Reading Notebook: 25-May-09
Monday, May 25th, 2009Resuming reading notebook after the long silence
Comments in italics are mine and express my own views, thoughts and opinions
Advanced Windows Debugging by M. Hewardt and D. Pravat:
LPC protocol was built with debugging in mind (p. 382)
LPC communication steps: NtCreatePort (s) -> NtListenPort (s) -> NtConnectPort (c) -> NtAcceptConnectPort (s) -> NtCompleteConnectPort (s) -> NtRequestWaitReplyPort (c) -> NtReplyWaitReceivePort (s) (pp. 383 - 384) - Actually LPC message ID is stored in _ETHREAD not in _KTHREAD, for example:+0×3f0 LpcReplyMessageId : 0xd50b74d
!lpc thread WinDbg command to show all LPC activity (pp. 386 - 387)
Concurrent Programming on Windows by J. Duffy:
Software Factories by J. Greenfield, et. al.:
Software Engineering Foundations: A Software Science Perspective, by Y. Wang:
Didn’t have time today - resume reading tomorrow
- Dmitry Vostokov @ SoftwareGeneralist.com -