2016-11-13 211 views
2

我试图调试可执行notepad.exe(来自Windows 10发行版),并且符号ntdll.pdb从Microsoft符号服务器是必需的,但调试器返回一个错误,他们不能找到指定的文件:WinDbg找不到MS符号服务器上的ntdll符号

0:000> .reload 
Reloading current modules 
................................. 
SYMSRV: BYINDEX: 0x25 
     http://msdl.microsoft.com/download/symbols 
     ntdll.pdb 
     BC08E2B7EBB349A18DCE18BE9AA6660E1 
SYMSRV: HTTPGET: /download/symbols/ntdll.pdb/BC08E2B7EBB349A18DCE18BE9AA6660E1/ntdll.pdb 
SYMSRV: HttpQueryInfo: 404 - HTTP_STATUS_NOT_FOUND 
SYMSRV: HTTPGET: /download/symbols/ntdll.pdb/BC08E2B7EBB349A18DCE18BE9AA6660E1/ntdll.pd_ 
SYMSRV: HttpQueryInfo: 404 - HTTP_STATUS_NOT_FOUND 
SYMSRV: HTTPGET: /download/symbols/ntdll.pdb/BC08E2B7EBB349A18DCE18BE9AA6660E1/file.ptr 

SYMSRV: HttpQueryInfo: 404 - HTTP_STATUS_NOT_FOUND 
SYMSRV: C:\ProgramData\dbg\sym\ntdll.pdb\BC08E2B7EBB349A18DCE18BE9AA6660E1\ntdll.pdb - file not found 
SYMSRV: http://msdl.microsoft.com/download/symbols/ntdll.pdb/BC08E2B7EBB349A18DCE18BE9AA6660E1/ntdll.pdb not found 
SYMSRV: C:\ProgramData\dbg\sym\ntdll.pdb\BC08E2B7EBB349A18DCE18BE9AA6660E1\ntdll.pdb not found 
DBGHELP: C:\WINDOWS\SYSTEM32\ntdll.pdb - file not found 
DBGHELP: ntdll.pdb - file not found 
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll - 
DBGHELP: ntdll - export symbols 

************* Symbol Loading Error Summary ************** 
Module name   Error 
SharedUserData   No error - symbol load deferred 
       Symbol loading has been deferred because this symbol is not needed 
       at this time. Use reload /f to force load symbols. 

ntdll     The system cannot find the file specified : http://msdl.microsoft.com/download/symbols 
       The SYMSRV client failed to find a file in the UNC store, or there 
       is an invalid UNC store (an invalid path or the pingme.txt file is 
       not present in the root directory), or the file is present in the 
       symbol server exclusion list. 

MS服务器可能不包含所需的符号吗?

是:版本10.0.14393.447(rs1_release_inmarket.161102-0100)

+0

好的,那里接缝是一个问题。我会联系我的微软联系人 – magicandre1981

+3

MS现在调查这个问题。他们知道4个Windows 10版本的符号丢失 – magicandre1981

+0

再次尝试。 PDB现在在线 – magicandre1981

回答

0

的NTDLL.PDB(ntdll.pdb\BC08E2B7EBB349A18DCE18BE9AA6660E1\ntdll.pdb)已经上线,我能得到的PDB:

00007ffb`c79c0000 00007ffb`c7b91000 ntdll  
(pdb symbols) d:\sym\dl\nt\ntdll.pdb\BC08E2B7EBB349A18DCE18BE9AA6660E1\ntdll.pdb 
    Loaded symbol image file: ntdll.dll 
    Image path: C:\Windows\System32\ntdll.dll 
    Image name: ntdll.dll 
    Browse all global symbols functions data 
    Timestamp:  Wed Nov 2 11:13:06 2016 (5819BC32) 
    CheckSum:   001DA569 
    ImageSize:  001D1000 
    File version:  10.0.14393.447 
    Product version: 10.0.14393.447 
    File flags:  0 (Mask 3F) 
    File OS:   40004 NT Win32 
    File type:  2.0 Dll 
    File date:  00000000.00000000 
    Translations:  0409.04b0 
    CompanyName:  Microsoft Corporation 
    ProductName:  Microsoft® Windows® Operating System 
    InternalName:  ntdll.dll 
    OriginalFilename: ntdll.dll 
    ProductVersion: 10.0.14393.447 
    FileVersion:  10.0.14393.447 (rs1_release_inmarket.161102-0100) 
    FileDescription: NT Layer DLL 
    LegalCopyright: © Microsoft Corporation. All rights reserved. 

因此,尝试再次加载符号。

+0

符号再次不匹配,NTDLL SIG:F999943D-F7FB-4B8E-B6D9-9F2B047BC310,PDB SIG:HttpQueryInfo:BC08E2B7-EBB3-49A1-8DCE-18BE9AA6660E – kerem

+0

与SYMSRV失败502 - HTTP_STATUS_BAD_GATEWAY – kerem

+0

@kerem你有哪个版本?还10.0.14393.447? x86或x64 DLL/PDB? – magicandre1981