CODEWITHSUNDEEP
windowsdebuggingwindbg
abir
abir

Reputation: 1797

How to attach to a already running process noninvasively

I have a process suspended at breakpoint under visual studio debugger. I can attach as many as cdb (Microsoft's console debugger) in non-invasive mode as 

cdb -p pid -pvr

How to achieve the same using my own program which uses Debug Engine API. 

 IDebugClient* debugClient = 0;
(DebugCreate( __uuidof(IDebugClient), (void **)&debugClient );
 debugClient->AttachProcess(0,id,DEBUG_ATTACH_NONINVASIVE
                |DEBUG_ATTACH_NONINVASIVE_NO_SUSPEND);

This code causes E_INVALIDARG. Is this combination is not allowed ? The one below works, but when it calls GetStackTrace, it returns E_UNEXPECTED. 

debugClient->AttachProcess(0,id,DEBUG_ATTACH_NONINVASIVE);
debugControl->GetStackTrace(0, 0, 0, pStackFrames, maxFrames, &framesFilled);

I am interested to attach to a process already at debug break noninvasive way , and get a few local variable from its current stack & some global variable value.

Secondly, can someone point me the function used to dump the content of memory for a symbol iteratively like !stl does. I need to write a plugin to dump one of my vector like structure.

Thanks

Upvotes: 1

Views: 1236

Answers (1)

deemok
deemok

Reputation: 2753

I believe there's nothing wrong with 

DEBUG_ATTACH_NONINVASIVE|DEBUG_ATTACH_NONINVASIVE_NO_SUSPEND

combination - it is perfectly permissible and is even featured in assert sample. Otherwise, as far as documentation goes - it is not that detailed. I would suggest debugging your extension with the help of wt (trace and watch data) - it is particularly useful when you need to locate the exact subroutine that is returning an error which might provide you with better insight on the problem.

As for remotely accessing typed data in your apps from an extension, I've found ExtRemoteTyped class (available in engextcpp.hpp in the sdk subfolder) to be very helpful and intuitive to use.

Upvotes: 2

Related Questions