none
Debugging tools related question RRS feed

  • Question

  • When i am reading the post talking about - Capturing memory dumps for 32-bit processes on an x64 machine, one statement is confusing. See below.

    From the post:
    https://blogs.msdn.microsoft.com/tess/2010/09/29/capturing-memory-dumps-for-32-bit-processes-on-an-x64-machine/

    Yes, to read 32-bit dumps you should use 32-bit windbg (either on a 32-bit or 64-bit OS)

    From MSDN page:

    https://msdn.microsoft.com/en-us/library/windows/hardware/ff539099(v=vs.85).aspx

    If you are analyzing a dump file, you can use either the 32-bit debugging tools or the 64-bit debugging tools. (It is not important whether the dump file is a user-mode dump file or a kernel-mode dump file, and it is not important whether the dump file was made on an x86-based or an x64-based platform.)

    Which is correct, please clarify...

    Saturday, July 30, 2016 1:05 AM

Answers

  • Would think in a certain sense both. The "Debugging Tools" itself may be capable to handle 32/64 as described.
    But extensions, like SOS (for .NET) may not:
    0:000> !DumpDomain
    SOS does not support the current target architecture.
    

    With kind regards

    Saturday, July 30, 2016 7:47 AM