A question regarding driver and memory region
Hi everybody, and sorry if i have posted this question in wrong forum, i'm a new commer only. Actually i faced the problem when doing troubleshooting the drivers conflict case. From the dump file analysis with Win Debugger i know there was a kernel mode program conflict ( most properly driver conflict ) at specific memory region ( to simplize it lets call it region A ). So if the driver conflict occur at memory region A, it mean that at the same time there should be at least 2 device driver ( or in general 2 kernel-mode program ) were writing to this memory region ? 1st : Is this possible for me to know which driver is writing to this region at this specific time ? If yes, which tools i have to use ? 2nd : If the 1st option is not possible, so is there something like lookup table in which all the driver details ( including which memory region its going to operate on ) are listed ? Because from my experience, Linux does offer a table like this. 3rd : If both 2 options above are not possible, so any expert please can guide me and help me some useful documents regarding this topic. Thank you very much. Your sincerely.
May 14th, 2009 1:17pm
This is a forum for Exchange Server, so there wont be too many people that can help you with debugging unfortunately. This site, http://advancedwindowsdebugging.com/ has a list of FAQ and some examples, this might help you out. If not I'd post it in this Debugging newsgroup. http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windbg&lang=en&cr=US Mark Morowczynski|MCSE 2003:Messaging, Security|MCITP:ES, SA|MCTS:Windows Mobile Admin|Security+|http://almostdailytech.com
Free Windows Admin Tool Kit Click here and download it now
May 14th, 2009 4:52pm
Thanks Mark for your reply, i will create a thread in Win Debugging forum. Your sincerely.
May 14th, 2009 5:36pm