DCSIMG
Debugging,Drivers - All Your Base Are Belong To Us

All Your Base Are Belong To Us

Mostly .NET internals and other kinds of gory details

Browse by Tags

All Tags » Debugging » Drivers (RSS)
Identify the User-Mode Drivers Loaded into a WUDFHost.exe Instance
Once upon a time, it was fairly challenging to determine which services were running in an individual svchost.exe process. Today, with Process Explorer, there’s nothing easier – just hover over the svchost.exe process and you get a list of services, or double-click an svchost.exe process and go to the Services tab: A similar problem can arise with user-mode drivers (UMDF). User-mode drivers are COM DLLs loaded into WUDFHost.exe processes, and some WUDFHost.exe processes may contain more than one...
Developing Device Drivers in Studio 11
Another piece of great news delivered at //build/ has to do with device driver development. Coincidentally, a few weeks ago I posted a series of baby-steps with Windows driver development , and if you’ve read some of that you’d notice that the driver dev work is very different from application development – you use a different build environment , you deploy drivers manually, and you debug them with a different debugger . This story changes, however, with Visual Studio 11. You can now build drivers...
Open Kernel Crash Dumps in Visual Studio 11
A dream is coming true. A dream where all the debugging you’ll ever do on your developer box is going to be in a single tool – Visual Studio. In a later post, I will discuss device driver development in Visual Studio 11, which is another dream come true. For now, let’s take a look at how Visual Studio can open kernel crash dumps and perform crash analysis with all the comfy tool windows and UI that we know and love. To perform kernel crash analysis in Visual Studio 11, you will need to install the...
Baby Steps in Windows Device Driver Development: Part 4, Kernel Debugging
Now that you have a driver running on the target system, it’s time to learn how to debug it if the need arises. In the first part , you configured the virtual machine for kernel debugging over a virtual serial port, and connected to the kernel debugging session using WinDbg. Familiarity with WinDbg commands for unmanaged debugging is a major plus here, but there are numerous new extension commands that are available only in kernel-mode which you will have to learn anyway. Commands you might need...