编程技术-Dump分析之线程未退出造成程序崩溃

1. 载入dump文件
   

2. 执行!analyze -v命令
   

   生成如下结果:

   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323

   0 : 000 > !analyze - v * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *                                                                             * *                        Exception Analysis                                   * *                                                                             * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *   * * * WARNING: Unable to verify checksum for Qt5Widgets.dll * * * WARNING: Unable to verify checksum for Qt5Gui.dll * * * WARNING: Unable to verify checksum for qwindows.dll   KEY_VALUES_STRING: 1        Key  : AV.Fault      Value: Execute        Key  : Analysis.CPU.mSec      Value: 952        Key  : Analysis.Elapsed.mSec      Value: 3586        Key  : Analysis.IO.Other.Mb      Value: 0        Key  : Analysis.IO.Read.Mb      Value: 0        Key  : Analysis.IO.Write.Mb      Value: 0        Key  : Analysis.Init.CPU.mSec      Value: 374        Key  : Analysis.Init.Elapsed.mSec      Value: 154065        Key  : Analysis.Memory.CommitPeak.Mb      Value: 192        Key  : Failure.Bucket      Value: SOFTWARE_NX_FAULT_c0000005_Qt5Core.dll!QMetaObject::cast        Key  : Failure. Hash      Value: { 8d8d331f - 0b04 - 8cd4 - 6ec8 - 5928245527c2 }        Key  : Timeline.Process.Start.DeltaSec      Value: 102650        Key  : WER.OS.Branch      Value: vb_release        Key  : WER.OS.Version      Value: 10.0 . 19041.1     FILE_IN_CAB:  crashdump[ 2023_11_02_09_32_29 ].dmp   CONTEXT:  (.ecxr) eax = 71dedb94 ebx = 012bd4d0 ecx = 041f4358 edx = 29eac848 esi = 6cf55108 edi = 041f4358 eip = 7d830675 esp = 010fd4b8 ebp = 041f4358 iopl = 0         nv up ei pl nz na po nc cs = 0023  ss = 002b  ds = 002b  es = 002b  fs = 0053  gs = 002b             efl = 00210202 7d830675 ??              ??? Resetting default scope   EXCEPTION_RECORD:  (.exr - 1 ) ExceptionAddress: 7d830675     ExceptionCode: c0000005 (Access violation)    ExceptionFlags: 00000000 NumberParameters: 2     Parameter[ 0 ]: 00000008     Parameter[ 1 ]: 7d830675 Attempt to execute non - executable address 7d830675   PROCESS_NAME:  LaserMaker.exe   EXECUTE_ADDRESS: 7d830675   FAILED_INSTRUCTION_ADDRESS: + 0 7d830675 ??              ???   ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x % p            0x % p                    % s   EXCEPTION_CODE_STR:  c0000005   EXCEPTION_PARAMETER1:  00000008   EXCEPTION_PARAMETER2:  7d830675   IP_ON_HEAP:  7d830675 The fault address in not in any loaded module, please check your build's rebase log at <releasedir>\ bin \build_logs\timebuild\ntrebase.log for module which may contain the address if it were loaded.   STACK_TEXT:  WARNING: Frame IP not in any known module. Following frames may be wrong. 010fd4b4 683e2972     683e2960 041f4358 6cb9704a 0x7d830675 010fd4c0 6cb9704a     041f4358 010fd69c 0128c4f8 Qt5Core!QMetaObject::cast + 0x12 010fd4e0 6cb60332     041f4358 010fd69c 041f4358 Qt5Widgets!QGestureManager::filterEvent + 0x1a 010fd624 683defe1     041f4358 010fd69c 7fbd5a58 Qt5Widgets!QApplication::notify + 0x192 010fd66c 6cb6453e     041f4358 010fd69c 1d00eff0 Qt5Core!QCoreApplication::notifyInternal2 + 0xb1 010fd6a4 6cb64b93     27316130 2975e7b8 00000001 Qt5Widgets!QApplicationPrivate::setPalette_helper + 0x1ee 010fd6bc 6cb5f170     010fd6d4 041f4a08 29eabdf8 Qt5Widgets!QApplicationPrivate::setSystemPalette + 0x63 010fd6d8 6cb621f3     29880170 69a4d8d2 00000000 Qt5Widgets!initSystemPalette + 0x70 010fd6e0 69a4d8d2     00000000 1d00eff0 29880170 Qt5Widgets!QApplicationPrivate::notifyThemeChanged + 0x33 010fd6f0 69a378d1     29880170 fffffffe 012a76e8 Qt5Gui!QGuiApplicationPrivate::processThemeChanged + 0x12 010fd710 6c7f1e72     00000024 00000113 6841fce8 Qt5Gui!QWindowSystemInterface::sendWindowSystemEvents + 0x161 010fd7a0 75a90f4b     003c0398 00000113 fffffffe qwindows!qt_plugin_query_metadata + 0x15e2 010fd7cc 75a87efa     6841fa00 003c0398 00000113 user32!_InternalCallWinProc + 0x2b 010fd8b0 75a85c6a     6841fa00 00000000 00000113 user32!UserCallWinProcCheckWow + 0x33a 010fd924 75a85a30     00000013 010ff5e4 6841f581 user32!DispatchMessageWorker + 0x22a 010fd930 6841f581     010ff5ac 7fbd79d0 012a76e8 user32!DispatchMessageW + 0x10 010ff6e4 6c7f1e55     00000024 043461a8 010ff784 Qt5Core!QEventDispatcherWin32::processEvents + 0x3c1 010ff744 683dde8d     00000000 7fbd7ba8 0128a6c8 qwindows!qt_plugin_query_metadata + 0x15c5 010ff79c 0056fd52     6405bd91 0059844c 012e0ae8 Qt5Core!QCoreApplication:: exec + 0x14d 010ff864 00581f04     00000001 0129f0d8 00000000 LaserMaker!main + 0x1c2 010ff8e4 771cfcc9     00eb7000 771cfcb0 010ff950 LaserMaker!WinMain + 0xe4 010ff8f4 77377c6e     00eb7000 bd63b1a2 00000000 kernel32!BaseThreadInitThunk + 0x19 010ff950 77377c3e     ffffffff 77398c2d 00000000 ntdll!__RtlUserThreadStart + 0x2f 010ff960 00000000     00581478 00eb7000 00000000 ntdll!_RtlUserThreadStart + 0x1b     STACK_COMMAND:  ~ 0s ; .ecxr ; kb   FAULTING_SOURCE_LINE:  c:\users\qt\work\qt\qtbase\src\corelib\kernel\qmetaobject.cpp   FAULTING_SOURCE_FILE:  c:\users\qt\work\qt\qtbase\src\corelib\kernel\qmetaobject.cpp   FAULTING_SOURCE_LINE_NUMBER:  355   FAULTING_SOURCE_CODE:  No source found for 'c:\users\qt\work\qt\qtbase\src\corelib\kernel\qmetaobject.cpp'     SYMBOL_NAME:  qt5core!QMetaObject::cast + 12   MODULE_NAME: Qt5Core   IMAGE_NAME:  Qt5Core.dll   FAILURE_BUCKET_ID:  SOFTWARE_NX_FAULT_c0000005_Qt5Core.dll!QMetaObject::cast   OS_VERSION:  10.0 . 19041.1   BUILDLAB_STR:  vb_release   OSPLATFORM_TYPE:  x86   OSNAME:  Windows 10   IMAGE_VERSION:  5.9 . 3.0   FAILURE_ID_HASH:  { 8d8d331f - 0b04 - 8cd4 - 6ec8 - 5928245527c2 }   Followup:     MachineOwner - - - - - - - - -          ```                生成如下结果:   ``` 6502 Assembly 0 : 000 > !analyze - v * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *                                                                             * *                        Exception Analysis                                   * *                                                                             * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *   * * * WARNING: Unable to verify checksum for Qt5Widgets.dll * * * WARNING: Unable to verify checksum for Qt5Gui.dll * * * WARNING: Unable to verify checksum for qwindows.dll   KEY_VALUES_STRING: 1        Key  : AV.Fault      Value: Execute        Key  : Analysis.CPU.mSec      Value: 952        Key  : Analysis.Elapsed.mSec      Value: 3586        Key  : Analysis.IO.Other.Mb      Value: 0        Key  : Analysis.IO.Read.Mb      Value: 0        Key  : Analysis.IO.Write.Mb      Value: 0        Key  : Analysis.Init.CPU.mSec      Value: 374        Key  : Analysis.Init.Elapsed.mSec      Value: 154065        Key  : Analysis.Memory.CommitPeak.Mb      Value: 192        Key  : Failure.Bucket      Value: SOFTWARE_NX_FAULT_c0000005_Qt5Core.dll!QMetaObject::cast        Key  : Failure. Hash      Value: { 8d8d331f - 0b04 - 8cd4 - 6ec8 - 5928245527c2 }        Key  : Timeline.Process.Start.DeltaSec      Value: 102650        Key  : WER.OS.Branch      Value: vb_release        Key  : WER.OS.Version      Value: 10.0 . 19041.1     FILE_IN_CAB:  crashdump[ 2023_11_02_09_32_29 ].dmp   CONTEXT:  (.ecxr) eax = 71dedb94 ebx = 012bd4d0 ecx = 041f4358 edx = 29eac848 esi = 6cf55108 edi = 041f4358 eip = 7d830675 esp = 010fd4b8 ebp = 041f4358 iopl = 0         nv up ei pl nz na po nc cs = 0023  ss = 002b  ds = 002b  es = 002b  fs = 0053  gs = 002b             efl = 00210202 7d830675 ??              ??? Resetting default scope   EXCEPTION_RECORD:  (.exr - 1 ) ExceptionAddress: 7d830675     ExceptionCode: c0000005 (Access violation)    ExceptionFlags: 00000000 NumberParameters: 2     Parameter[ 0 ]: 00000008     Parameter[ 1 ]: 7d830675 Attempt to execute non - executable address 7d830675   PROCESS_NAME:  LaserMaker.exe   EXECUTE_ADDRESS: 7d830675   FAILED_INSTRUCTION_ADDRESS: + 0 7d830675 ??              ???   ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x % p            0x % p                    % s   EXCEPTION_CODE_STR:  c0000005   EXCEPTION_PARAMETER1:  00000008   EXCEPTION_PARAMETER2:  7d830675   IP_ON_HEAP:  7d830675 The fault address in not in any loaded module, please check your build's rebase log at <releasedir>\ bin \build_logs\timebuild\ntrebase.log for module which may contain the address if it were loaded.   STACK_TEXT:  WARNING: Frame IP not in any known module. Following frames may be wrong. 010fd4b4 683e2972     683e2960 041f4358 6cb9704a 0x7d830675 010fd4c0 6cb9704a     041f4358 010fd69c 0128c4f8 Qt5Core!QMetaObject::cast + 0x12 010fd4e0 6cb60332     041f4358 010fd69c 041f4358 Qt5Widgets!QGestureManager::filterEvent + 0x1a 010fd624 683defe1     041f4358 010fd69c 7fbd5a58 Qt5Widgets!QApplication::notify + 0x192 010fd66c 6cb6453e     041f4358 010fd69c 1d00eff0 Qt5Core!QCoreApplication::notifyInternal2 + 0xb1 010fd6a4 6cb64b93     27316130 2975e7b8 00000001 Qt5Widgets!QApplicationPrivate::setPalette_helper + 0x1ee 010fd6bc 6cb5f170     010fd6d4 041f4a08 29eabdf8 Qt5Widgets!QApplicationPrivate::setSystemPalette + 0x63 010fd6d8 6cb621f3     29880170 69a4d8d2 00000000 Qt5Widgets!initSystemPalette + 0x70 010fd6e0 69a4d8d2     00000000 1d00eff0 29880170 Qt5Widgets!QApplicationPrivate::notifyThemeChanged + 0x33 010fd6f0 69a378d1     29880170 fffffffe 012a76e8 Qt5Gui!QGuiApplicationPrivate::processThemeChanged + 0x12 010fd710 6c7f1e72     00000024 00000113 6841fce8 Qt5Gui!QWindowSystemInterface::sendWindowSystemEvents + 0x161 010fd7a0 75a90f4b     003c0398 00000113 fffffffe qwindows!qt_plugin_query_metadata + 0x15e2 010fd7cc 75a87efa     6841fa00 003c0398 00000113 user32!_InternalCallWinProc + 0x2b 010fd8b0 75a85c6a     6841fa00 00000000 00000113 user32!UserCallWinProcCheckWow + 0x33a 010fd924 75a85a30     00000013 010ff5e4 6841f581 user32!DispatchMessageWorker + 0x22a 010fd930 6841f581     010ff5ac 7fbd79d0 012a76e8 user32!DispatchMessageW + 0x10 010ff6e4 6c7f1e55     00000024 043461a8 010ff784 Qt5Core!QEventDispatcherWin32::processEvents + 0x3c1 010ff744 683dde8d     00000000 7fbd7ba8 0128a6c8 qwindows!qt_plugin_query_metadata + 0x15c5 010ff79c 0056fd52     6405bd91 0059844c 012e0ae8 Qt5Core!QCoreApplication:: exec + 0x14d 010ff864 00581f04     00000001 0129f0d8 00000000 LaserMaker!main + 0x1c2 010ff8e4 771cfcc9     00eb7000 771cfcb0 010ff950 LaserMaker!WinMain + 0xe4 010ff8f4 77377c6e     00eb7000 bd63b1a2 00000000 kernel32!BaseThreadInitThunk + 0x19 010ff950 77377c3e     ffffffff 77398c2d 00000000 ntdll!__RtlUserThreadStart + 0x2f 010ff960 00000000     00581478 00eb7000 00000000 ntdll!_RtlUserThreadStart + 0x1b     STACK_COMMAND:  ~ 0s ; .ecxr ; kb   FAULTING_SOURCE_LINE:  c:\users\qt\work\qt\qtbase\src\corelib\kernel\qmetaobject.cpp   FAULTING_SOURCE_FILE:  c:\users\qt\work\qt\qtbase\src\corelib\kernel\qmetaobject.cpp   FAULTING_SOURCE_LINE_NUMBER:  355   FAULTING_SOURCE_CODE:  No source found for 'c:\users\qt\work\qt\qtbase\src\corelib\kernel\qmetaobject.cpp'     SYMBOL_NAME:  qt5core!QMetaObject::cast + 12   MODULE_NAME: Qt5Core   IMAGE_NAME:  Qt5Core.dll   FAILURE_BUCKET_ID:  SOFTWARE_NX_FAULT_c0000005_Qt5Core.dll!QMetaObject::cast   OS_VERSION:  10.0 . 19041.1   BUILDLAB_STR:  vb_release   OSPLATFORM_TYPE:  x86   OSNAME:  Windows 10   IMAGE_VERSION:  5.9 . 3.0   FAILURE_ID_HASH:  { 8d8d331f - 0b04 - 8cd4 - 6ec8 - 5928245527c2 }   Followup:     MachineOwner - - - - - - - - -

   

3. 输入~*kvn命令，查看所有线程堆栈
   生成如下结果：

   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50

   0 : 000 > ~ * kvn   .  0  Id : 236c . 494 Suspend: 0 Teb: 00eba000 Unfrozen   # ChildEBP RetAddr      Args to Child              00 010fcc94 76f28e49     000002b0 00000000 00000000 ntdll!NtWaitForSingleObject + 0xc (FPO: [ 3 , 0 , 0 ]) 01 010fcd08 76f28da2     000002b0 ffffffff 00000000 KERNELBASE!WaitForSingleObjectEx + 0x99 (FPO: [SEH]) 02 010fcd1c 0057c2e8     000002b0 ffffffff 012b3110 KERNELBASE!WaitForSingleObject + 0x12 (FPO: [Non - Fpo]) 03 010fcd34 0057bdfa     010fce4c 00000000 64058881 LaserMaker!google_breakpad::ExceptionHandler::WriteMinidumpOnHandlerThread + 0x88 04 010fcd74 1020a433     010fce4c 010fce1c 76ff2842 LaserMaker!google_breakpad::ExceptionHandler::HandleException + 0x10a 05 010fcd80 76ff2842     010fce4c 5d768e63 00000000 MSVCRTD!__CxxUnhandledExceptionFilter + 0x53 06 010fce1c 773b482e     010fce4c 773871d2 010ff950 KERNELBASE!UnhandledExceptionFilter + 0x192 (FPO: [Non - Fpo]) 07 010ff950 77377c3e     ffffffff 77398c2d 00000000 ntdll!__RtlUserThreadStart + 0x3cbef 08 010ff960 00000000     00581478 00eb7000 00000000 ntdll!_RtlUserThreadStart + 0x1b (FPO: [Non - Fpo])       1  Id : 236c . 22c0 Suspend: 0 Teb: 00ec6000 Unfrozen   # ChildEBP RetAddr      Args to Child              00 03daec24 7734b0e0     0002b000 6f138000 6f1100f8 ntdll!NtGetContextThread + 0xc (FPO: [ 2 , 0 , 0 ]) 01 03daef9c 77382cfc     03daf0e8 00000000 00000000 ntdll!LdrpResSearchResourceMappedFile + 0x380 (FPO: [Non - Fpo]) 02 03daf088 77382c0c     76f2768c 00001028 00000000 ntdll!NtQueryValueKey + 0xc (FPO: [ 6 , 0 , 0 ]) 03 03daf0c4 77382c7c     76f1e60b 00000000 7735d9bf ntdll!NtWriteFile + 0xc (FPO: [ 9 , 0 , 0 ]) 04 03daf108 7735ce92     0c2d05e8 00000000 76e10000 ntdll!NtClose + 0xc (FPO: [ 1 , 0 , 0 ]) 05 00000000 00000000     00000000 00000000 00000000 ntdll!LdrUnloadDll + 0xc2 (FPO: [Non - Fpo])       2  Id : 236c . 1528 Suspend: 0 Teb: 00ec9000 Unfrozen   # ChildEBP RetAddr      Args to Child              00 045bfa58 76f4708b     00000000 045bfa9c 5822babf ntdll!NtDelayExecution + 0xc (FPO: [ 2 , 0 , 0 ]) 01 045bfac0 76f4702f     000001f4 00000000 045bfaf8 KERNELBASE!SleepEx + 0x4b (FPO: [SEH]) 02 045bfad0 6829d27a     000001f4 69856b37 000001f4 KERNELBASE!Sleep + 0xf (FPO: [Non - Fpo]) * * * WARNING: Unable to verify timestamp for MicroLine.dll 03 045bfad8 69856b37     000001f4 25d242d0 25d242d0 Qt5Core!QThread::msleep + 0xa (FPO: [ 1 , 0 , 0 ]) (CONV: cdecl) [c:\users\qt\work\qt\qtbase\src\corelib\thread\qthread_win.cpp @ 458 ] WARNING: Stack unwind information not available. Following frames may be wrong. 04 045bfaf8 69857d94     045bfb10 698586b4 69856ab0 MicroLine + 0x6b37 05 045bfb00 698586b4     69856ab0 042e8290 045bfb20 MicroLine + 0x7d94 06 045bfb10 69857ea4     042e8294 042e8290 045bfb48 MicroLine + 0x86b4 07 045bfb20 6985be48     042e8290 00000076 d2e8c539 MicroLine + 0x7ea4 08 045bfb48 6985b9f0     010ff410 010ff410 045bfb60 MicroLine + 0xbe48 09 045bfb58 6985b8bf     045bfb98 751f4f9f 010ff410 MicroLine + 0xb9f0 0a 045bfb60 751f4f9f     010ff410 eda00954 751f4f60 MicroLine + 0xb8bf 0b 045bfb98 771cfcc9     012e5b88 771cfcb0 045bfc04 ucrtbase!thread_start<unsigned int (__stdcall * )(void * ), 1 > + 0x3f (FPO: [Non - Fpo]) 0c 045bfba8 77377c6e     012e5b88 b837b4f6 00000000 kernel32!BaseThreadInitThunk + 0x19 (FPO: [Non - Fpo]) 0d 045bfc04 77377c3e     ffffffff 77398c2d 00000000 ntdll!__RtlUserThreadStart + 0x2f (FPO: [SEH]) 0e 045bfc14 00000000     751f4f60 012e5b88 00000000 ntdll!_RtlUserThreadStart + 0x1b (FPO: [Non - Fpo])       3  Id : 236c . 21c Suspend: 0 Teb: 00ed5000 Unfrozen   # ChildEBP RetAddr      Args to Child              00 0bd7fb2c 73503666     00000001 0bd7fbb0 00000001 ntdll!NtWaitForMultipleObjects + 0xc (FPO: [ 5 , 0 , 0 ]) 01 0bd7fbf8 771cfcc9     00000000 771cfcb0 0bd7fc64 winmm!timeThread + 0x56 (FPO: [Non - Fpo]) 02 0bd7fc08 77377c6e     00000000 b7bbb496 00000000 kernel32!BaseThreadInitThunk + 0x19 (FPO: [Non - Fpo]) 03 0bd7fc64 77377c3e     ffffffff 77398c2d 00000000 ntdll!__RtlUserThreadStart + 0x2f (FPO: [SEH]) 04 0bd7fc74 00000000     73503610 00000000 00000000 ntdll!_RtlUserThreadStart + 0x1b (FPO: [Non - Fpo])

   发现熟悉的模块
   
   代码中查找相关代码
   
   运气较好，有且只有一个。

4. 总结：
   因为程序退出的时候，线程没有退出，导致线程执行时出现了内存访问违例的崩溃问题。

类似问题的参考文章: