Software Generalist

Resuming reading notebook after the long silence

Comments in italics are mine and express my own views, thoughts and opinions

Advanced Windows Debugging by M. Hewardt and D. Pravat:

LPC protocol was built with debugging in mind (p. 382)

LPC communication steps: NtCreatePort (s) -> NtListenPort (s) -> NtConnectPort (c) -> NtAcceptConnectPort (s) -> NtCompleteConnectPort (s) -> NtRequestWaitReplyPort (c) -> NtReplyWaitReceivePort (s) (pp. 383 - 384) - Actually LPC message ID is stored in _ETHREAD not in _KTHREAD, for example:+0×3f0 LpcReplyMessageId : 0xd50b74d

!lpc thread WinDbg command to show all LPC activity (pp. 386 - 387)

Concurrent Programming on Windows by J. Duffy:

Software Factories by J. Greenfield, et. al.:

Software Engineering Foundations: A Software Science Perspective, by Y. Wang:

Didn’t have time today - resume reading tomorrow

- Dmitry Vostokov @ SoftwareGeneralist.com -

           

Announcements

Coming Soon:

Management Bits: An Anthology from Reductionist Manager

Crash Dump Analysis: Practical Foundations (Windows Edition, Systematic Software Fault Analysis Series)

Debugging Notebook: Essential Concepts, WinDbg Commands and Tools

Crash Dump Analysis for System Administrators and Support Engineers

New Magazines:

Debugged! MZ/PE: MagaZine for/from Practicing Engineers

New Books:

Memory Dump Analysis Anthology: Color Supplement for Volumes 1-3

Memory Dump Analysis Anthology, Volume 3

First Fault Software Problem Solving: A Guide for Engineers, Managers and Users

x64 Windows Debugging: Practical Foundations

Also available:

Windows Debugging: Practical Foundations

DLL List Landscape: The Art from Computer Memory Space

Dumps, Bugs and Debugging Forensics: The Adventures of Dr. Debugalov

WinDbg: A Reference Poster and Learning Cards

Memory Dump Analysis Anthology, Volume 2

Memory Dump Analysis Anthology, Volume 1

New Children's Book:

Baby Turing

This entry was posted on Monday, May 25th, 2009 at 11:59 pm and is filed under Notes on Advanced Windows Debugging, Reading Notebook. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.