search

Kwansy98 / EasyPdb

A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
105 stars 34 forks source link

dbgview unmatched issue #1

Open qwer0123456 opened 2 years ago

qwer0123456 commented 2 years ago
match

[19380] DBGHELP: ntkrnlmp - public symbols
[19380] D:\symboldownload\ntkrnlmp.pdb - unmatched

If you synchronize symbols, Dbgview prints a message it is not a valid match.

Is it a coding problem or a bug?

Kwansy98 commented 2 years ago

image

Remove SYMOPT_DEBUG flag can simply disable the log. I modify the code and now it can analyze pdb info of personal program not just microsoft's dll. I've test it and got the same log:

log

I am sure that the EasyArk.pdb will match EasyArk.sys(boths of them generated by visual studio at the same time) , so i don't understand why i got "unmatched". And i get the correct rva/offset from EasyArk.pdb, so maybe we can just ignore this log. XD

qwer0123456 commented 2 years ago

1.dbghelp.dll File Error

  1. File Compare uppercase and lowercase error 3.GUID path 4.Symbol function option
  2. Microsoft operating system bug

There are 5 reasons that come to mind

easypdb was a good tool because it was easy to use

There is no problem with the function, but I think it is a unknows bug