini dump file. |
|
