Crash Dump Analysis Patterns (Part 4)

Crash dump 불펌스페샬 2007. 5. 13. 23:57 posted by CecilDeSK
반응형
Crash Dump Analysis Patterns (Part 4)

After looking at one dump today where all thread environment blocks were zeroed, import table corrupt and recalling some similar cases Iencountered previously I came up with the next pattern: Lateral Damage.


Whenthis problem happens you don’t have much choice and your first temptation is to apply Alien Component anti-patternunless your module listiscorrupt andyou have manifestation of anothercommon problemIwill talk about next time: Corrupt Dump.



Anti-pattern isnot always bad solution ifcomplemented by subsequent verification and backed by experience.If yougetdamagedprocess and thread structuresyou canpoint toa suspiciouscomponent (supported by some evidence like raw stack analysis and educated guess) and request additional dumps in hope to get less damaged process space or seethat component again. At the very end if removing it stabilizes the customer environment it proves you were right.

- Dmitry Vostokov -

반응형