朋友让我帮忙看一个dump, 我打开看了看, 发现一个怪异的问题.
用命令"~*e!clrstack"查看所有线程的托管调用栈, 居然说所有的线程都不是托管线程.
0:045> ~*e!clrstack
OS Thread Id: 0x16d4 (0)
Unable to walk the managed stack. The current thread is likely not a
managed thread. You can run !threads to get a list of managed threads in
the process
OS Thread Id: 0x260c (1)
Unable to walk the managed stack. The current thread is likely not a
managed thread. You can run !threads to get a list of managed threads in
the process
用"~*e k" 明明看到有如下这样的调用栈:
Child-SP RetAddr Call Site
00000000`02baf698 000007fe`fd2010ac ntdll!NtWaitForSingleObject+0xa
00000000`02baf6a0 000007fe`f4cc9b96 KERNELBASE!WaitForSingleObjectEx+0x79
00000000`02baf740 000007fe`f4cc9a9f mscorwks!CLREventWaitHelper+0x42 [f:\dd\ndp\clr\src\vm\synch.cpp @ 699]
00000000`02baf7a0 000007fe`f4cc97fb mscorwks!CLREvent::WaitEx+0x63 [f:\dd\ndp\clr\src\vm\synch.cpp @ 798]
00000000`02baf850 000007fe`f4cba44a mscorwks!ThreadpoolMgr::SafeWait+0x7b [f:\dd\ndp\clr\src\vm\win32threadpool.cpp @ 3042]
00000000`02baf910 000007fe`f4d1095c mscorwks!ThreadpoolMgr::WorkerThreadStart+0x11a [f:\dd\ndp\clr\src\vm\win32threadpool.cpp @ 2721]
00000000`02baf9b0 00000000`76f8f56d mscorwks!Thread::intermediateThreadProc+0x78 [f:\dd\ndp\clr\src\vm\threads.cpp @ 3060]
00000000`02bafb80 00000000`771c3281 kernel32!BaseThreadInitThunk+0xd
00000000`02bafbb0 00000000`00000000 ntdll!RtlUserThreadStart+0x1d
注意看其中的mscorwks, 明明是托管的模块呀.
问了一下同事, 得到了的答复是: "这是一个已知问题." 可以使用命令"lmvm clr", 看输出结果中是不是带有.net framework 4.0的信息.
0:045> lmvm clr
start end module name
000007fe`f96a0000 000007fe`fa005000 clr (pdb symbols) d:\symcache\clr.pdb\0A821B8A573E42899202851DF6A539F12\clr.pdb
Loaded symbol image file: clr.dll
Image path: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Image name: clr.dll
Timestamp: Thu Mar 18 20:39:07 2010 (4BA21EEB)
CheckSum: 00959DBD
ImageSize: 00965000
File version: 4.0.30319.1
Product version: 4.0.30319.1
File flags: 8 (Mask 3F) Private
File OS: 4 Unknown Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® .NET Framework
InternalName: clr.dll
OriginalFilename: clr.dll
ProductVersion: 4.0.30319.1
FileVersion: 4.0.30319.1 (RTMRel.030319-0100)
PrivateBuild: DDBLD431
FileDescription: Microsoft .NET Runtime Common Language Runtime - WorkStation
LegalCopyright: © Microsoft Corporation. All rights reserved.
Comments: Flavor=Retail
如上所示, 这个dump中带有.net framework 4.0。 而这个dump中需要查看的是.net 2.0的application的问题, 所以, 在这个dump中, 包含了2.0和4.0两个版本的framework. 所以WinDBG就confuse了, 不知道该加载哪一个版本的mscordacwks的dll.
解决方法
===============
运行命令".cordll -ve -u -I mscorwks -l"
0:045> .cordll -ve -u -I mscorwks -l
CLRDLL: C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll:2.0.50727.4952 f:0
doesn't match desired version 2.0.50727.4927 f:0
DBGHELP: d:\symcache\mscordacwks_AMD64_AMD64_2.0.50727.4927.dll\4A27466F9ae000\mscordacwks_AMD64_AMD64_2.0.50727.4927.dll - OK
CLRDLL: Loaded DLL d:\symcache\mscordacwks_AMD64_AMD64_2.0.50727.4927.dll\4A27466F9ae000\mscordacwks_AMD64_AMD64_2.0.50727.4927.dll
CLR DLL status: Loaded DLL d:\symcache\mscordacwks_AMD64_AMD64_2.0.50727.4927.dll\4A27466F9ae000\mscordacwks_AMD64_AMD64_2.0.50727.4927.dll
再看该dump中的托管调用栈, 问题解决.