!wdfkd.wdfcrashdump
The !wdfkd.wdfcrashdump extension displays error log information and other crash dump information from a minidump file, if the data is present.
KMDF
!wdfkd.wdfcrashdump [InfoType]
UMDF
!wdfkd.wdfcrashdump [DriverName.dll][-d | -f | -m]
Parameters
InfoType
Specifies the kind of information to display. InfoType is optional and can be any one of the following values:
log
Displays error log information, if available in the crash dump file. This is the default value.
loader
Displays the minidump's dynamic-bound drivers.
DriverName.dll
Specifies the name of a UMDF driver. You must include the .dll file suffix. If this optional parameter is omitted, output includes metadata, the loaded module list, and available logs.
-d
Displays only the driver logs.
-f
Displays only the framework logs.
-m
Merges framework and driver logs in their recorded order.
DLL
Wdfkd.dll
Frameworks
KMDF
UMDF 2.15
Remarks
This example shows how to use !wdfkd.wdfcrashdump to view information about KMDF drivers. If you specify loader for InfoType, the output includes dynamic-bound drivers in the minidump file.
0: kd> !wdfcrashdump loader
Retrieving crashdump loader information...
## Local buffer 0x002B4D00, bufferSize 720
----------------------------------------------
ImageName Version FxGlobals
Wdf01000 v1.9(6902)
msisadrv v1.9(6913) 0x84deb260
vdrvroot v1.9(6913) 0x860e8260
storflt v1.5(6000) 0x861dfe90
cdrom v1.9(6913) 0x84dca008
intelppm v1.9(6913) 0x864704a8
HDAudBus v1.7(6001) 0x86101c98
1394ohci v1.7(6001) 0x8610d2e8
CompositeBus v1.9(6913) 0x86505b98
ObjTestClassExt v1.9(6902) 0x865b7f00
mqfilter v1.9(6902) 0x865b8008
mqueue v1.9(6902) 0x865b6910
umbus v1.9(6913) 0x8618aea0
monitor v1.9(6913) 0x86aac1d8
PEAUTH v1.5(6000) 0x854e5350
----------------------------------------------
This example shows how to use !wdfkd.wdfcrashdump to view information about UMDF drivers. If you issue !wdfkd.wdfcrashdump with no parameters, the output includes the driver that caused the crash and a list of all loaded drivers in the host process that failed. You can click on drivers in this list that have associated logs.
0:001> !wdfkd.wdfcrashdump
Opening minidump at location C:\temp\WudfHost_ext__1312.dmp
Faulting driver: wpptest.dll
Failure type: Unhandled Exception (WUDFUnhandledException)
Faulting thread ID: 2840
Listing all drivers loaded in this host process at the time of the failure:
ServiceName
wpptest
CoverageCx0102
coverage
WUDFVhidmini
ToastMon
WUDFOsrUsbFilter
In the example above, output includes failure type, which is the event type in the WER report. Here, it can be WUDFVerifierFailure or WUDFUnhandledException. For more information, see Accessing UMDF Metadata in WER Reports. The output for UMDF includes an error code, if event type is WUDFVerifierFailure.
To display the framework's error log records from a complete memory dump, a kernel memory dump, or a live kernel-mode target, you can also try the !wdfkd.wdflogdump extension.
Additional Information
For information about enabling the inflight trace recorder for your driver, see Using Inflight Trace Recorder (IFR) in KMDF and UMDF 2 Drivers. For more information about debugging WDF drivers, see Debugging WDF Drivers. For information about KMDF debugging, see Kernel-Mode Driver Framework Debugging.