Before going into the depths of debugging in Wine, here's a small overview of process and thread handling in Wine. It has to be clear that there are two different beasts: processes/threads from the Unix point of view and processes/threads from a Windows point of view.
Each Windows' thread is implemented as a Unix thread, meaning that all threads of a same Windows' process share the same (unix) address space.
In the following:
W-processmeans a process in Windows' terminology
U-processmeans a process in Unix' terminology
W-threadmeans a thread in Windows' terminology
W-process is made of one or several
W-thread is mapped to one and only one
U-processes of a same
W-process share the same address space.
Each Unix process can be identified by two values:
the Unix process id (
upidin the following)
the Windows's thread id (
Each Windows' process has also a Windows' process id
wpid in the following). It must be clear
different and shall not be used instead of the other.
defined (Windows) system wide. They must not be confused
with process or thread handles which, as any handle, is an
indirection to a system object (in this case process or
thread). A same process can have several different handles
on the same kernel object. The handles can be defined as
local (the values is only valid in a process), or system
wide (the same handle can be used by any
When talking of debugging in Wine, there are at least two levels to think of:
the Windows' debugging API.
the Wine integrated debugger, dubbed winedbg.
Wine implements most of the Windows' debugging API. The first part of the debugging APIs (in KERNEL32.DLL) allows a W-process, called the debugger, to control the execution of another W-process, the debuggee. To control means stopping/resuming execution, enabling/disabling single stepping, setting breakpoints, reading/writing debuggee memory... Another part of the debugging APIs resides in DBGHELP.DLL (and its ancestor IMAGEHLP.DLL) and lets a debugger look into symbols and types from any module (if the module has been compiled with the proper options).
winedbg is a Winelib application making use of these APIs (KERNEL32.DLL's debugging API and DBGHELP.DLL) to allow debugging both any Wine or Winelib applications as well as Wine itself (kernel and all DLLs).