- Copyright
- Preface
- Acknowledgements
- 1. Professional Crash Dump Analysis and Debugging
- 2. Crash Dump Analysis Patterns
- Succession of Patterns
- Wait Chain (Process Objects)
- Coincidental Frames
- Fault Context
- Coupled Processes (Weak)
- Hooked Functions (Kernel Space)
- Hardware Activity
- Incorrect Symbolic Information
- Message Hooks
- Blocked Thread (Hardware)
- Coupled Machines
- High Contention (Processors)
- Thread Starvation (Normal Priority)
- Coupled Processes (Semantics)
- Abridged Dump
- Exception Stack Trace
- Wait Chain (RPC)
- Distrubuted Spike
- Instrumentation Information
- Template Module
- Invalid Exception Information
- Shared Buffer Overwrite
- Pervasive System
- Problem Exception Handler
- Deadlock (Self)
- Same Vendor
- 3. Crash Dump Analysis AntiPatterns
- 4. Pattern Interaction
- Inconsistent Dump, Stack Trace Collection, LPC, Tthread, Process, Executive Resource Wait Chains, Missing Threads and Waiting Thread Time
- Fault Context, Wild Code and Hardware Error
- Main Thread, Critical Section Wait Chains, Critical Section Deadlock, Stack Trace Collection, Execution Residue, Data Contents Locality, Self-Diagnosis and Not My Version
- Strong Process Coupling, Stack Trace Collection, Critical Section Corruption and Wait Chains, Message Box, Self-Diagnosis, Hidden Exception and Dynamic Memory Corruption
- IRP Distribution Anomaly, Inconsistent Dump, Execution Residue, Hardware Activity, Coincidental Symbolic Information, Not My Version, Virtualized System
- Spiking Thread, Main Thread, Message Hooks, Hooked Functions, Semantic Split, Coincidental Symbolic Information and Not My Version
- Stack Trace Collection, Special Process, LPC and Critical Section Wait Chains, Blocked Thread, Coupled Machines, Thread Waiting Time and IRP Distribution Anomaly
- ALPC Wait Chains, Missing Threads, Waiting Thread Time and Semantic Process Coupling
- Insufficient Kernel Pool Memory, Spiking Thread and Data Contents Locality
- Incorrect Stack Trace, Stack Overflow, Early Crash Dump, Nested Exception, Problem Exception Handler and Same Vendor
- 5. A Bit of Science and Philosophy
- Memory Systems Language
- Categories for the Working Software Defect Researcher
- Notes on Memoidealism
- Archaeological Foundations for Memory Analysis
- On God and Miracles
- Psychoanalysis of Software Troubleshooting and Debugging
- Ontological and Epistemological Memoidealism
- On Unconscious
- Ruminations on Automated Debugging
- General Memory Analysis
- Notation for Memory and Trace Analysis
- Category Theory and Troubleshooting
- Software Chorography and Chorology: A Definition
- 6. Fun with Crash Dumps
- Music for Debugging
- Debugging Slang
- Dr. Watson's Observational Patterns
- Memory Dumps in Myths
- Bus Debugging
- Debugging the Debugger (16-bit)
- Dr. DebugLove and Nature
- Sailing Memory Spaces under an RGB Flag
- Don't Name Your Driver a "Missile"
- Notepad Debugging
- !analyze -vostokov
- Contemplating Crash Dumps in Unicode
- Memory Dump Analysis Services Cap and T-Shirt
- Troubleshooting Poem in Six Stanzas
- On the Interpretation of M-Theory
- Check the Name of Your Driver in Reverse
- 7. Software Trace Analysis
- 8. Software Trace Analysis Patterns
- Significant Event
- Time Delta
- Adjoint Thread of Activity
- Trace Acceleration
- Incomplete History
- Background and Foreground Components
- Defamiliarizing Effect
- Anchor Messages
- No Trace Metafile
- No Activity
- Trace Partition
- Truncated Trace
- Diegetic Messages
- False Positive Error
- Guest Component
- Message Change
- Layered Periodization
- 9. Models of Software Behaviour
- 10. The Origin of Crash Dumps
- 11. Structural Memory Patterns
- 12. Memory Visualization
- 13. Art
- Sweet Oil of Memory
- Night Sky
- Component Trace
- Ana-Trace-Log-Lyzer and Closed Session
- Computer Memory Gardens
- Debugging Venue
- Inside a Memory File
- Fabric of Memory Dumps
- Race Condition in a Kernel Pool
- Memory Interfaces
- Bleeding Memory
- Picture Frame for Memory Dumps
- Front Cover Glitch
- Chance Exceptions in a Turing Machine
- 14. Security and Malware Analysis
- 15. Miscellanious
- A. Appendix
Thousands of people reviewed DumpAnalysis.org blog content and I would like to thank all of them. Individuals providing their comments, suggestions and encouragement during the period of February 2010 - October 2010 were included in Volume 4. I apologize if I missed someone.
Thanks to Tony Donegan, for the front cover design.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.