今天分享的dump是训练营里一位学员的,从一个啥也不会到现在分析的有模有样,真的是看他成长起来的,调试技术学会了就是真真实实自己的,话不多说,上windbg说话。
这位学员是从事工控大类下的视觉自动化,也是目前.NET的主战场,这个场景下大多都是WPF或者WinForm程序,不管是什么程序,先用命令 k 开路。
0:000> ~0sntdll!NtWaitForMultipleObjects+0x14:00007ff8`d825cc14 c3 ret0:000> k # Child-SP RetAddr Call Site00 000000e4`c0cf87e8 00007ff8`d54f7ff7 ntdll!NtWaitForMultipleObjects+0x1401 000000e4`c0cf87f0 00007ff8`83aa7585 KERNELBASE!WaitForMultipleObjectsEx+0x10702 000000e4`c0cf8af0 00007ff8`83aa76fa PylonBase_v5_1!Pylon::CInstantCameraArray::DestroyInstantCamera+0x78da103 000000e4`c0cf8bb0 00007ff8`83a188bc PylonBase_v5_1!Pylon::CInstantCameraArray::DestroyInstantCamera+0x78f1604 000000e4`c0cf8c30 00007ff8`83a22a70 PylonBase_v5_1!Pylon::CGrabResultPtr::IsUnique+0x16ec05 000000e4`c0cf8cd0 00007ff8`41fee2dd PylonBase_v5_1!Pylon::CGrabResultPtr::IsUnique+0xb8a006 000000e4`c0cf8d40 00007ff8`4218711b 0x00007ff8`41fee2dd...
从卦象看真的很不吉利,因为这个等待是一个第三方的SDK库,从 DestroyInstantCamera 名字看就是 立即销毁相机,接下来我们看下 PylonBase_v5_1 是何方圣神?
0:000> lmvm PylonBase_v5_1Browse full module liststart end module name00007ff8`839e0000 00007ff8`83b5b000 PylonBase_v5_1 (export symbols) PylonBase_v5_1.dll Loaded symbol image file: PylonBase_v5_1.dll Image path: C:/Program Files/Basler/pylon 5/Runtime/x64/PylonBase_v5_1.dll Image name: PylonBase_v5_1.dll Browse all global symbols functions data Timestamp: Fri Aug 24 20:41:55 2018 (5B7FFD13) CheckSum: 0017E66C ImageSize: 0017B000 File version: 5.1.0.12681 Product version: 5.1.0.12681 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0000.04b0 Information from resource tables: CompanyName: Basler ProductName: Basler pylon InternalName: PylonBase OriginalFilename: PylonBase.dll ProductVersion: 5.1.0.12681 FileVersion: 5.1.0.12681 PrivateBuild: SpecialBuild: 0 FileDescription: PylonBase Module LegalCopyright: Copyright (c) 2006-2018 Basler AG - All rights reserved. LegalTrademarks: Comments: 1d4ccf9b36037580c4655fde004335702d90d3e8
由于我是行外人,所以我好奇的查一下 Basler 是什么公司,
本文链接://www.dmpip.com//www.dmpip.com/showinfo-26-92458-0.html记一次 .NET某工控视觉自动化系统卡死分析
声明:本网页内容旨在传播知识,若有侵权等问题请及时与本网联系,我们将在第一时间删除处理。邮件:2376512515@qq.com
下一篇: 289M→259M得物包体积治理实践