WinDbg Preview - error InitTypeRead
이상하군요, 다른 컴퓨터에서 남긴 메모리 덤프 파일을 복사해 왔는데 pdb 로드가 안 돼서 이런 오류가 발생합니다.
0:000> !teb
TEB at 00007ff6c278e000
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_TEB ***
*** ***
*************************************************************************
error InitTypeRead( TEB )...
원인 파악을 해보면,
0:000> !sym noisy
noisy mode - symbol prompts on
0:000> .reload /s /f ntdll.dll
SYMSRV: BYINDEX: 0xB
c:\symbols
ntdll.pdb
6DFD0B387E7941A587A3B64F824B1CAC1
SYMSRV: UNC: c:\symbols\ntdll.pdb\6DFD0B387E7941A587A3B64F824B1CAC1\ntdll.pdb - path not found
SYMSRV: UNC: c:\symbols\ntdll.pdb\6DFD0B387E7941A587A3B64F824B1CAC1\ntdll.pd_ - path not found
SYMSRV: UNC: c:\symbols\ntdll.pdb\6DFD0B387E7941A587A3B64F824B1CAC1\file.ptr - path not found
SYMSRV: RESULT: 0x80070003
DBGHELP: *http://msdl.microsoft.com/download/symbols\ntdll.pdb - file not found
DBGHELP: *http://msdl.microsoft.com/download/symbols\dll\ntdll.pdb - file not found
DBGHELP: *http://msdl.microsoft.com/download/symbols\symbols\dll\ntdll.pdb - file not found
DBGHELP: ntdll.pdb - file not found
DBGHELP: ntdll - export symbols
************* Symbol Loading Error Summary **************
Module name Error
ntdll The system cannot find the file specified
The SYMSRV client failed to find a file in the UNC store, or there
is an invalid UNC store (an invalid path or the pingme.txt file is
not present in the root directory), or the file is present in the
symbol server exclusion list.
로컬 캐시에서 찾는 경로에
6DFD0B387E7941A587A3B64F824B1CAC1 값을 포함하고 있으니, 당연히 서버 쪽으로 이런 경로 요청이 있어야 하는데,
http://msdl.microsoft.com/download/symbols/ntdll.pdb/6DFD0B387E7941A587A3B64F824B1CAC1/ntdll.pdb
단순히 /symbols\ntdll.pdb, /symbols\dll\ntdll.pdb, /symbols\symbols\dll\ntdll.pdb에 대한 것만 보입니다. 결국 ntdll.pdb 파일을 찾을 수 없어 명령어 실행에 실패하게 된 것입니다.
대신 "WinDbg Preview (1.0.2007.06001, 엔진 버전 10.0.20153.1000)"가 아닌 일반 버전의 windbg로는 잘 로드가 됩니다.
0:000> !sym noisy
noisy mode - symbol prompts on
0:000> .reload /s /f ntdll.dll
SYMSRV: BYINDEX: 0x4
c:\symbols*http://msdl.microsoft.com/download/symbols
ntdll.pdb
6DFD0B387E7941A587A3B64F824B1CAC1
SYMSRV: UNC: c:\symbols\ntdll.pdb\6DFD0B387E7941A587A3B64F824B1CAC1\ntdll.pdb - file not found
SYMSRV: UNC: c:\symbols\ntdll.pdb\6DFD0B387E7941A587A3B64F824B1CAC1\ntdll.pd_ - file not found
SYMSRV: UNC: c:\symbols\ntdll.pdb\6DFD0B387E7941A587A3B64F824B1CAC1\file.ptr - file not found
SYMSRV: HTTPGET: /download/symbols/ntdll.pdb/6DFD0B387E7941A587A3B64F824B1CAC1/ntdll.pdb
SYMSRV: HttpQueryInfo: 801900c8 - HTTP_STATUS_OK
SYMSRV: /download/symbols/ntdll.pdb/6DFD0B387E7941A587A3B64F824B1CAC1/ntdll.pdb
...[생략]...
혹은 그냥 로그로부터 알아낸 "6DFD0B387E7941A587A3B64F824B1CAC1" 값을 이용해 직접 다운로드 후 로컬에 경로를 맞춰 저장해도 WinDbg Preview에서 사용할 수 있습니다.
[이 글에 대해서 여러분들과 의견을 공유하고 싶습니다. 틀리거나 미흡한 부분 또는 의문 사항이 있으시면 언제든 댓글 남겨주십시오.]