HomeBlogAbout Me

The Symbol File Ntdll Pdb Does Not Match The Module



Question

MichaelEngstler on Sun, 27 Nov 2016 10:43:24

Symbols of modules with full PDB symbols will be lazily reloaded if the new path no longer includes the original path that was used to load the PDB symbols. If the new path still includes the original path to the PDB symbol file, those symbols will not be lazily reloaded. For more information about lazy symbol loading, see Deferred Symbol Loading. Mar 30, 2007.


Hi,

For the past week, WinDbg fails to find symbols for ntdll.dll even though I'm using Microsoft's Symbol Server (https://msdl.microsoft.com/download/symbols).

Busycal 3 5 7. Ioncube decoder v2 exe. I'v tried everything, from manually download Microsoft Symbol Packages to reloading all the symbols in WinDbg, but it seems that the PDB file is simply missing in Microsoft's Symbol Server.

P.S. I'm using the latest version of Windows 10.

Records — database and organizer 1 5 2. Thanks,

Michael.


Sponsored

Replies

MaybeCompletelyW on Sun, 27 Nov 2016 12:29:39


Symbol-server has hickups .
https://social.msdn.microsoft.com/Forums/vstudio/en-US/35a31403-24f5-4552-8e3c-4c65f2b98c17/microsoft-symbol-server-is-slowbroken?forum=windbg

If it is
x86
F999943DF7FB4B8EB6D99F2B047BC3101wntdll.pdb
x64
BC08E2B7EBB349A18DCE18BE9AA6660E1ntdll.pdb

Try symbol server - without the https
http://msdl.microsoft.com/download/symbols

Probably you have to retry the latter several times .

johnbowen on Fri, 02 Dec 2016 18:25:58


The Symbol File Ntdll Pdb Does Not Match The Module

Flinto 23 1. I have this issue as well. Using WinDbg x64 (10.0.14321.1024).

Windows 10 (10.0.10586)

WinDbg details and symbol loading information:


MaybeCompletelyW on Fri, 02 Dec 2016 20:49:56


Looks like
EBACFB2C299D49E1BFDC3EB3F9E6B2191ntdll.pdb
(12/1/2016) is missing on MS-symbol-server.
See connect feedback
https://connect.microsoft.com/VisualStudio/feedback/details/3113570/https-msdl-microsoft-com-download-symbols-symbol-server-is-down-since-days
which you may probably want to vote.

Besides, if you get a reliable connection to server with
https://msdl.microsoft.com/download/symbols
would prefer the secure one.

Edit: See also

https://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/9a9513cb-468b-43ac-a289-80d8a2879d02/where-to-find-windows-10-symbols-for-october-25-2016-build?forum=windbg

I was debugging some issues with the help of Application Verifier and WinDbg. Since I was onsite I did not have any access to Microsoft’s private symbol servers, so I was using the public symbol server (http://msdl.microsoft.com/download/symbols). On executing the !avrf extension command in WinDbg I was presented with the following error message in WinDbg: Bora uslusoy gitar metodu pdf.

*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: vfbasics!_AVRF_EXCEPTION_LOG_ENTRY ***

It turns out that my WinDbg symbol path was as follows, and due to it pointing just to the public symbol server it was loading public symbols for vfbasics.dll:

0:001> .sympath
Symbol search path is: SRV*c:localsymbols*
http://msdl.microsoft.com/download/symbols
Expanded Symbol search path is: srv*c:localsymbols*http://msdl.microsoft.com/download/symbols
0:001> lml
start end module name
00000000`76dc0000 00000000`76f68000 ntdll (pdb symbols) c:localsymbolsntdll.pdbFDAD9EE7D6E44F4F9672ECB401A802192ntdll.pdb
000007fe`f0e50000 000007fe`f0ebe000 verifier (pdb symbols) c:localsymbolsverifier.pdb43FCE2D63C4544F9B1C67110EB3406951verifier.pdb
000007fe`f1660000 000007fe`f1693000 vrfcore (pdb symbols) c:localsymbolsvrfcore.pdb751D23CCD6504794AF2F18C1E547FE371vrfcore.pdb
000007fe`f28e0000 000007fe`f292a000 vfbasics (pdb symbols) c:localsymbolsvfbasics.pdb1ABCDFEFF9F4602A7F055801457A7D61vfbasics.pdb

To resolve the issue, I explicitly pre-pended the path to private symbols for vfbasics (which is c:windowssystem32 or in general %WINDIR%System32:

How to wipe macbook air hard drive. .sympath c:windowssystem32*SRV*c:localsymbols*http://msdl.microsoft.com/download/symbols

.reload

ld vfbasics

0:001> lml
start end module name
00000000`76dc0000 00000000`76f68000 ntdll (export symbols) C:WindowsSYSTEM32ntdll.dll
000007fe`f28e0000 000007fe`f292a000 vfbasics (private pdb symbols) C:WindowsSYSTEM32vfbasics.pdb

The Symbol File Ntdll Pdb Does Not Match The Module 2

Symbol

The Symbol File Ntdll Pdb Does Not Match The Module Pdf

Then !avrf works just fine!

The Symbol File Ntdll Pdb Does Not Match The Module 3

If you liked this post, please do rate it and try to leave some comments if you can! Autocom 2016 keygen.





The Symbol File Ntdll Pdb Does Not Match The Module
Back to posts
This post has no comments - be the first one!

UNDER MAINTENANCE

XtGem Forum catalog