Windows 10: WinDbg Preview's "!heap -p -a UserPtr" fails to display user mode stack trace from memory...

Kevin Coulombe · Nov 3, 2022

I'm using gflags +ust to collect a process' memory dump with user mode allocation stack traces.I pretty much follow this procedure : https://www.debugthings.com/2015/01/09/debugging-heap-leaks/Except the command !heap -p -a UserPtr doesn't work anymore...I'm using these extensions but same happens with the latest exts.dll loaded from WinDbg Preview's install folder :From exts, it says to try ext and from ext, it just returns with no output.It works when installing the previous Windows SDK version from the ar

:)

arpitshukla95 · Nov 3, 2022

Desktop Heap tracing issue

I am running a WPF application which include some VB.net , and C++ component on windows 10. After running it for some hours it gives me warning "A desktop heap allocation failed." in event viewer for source Win32k with event id 243. I tried to install
demonheap which was supported in older windows version but it is not working in windows 10 /7. Is there any other way I can trace desktop heap in windows 10

Brink · Nov 3, 2022

Time Travel Debugging is now available in WinDbg Preview

We are excited to announce that Time Travel Debugging (TTD) features are now available in the latest version of WinDbg Preview. About a month ago, we released WinDbg Preview, which provides great new debugging user experiences. We are now publicly launching a preview version of TTD for the first time and are looking forward to your feedback.

What is TTD?

Wouldn’t it be great to go back in time and fix a problem? We can’t help you go back in time to fix poor life choices, but we can help you go back in time to fix code problems.

Time Travel Debugging (TTD) is a reverse debugging solution that allows you to record the execution of an app or process, replay it both forwards and backwards and use queries to search through the entire trace. Today’s debuggers typically allow you to start at a specific point in time and only go forward. TTD improves debugging since you can go back in time to better understand the conditions that lead up to the bug. You can also replay it multiple times to learn how best to fix the problem.

TTD is as easy as 1 – 2 – 3.

Record: Record the app or process on the machine which can reproduce the bug. This creates a Trace file (.RUN extension) which has all of the information to reproduce the bug.

Replay: Open the Trace file in WinDbg Preview and replay the code execution both forward and backward as many times as necessary to understand the problem.

Analyze: Run queries & commands to identify common code issues and have full access to memory and locals to understand what is going on.

Getting Started

I know you are all excited and ready to start using TTD. Here are a few things you should know to get started.

Install: You can use TTD by installing the WinDbg Preview (build 10.0.16365.1002 or greater) from the Store if you have Windows 10 Anniversary Update or newer at Get WinDbg Preview from the Microsoft Store.

Feedback: This is a preview release of TTD, so we are counting on your feedback as we continue to finish the product. We are using the Feedback Hub to help us prioritize what improvements to make. The Windows Insider website has a great overview on how to give good feedback The Windows Insider Program.

Questions:  We expect you will have some questions as you work with TTD. So feel free to post them on this blog or send them in the Feedback Hub and we will do our best to answer. We’ll be posting a TTD FAQ on our blog shortly.

Documentation:  We’ve got some initial documentation at https://docs.microsoft.com/en-us/win...gging-overview and will be improving our content based upon customer feedback and usage. You can give us feedback or propose edits on the docs.microsoft.com documentation by hitting “Comments” or “Edit” on any page.

Blogs: Watch for more in-depth TTD updates and tips in the future on our team’s blog Debugging Tools for Windows.

How to use TTD

You use TTD directly in the WinDbg Preview app. We have added all of the key TTD features into WinDbg Preview to provide a familiar debugging experience, which makes it intuitive to go backwards and forwards in time during your debugging session.

Record a Trace

WinDbg Preview makes it easy to record a trace. Simply click File >> Start Debugging and point to the app or process. You will have an option to Record during attach and launch. See https://docs.microsoft.com/en-us/win...gging-overview for more information.

Replay a Trace

Once the Trace is complete, we automatically load and index the Trace for faster replay and memory lookups. Then simply use the WinDbg ribbon buttons or commands to step forwards and backwards through the code.

Basic TTD Commands

You can use the ribbon or enter the following TTD commands in WinDbg Preview. See https://docs.microsoft.com/en-us/win...gging-overview for a complete list of TTD commands.

Final Thoughts

We are very excited to get TTD into the hands of our developers; but there are a few things to remember.

TTD is a preview, so we will be regularly improving performance and features

This only runs on Windows 10 since WinDbg Preview is a Store app

See docs.microsoft.com documentation for TTD known issues and compatibility

Welcome to the world of time travel. Our goal is to improve the lives of developers by making debugging easier to increase product quality. Please send us feedback and feature requests in the Feedback Hub to let us know how we are doing!
Click to expand...

Source: Time Travel Debugging is now available in WinDbg Preview - Building Apps for Windows

Brink · Nov 3, 2022

New WinDbg available in preview for Windows 10

Tweet

— Twitter API (@user) View on Twitter
Click to expand...

We are excited to announce a preview version of a brand new WinDbg. We've updated WinDbg to have more modern visuals, faster windows, a full-fledged scripting experience, built with the easily extensible debugger data model front and center. I'll start this by saying that WinDbg Preview is using the same underlying engine as WinDbg today, so all the commands, extensions, and workflows you're used to will still work just as they did before.

Getting started

I know a lot of you are going to want to dive right in and try it out, here are the things you should know before doing so.

Installation - You can install the WinDbg Preview from the store if you have Windows 10 Anniversary Update or newer at https://www.microsoft.com/en-us/stor...g/9pgjgd53tn86 - WinDbg Preview uses some features from the Windows 10 Anniversary Update, so that’s required for now. The Windows Store lets us release bug fixes and updates to you faster than we've ever been able to before, so make sure to stayed tuned to our blog and MSDN to learn the latest about the preview.

Feedback - Familiarize yourself a bit with the Feedback Hub! We've still got a long way to go before we cover all WinDbg features, and we'll be using the Feedback Hub to help us prioritize what you want us to work on! The Windows Insider website has a great overview on how to give good feedback - The Windows Insider Program Once you've read that, just hit the 'Feedback Hub' button on the home ribbon.

Questions - You're bound to have a lot of questions feel free to post them on this blog post, send feedback in the Feedback Hub, or tweet @aluhrs13 and I'll do my best to answer. We'll be posting an FAQ on our blog sometime in the upcoming weeks.

Documentation - We've got some early documentation up on MSDN that's preliminary and subject to change at https://go.microsoft.com/fwlink/p/?linkid=854349, you can give us feedback or propose edits to that documentation by hitting "Comments" or "Edit" on any page. Also keep your eyes on our MSDN blog - Debugging Tools for Windows - for more updates and tips.

Videos - We went to the Channel 9 studio and recorded a couple episodes of Defrag Tools to help explain some of the basics of WinDbg Preview.

Defrag Tools #182 - Tim, Chad, and I go over the basics of WinDbg Preview and some of the features

Defrag Tools #183 - Nick, Tim, and Chad use WinDbg Preview and go over a quick demo

Coming Soon - Defrag Tools #184 - Bill and Andrew walk through the scripting features in WinDbg Preview

What's New

There are a lot of major changes, some of them under the hood and some of them really obvious. Here are my favorites or the things that people have told me they like the best.

Less intimidating

One of the words people often use to describe WinDbg is "intimidating". When you first open it, you get a dull gray screen and very little indication of what to do next. Once you're going, outside of the stepping icons, it's difficult to tell what toolbar button or menu is what you want. With WinDbg Preview we've taken a few steps to make it a bit easier for beginners.

Ribbon - Ribbons are great when icons don't do a great job of describing an action, and when there are a lot of different contextual actions that are only relevant sometimes. Right now our ribbon is pretty barebones with the basics, but over time we'll be adding more ribbons for specific contexts while you're debugging.

Re-worked file menu - The new file menu makes it much more clear which options you have for starting and configuring your debugging session. The attach dialog is much cleaner and more organized now and there's even a new option to launch your Store App or background tasks without needing to set it up with PLMDebug.exe.

Familiar source windows - Source windows now are better in pretty much every way and should look more like to the source windows you're used to seeing in every other modern editor.

Quality of life improvements

WinDbg has gone a long time without any major quality of life improvements or modernizations. This has led a lot of people to doing registry hacks to get a prettier theme, or having a dozen icons pinned to their taskbar for each thing they debug often. We've taken some of these work-arounds and made them easy to access.

Dark theme - This one is pretty self-explanatory, a lot of people use dark themes in their editors, and then flip over to the glaring brightness of WinDbg. Now it can match!

Recent targets - Instead of having to have your KDNET key and IP on a sticky-note on your monitor, WinDbg Preview will now remember all your recent sessions and some of the settings that you had during that session. You can quickly access them again from the recent targets list in the file menu.

Various window improvements - Many windows have gone a while without updates or just have glaring bugs. Some of the notable things we've done differently are that the disassembly window keeps its highlighting in the right spot when scrolled, and the memory window has better highlighting and scrolling. Many windows are also asynchronous now and loading can be cancelled by running another command.

Data model front and center

Hopefully you've heard about the debugger data model by now. If you haven't check out some of my older blog posts at Debugging Tools for Windows and our MSDN docs linked above. Up until now, the data model was only accessible through JavaScript and the dx command. With WinDbg Preview we're putting the data model under the vast majority of what you see, making it much more extensible.

Extensible locals and watch - The data model is now powering the locals and watch windows. NatVis and JavaScript extensions that extend the data model will be reflected in those windows. You can even put LINQ queries into the watch window!

Model windows - There's a new type of window called a model window. Model windows will show the results of any model query in a normal hierarchy view or a table. You'll see in the FAQ that WinDbg Preview doesn't have a modules window, you can use a model window to make your own with @$cursession.Modules! This also has the benefit that if you make a JavaScript extension that extends modules, it'll automatically update your window.

Built-in scripting environment - One of the biggest complaints with scripting and extending the debugger is having to go into an IDE to write and iterate on it with WinDbg Preview you can write and execute your JavaScript and NatVis directly from the debugger. The script window has error highlighting, IntelliSense, and easier execution of scripts.

Restrictions and other things worth noting

While we've got that big list of what's new and awesome, this is still a preview, so there's some things that you should be aware of.

At this point in the preview, we're only offering WinDbg Preview through the Windows Store. That means only devices running Windows 10 Anniversary Update can install it.

You might hit errors when trying to do something that requires elevation. You'll have to manually launch WinDbg Preview elevated.

The concept of a workspace is going to be changing a lot. A workspace in WinDbg Preview is vastly different from one in WinDbg. The MSDN documentation linked above has more information.

That's where we are today. The core experiences are there and we'll be releasing improvements faster than our normal pace now in that we're shipping from the Windows Store. Please don't hesitate to send us feedback and feature requests in the Feedback Hub or in the comments below, we want your input as we move forward!

-Andy Luhrs
Click to expand...

Source: New WinDbg available in preview! Debugging Tools for Windows

Windows 10: WinDbg Preview's "!heap -p -a UserPtr" fails to display user mode stack trace from memory...

WinDbg Preview's "!heap -p -a UserPtr" fails to display user mode stack trace from memory...

WinDbg Preview's "!heap -p -a UserPtr" fails to display user mode stack trace from memory...

WinDbg Preview's "!heap -p -a UserPtr" fails to display user mode stack trace from memory...

WinDbg Preview's "!heap -p -a UserPtr" fails to display user mode stack trace from memory... - Similar Threads - WinDbg Preview's heap

WinDbg Preview's "!heap -p -a UserPtr" fails to display user mode stack trace from memory...

WinDbg Preview's "!heap -p -a UserPtr" fails to display user mode stack trace from memory...

In depth stack trace

In depth stack trace

In depth stack trace

Memory page requests trace

microsoft store / windbg preview

Desktop Heap tracing issue

Kernel mode heap corruption