SoftIce on HVM

SoftIce on HVM

[Guy Zana]

[-- Attachment #1.1: Type: text/plain, Size: 154 bytes --]

Hi,
 
Did someone install Softice successfully inside an HVM?
Any kind of Windows kernel debugging practices are appreciated :-)
 
Thanks,
Guy.
 

[-- Attachment #1.2: Type: text/html, Size: 993 bytes --]

[-- Attachment #2: Type: text/plain, Size: 138 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel

Re: SoftIce on HVM

[Mats Petersson]

At 09:24 18/07/2007, Guy Zana wrote:
>Content-class: urn:content-classes:message
>Content-Type: multipart/alternative;
>         boundary="----_=_NextPart_001_01C7C915.74387B5F"
>
>Hi,
>
>Did someone install Softice successfully inside an HVM?


Haven't tried it, but I don't see why it shouldn't work - what 
problem(s) are you seeing?

>Any kind of Windows kernel debugging practices are appreciated :-)

Have you tried WindBag (windbg)?

--
Mats

>
>Thanks,
>Guy.
>
>_______________________________________________
>Xen-devel mailing list
>Xen-devel@lists.xensource.com
>http://lists.xensource.com/xen-devel

RE: SoftIce on HVM

[Guy Zana]

 

> -----Original Message-----
> From: mats petersson [mailto:mats.o.petersson@googlemail.com] 
> On Behalf Of Mats Petersson
> Sent: Wednesday, July 18, 2007 11:33 AM
> To: Guy Zana; xen-devel@lists.xensource.com
> Subject: Re: [Xen-devel] SoftIce on HVM
> 
> At 09:24 18/07/2007, Guy Zana wrote:
> >Content-class: urn:content-classes:message
> >Content-Type: multipart/alternative;
> >         boundary="----_=_NextPart_001_01C7C915.74387B5F"
> >
> >Hi,
> >
> >Did someone install Softice successfully inside an HVM?
> 
> 
> Haven't tried it, but I don't see why it shouldn't work - what
> problem(s) are you seeing?

A 0x8e bugcheck (KERNEL_MODE_EXCEPTION_NOT_HANDLED)
Haven't looked at it thoroughly but the address falls inside ntoskrnl.exe
This happens when I start softice.

> 
> >Any kind of Windows kernel debugging practices are appreciated :-)
> 
> Have you tried WindBag (windbg)?

Yep, It is extremely slow, IIRC I had some problems with non breaking breakpoints ;-)
(I tried a 19200 baud rate serial connection)

Any case, I prefer SoftIce, but if that's not possible than I'll have to work something out with windbg.

Thanks,
Guy.

RE: SoftIce on HVM

[Mats Petersson]

At 09:40 18/07/2007, Guy Zana wrote:
>
>
> > -----Original Message-----
> > From: mats petersson [mailto:mats.o.petersson@googlemail.com]
> > On Behalf Of Mats Petersson
> > Sent: Wednesday, July 18, 2007 11:33 AM
> > To: Guy Zana; xen-devel@lists.xensource.com
> > Subject: Re: [Xen-devel] SoftIce on HVM
> >
> > At 09:24 18/07/2007, Guy Zana wrote:
> > >Content-class: urn:content-classes:message
> > >Content-Type: multipart/alternative;
> > >         boundary="----_=_NextPart_001_01C7C915.74387B5F"
> > >
> > >Hi,
> > >
> > >Did someone install Softice successfully inside an HVM?
> >
> >
> > Haven't tried it, but I don't see why it shouldn't work - what
> > problem(s) are you seeing?
>
>A 0x8e bugcheck (KERNEL_MODE_EXCEPTION_NOT_HANDLED)
>Haven't looked at it thoroughly but the address falls inside ntoskrnl.exe
>This happens when I start softice.


What's the rest of the error codes (particularly the first parameter 
after 0x8e)?

Is this on a SVM or VT machine?

--
Mats


> >
> > >Any kind of Windows kernel debugging practices are appreciated :-)
> >
> > Have you tried WindBag (windbg)?
>
>Yep, It is extremely slow, IIRC I had some problems with non 
>breaking breakpoints ;-)
>(I tried a 19200 baud rate serial connection)
>
>Any case, I prefer SoftIce, but if that's not possible than I'll 
>have to work something out with windbg.
>
>Thanks,
>Guy.

RE: SoftIce on HVM

[Guy Zana]

 

> -----Original Message-----
> From: mats petersson [mailto:mats.o.petersson@googlemail.com] 
> On Behalf Of Mats Petersson
> Sent: Wednesday, July 18, 2007 12:31 PM
> To: Guy Zana; xen-devel@lists.xensource.com
> Subject: RE: [Xen-devel] SoftIce on HVM
> 
>A 0x8e bugcheck (KERNEL_MODE_EXCEPTION_NOT_HANDLED)
> >Haven't looked at it thoroughly but the address falls inside 
> >ntoskrnl.exe This happens when I start softice.
> 
> 
> What's the rest of the error codes (particularly the first 
> parameter after 0x8e)?

0x80000004 (STATUS_SINGLE_STEP), didn't investigate the internals of this status code but it seems like a native thing for SoftIce to do, but no one catches the exception, it means that no debugger is attached.
Actually, I get the softice command window with the bug check code and parameters (faults are on), When I close the window I see the blue screen.

> 
> Is this on a SVM or VT machine?
> 

It is a VT machine. 

Thanks,
Guy.

Re: SoftIce on HVM

[陈诚]

2007/7/18, Guy Zana <guy@neocleus.com>:
>
>
> > -----Original Message-----
> > From: mats petersson [mailto:mats.o.petersson@googlemail.com]
> > On Behalf Of Mats Petersson
> > Sent: Wednesday, July 18, 2007 12:31 PM
> > To: Guy Zana; xen-devel@lists.xensource.com
> > Subject: RE: [Xen-devel] SoftIce on HVM
> >
> >A 0x8e bugcheck (KERNEL_MODE_EXCEPTION_NOT_HANDLED)
> > >Haven't looked at it thoroughly but the address falls inside
> > >ntoskrnl.exe This happens when I start softice.
> >
> >
> > What's the rest of the error codes (particularly the first
> > parameter after 0x8e)?
>
> 0x80000004 (STATUS_SINGLE_STEP), didn't investigate the internals of this status code but it seems like a native thing for SoftIce to do, but no one catches the exception, it means that no debugger is attached.
> Actually, I get the softice command window with the bug check code and parameters (faults are on), When I close the window I see the blue screen.
>
> >
> > Is this on a SVM or VT machine?
> >
>
> It is a VT machine.
>
> Thanks,
> Guy.
>
> _______________________________________________
> Xen-devel mailing list
> Xen-devel@lists.xensource.com
> http://lists.xensource.com/xen-devel
>

I have encountered the same problem, does anyone have a solution?