为什么 SymGetSymFromAddr64 无法正常工作？它返回错误代码 126

Why isn't SymGetSymFromAddr64 working? It returns error code 126

本文关键字：返回 错误代码 工作 SymGetSymFromAddr64 常工作 为什么      更新时间：2023-10-16

我试图使用以下代码捕获异常的堆栈跟踪:

#include "stdafx.h"
#include <process.h>
#include <iostream>
#include <Windows.h>
#include "dbghelp.h"
using namespace std;
#define TRACE_MAX_FUNCTION_NAME_LENGTH 1024
void function2()
{
    int a = 0;
    int b = 0;
    throw new exception;
}
void function1()
{
    int a = 0;
    function2();
}
void function0()
{
    function1();
}
LONG WINAPI FatalExceptionFilter(EXCEPTION_POINTERS* exception, DWORD exceptionCode)
{
    CONTEXT *context = exception->ContextRecord;
    HANDLE thread = GetCurrentThread();
    HANDLE process = GetCurrentProcess();
    STACKFRAME64 frame;
    DWORD image;
#ifdef _M_IX86
    image = IMAGE_FILE_MACHINE_I386;
    frame.AddrPC.Offset = context->Eip;
    frame.AddrPC.Mode = AddrModeFlat;
    frame.AddrFrame.Offset = context->Ebp;
    frame.AddrFrame.Mode = AddrModeFlat;
    frame.AddrStack.Offset = context->Esp;
    frame.AddrStack.Mode = AddrModeFlat;
#elif _M_X64
    image = IMAGE_FILE_MACHINE_AMD64;
    frame.AddrPC.Offset = context->Rip;
    frame.AddrPC.Mode = AddrModeFlat;
    frame.AddrFrame.Offset = context->Rsp;
    frame.AddrFrame.Mode = AddrModeFlat;
    frame.AddrStack.Offset = context->Rsp;
    frame.AddrStack.Mode = AddrModeFlat;
#elif _M_IA64
    image = IMAGE_FILE_MACHINE_IA64;
    frame.AddrPC.Offset = context->StIIP;
    frame.AddrPC.Mode = AddrModeFlat;
    frame.AddrFrame.Offset = context->IntSp;
    frame.AddrFrame.Mode = AddrModeFlat;
    frame.AddrBStore.Offset = context->RsBSP;
    frame.AddrBStore.Mode = AddrModeFlat;
    frame.AddrStack.Offset = context->IntSp;
    frame.AddrStack.Mode = AddrModeFlat;
#else
#error "This platform is not supported."
#endif
    IMAGEHLP_SYMBOL64 *symbol = (IMAGEHLP_SYMBOL64 *)malloc(sizeof(IMAGEHLP_SYMBOL64)+(TRACE_MAX_FUNCTION_NAME_LENGTH - 1) * sizeof(TCHAR));
    symbol->MaxNameLength = TRACE_MAX_FUNCTION_NAME_LENGTH;
    symbol->SizeOfStruct = sizeof(IMAGEHLP_SYMBOL64); 
    IMAGEHLP_LINE64 *line = (IMAGEHLP_LINE64 *)malloc(sizeof(IMAGEHLP_LINE64));
    line->SizeOfStruct = sizeof(IMAGEHLP_LINE64);
    while (StackWalk64(image, process, thread, &frame, context, NULL, NULL, NULL, NULL))
    {
        DWORD64 displacement64;
        if (SymGetSymFromAddr64(process, frame.AddrPC.Offset, &displacement64, symbol))
        {
            DWORD displacement;
            if (SymGetLineFromAddr64(process, frame.AddrPC.Offset, &displacement, line))
            {
                printf("tat %s in %s: line: %lu: address: 0x%0Xn", symbol->Name, line->FileName, line->LineNumber, symbol->Address);
            }
            else
            {
                printf("Error from SymGetLineFromAddr64: %lu.n", GetLastError());
            }
        }
        else
        {
            printf("Error from SymGetSymFromAddr64: %lu.n", GetLastError());
        }
    }
    return EXCEPTION_EXECUTE_HANDLER;
}
static void threadFunction(void *param)
{
    __try
    {
        function0();
    }
    __except (FatalExceptionFilter(GetExceptionInformation(), GetExceptionCode()))
    { }
}
int _tmain(int argc, _TCHAR* argv[])
{
    _beginthread(threadFunction, 0, NULL);
    printf("Press any key to exit.n");
    cin.get();
    return 0;
}
输出:

Press any key to exit.
Error from SymGetSymFromAddr64: 126.
Error from SymGetSymFromAddr64: 126.
Error from SymGetSymFromAddr64: 126.
Error from SymGetSymFromAddr64: 126.
Error from SymGetSymFromAddr64: 126.
Error from SymGetSymFromAddr64: 126.
Error from SymGetSymFromAddr64: 126.
Error from SymGetSymFromAddr64: 126.
Error from SymGetSymFromAddr64: 126.
Error from SymGetSymFromAddr64: 126.

我有点困惑，为什么SymGetSymFromAddr64失败。什么好主意吗?

126应该是一个缺失的依赖，但我有DLL在适当的文件夹…我在Windows 8.1 x64 PC上使用Win32平台调试构建的msvc++控制台应用程序中运行这一切。那么是什么导致了这个问题呢?

Update: Dependency walker告诉我它找不到API-MS-WIN-SERVICE-PRIVATE-L1-1-1.DLL

你的代码也有同样的问题

修复:

HANDLE process = GetCurrentProcess();
SymInitialize( process,NULL,TRUE );

注意:现在，SymGetLineFromAddr64对一些大地址失败，错误487 (ERROR_INVALID_ADDRESS)

使用以下代码进行跟踪:

printf("Error from SymGetLineFromAddr64: %lu for address 0x%I64x.n",
       GetLastError(),
       frame.AddrPC.Offset);

编辑:当我在Visual Studio中使用Go to Disassembly并输入使SymGetLineFromAddr64失败的第一个地址(这里，它是0x000000005a03da08)时，它显示了源代码:

f: dd vctools crt_bld crt prebuild 嗯 self_x86 throw.cpp

相关文章：