Re: Child display driver ... adding PnP crashes!

It loads the kernel symbols 2 times - first on the very boot, and they are
export symbols. Then, after determining the exact version using these symbols,
it reloads the real-world symbols.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@xxxxxxxxxxxxxxxx
http://www.storagecraft.com

"Skywing" <skywing_NO_SPAM_@xxxxxxxxxxxxxxxxxxx> wrote in message
news:uxcseqedGHA.3348@xxxxxxxxxxxxxxxxxxxxxxx
Actually, I think the debugger will try to load symbols always if it is
using export symbols.

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ntkrnlpa.exe -

*******************************************************************************
WARNING: Local kernel debugging requires booting with /debug to work
optimally.

*******************************************************************************
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Fri May 12 12:31:45.546 2006 (GMT-5)
System Uptime: 0 days 0:17:19.340
lkd> lm
start end module name
804d7000 806cd280 nt (export symbols) ntkrnlpa.exe

Unloaded modules:
f9b6c000 f9b75000 processr.sys
f9cc4000 f9cc9000 Cdaudio.SYS
f9699000 f969c000 Sfloppy.SYS
lkd> .reload nt
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ntkrnlpa.exe -
lkd> .symfix c:\symbols
lkd> .reload nt
lkd> lm
start end module name
804d7000 806cd280 nt (pdb symbols)
c:\symbols\ntkrnlpa.pdb\89C2A9EB56A74E2D8269AFD1D835BA331\ntkrnlpa.pdb

Unloaded modules:
f9b6c000 f9b75000 processr.sys
f9cc4000 f9cc9000 Cdaudio.SYS
f9699000 f969c000 Sfloppy.SYS

`.reload /u' is probably not what you will want and will remove the module
entirely from the debugger's list.

"Maxim S. Shatskih" <maxim@xxxxxxxxxxxxxxxx> wrote in message
news:%23KBUWZddGHA.1436@xxxxxxxxxxxxxxxxxxxxxxx
Clearly indiacting that my kernel symbols have not been loaded. Why
does symfix not work for me? Do I need to upgrade WinDbg ( Current

Read my previous email more carefully.

.symfix does not reload anything. If you have the wrong symbols loaded
("export
symbols" or "no symbols") - then you must unload them:

.reload /u nt

and load the new ones after .symfix:

.reload nt

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@xxxxxxxxxxxxxxxx
http://www.storagecraft.com




.

Relevant Pages

  • Re: Child display driver ... adding PnP crashes!
    ... I think the debugger will try to load symbols always if it is ... lkd> .reload nt ... does symfix not work for me? ...
    (microsoft.public.development.device.drivers)
  • Re: Child display driver ... adding PnP crashes!
    ... ancient versions) - even if the debugger has already tried and failed to ... the debugger loaded module list (i.e. `.reload module=base,size') or it will ... lkd> .reload nt ... does symfix not work for me? ...
    (microsoft.public.development.device.drivers)
  • Re: How do you work up a load?
    ... #How many loads of each powder weight do you make? ... there are people who reload and don't follow all the ... Win a Fulton Armory AR-15 rifle chambered in 6.8mm Rem SPC and protect your ...
    (rec.guns)
  • Internet explorer address bar hang
    ... Any suggestions...I have 2 machines both with same fault ... one now OK after complete reload. ... Search on google for link to same address ... as above and click on it and the page loads immediately. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: boot disc
    ... mhs mom wrote: ... XP loads sometimes, runs well sometimes, but more often shuts down after a ... Sometimes will reload, sometimes won't. ... I suspect a bad ...
    (microsoft.public.windowsxp.general)
Loading