在Windbg中，如何确定是否发出ManualResetEvent信号? [英] In Windbg, how do I determine if a ManualResetEvent is signaled or not?

问题描述

我使用提取了一个进程的内存转储

I took a memory dump of a process using

.dump /ma c:\mydump.dmp

我想弄清楚是否设置了特定的ManualResetEvent手柄或正在等待它.我已经尝试过

I would like to figure out if a specific ManualResetEvent handle is set or waiting. I've tried

0:181> !handle 2db0 f Event
Handle 0000000000002db0
  Type          Event
  Attributes    0
  GrantedAccess 0x1f0003:
         Delete,ReadControl,WriteDac,WriteOwner,Synch
         QueryState,ModifyState
  HandleCount   2
  PointerCount  524289
  Name          <none>
  Object specific information

我发现有人使用同一命令在某处获取了更多信息互联网.

I have discovered that someone got more information using the same command somewhere on the internet.

  ...
  Object specific information
    Event Type Auto Reset <- this was missing when I tried
    Event is Waiting      <- this was missing when I tried

有人知道我在做什么错吗?也许只有在调试实时应用程序时才有可能?

Anyone know what I'm doing wrong? Perhaps this is only possible when debugging a live application?

推荐答案

使用.dump/mah不仅不能使用/ma捕获ma句柄信息，而且可以

use .dump /mah not just ma handle information is not captured with /ma

0:012> .dump /mah c:\mydumpu.dmp
Creating c:\mydumpu.dmp - mini user dump
Dump successfully written
0:012> .opendump c:\mydumpu.dmp

Loading Dump File [c:\mydumpu.dmp]
User Mini Dump File with Full Memory: Only application data is available

Opened 'c:\mydumpu.dmp'
||0:0:012> !handle 0 0 event
107 handles of type Event
||0:0:012> !handle 0 f event
Handle 2c
  Type          Event
  Attributes    0
  GrantedAccess 0x1f0003:
         Delete,ReadControl,WriteDac,WriteOwner,Synch
         QueryState,ModifyState
  HandleCount   2
  PointerCount  4
  Name          <none>
  Object Specific Information
    Event Type Auto Reset
    Event is Waiting

这篇关于在Windbg中，如何确定是否发出ManualResetEvent信号?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！