[Wine] Re: debugging an app

[Duane Clark]

Henry Gomersall wrote:
> On Wed, 2007-05-23 at 10:13 -0700, Duane Clark wrote:
>> In your ~/.wine/user.reg, there is a registry key:
>> [Software\\Wine\\Debug] 1147111116
>> "RelayExclude"="ntdll.RtlEnterCriticalSection;ntdll.RtlLeaveCriticalSection;kernel32.97;kernel32.98"
>>
>> Try adding kernel32.TlsGetValue etc to it.
>>
> Great, this means i can actually grab what is going on (I stopped
> without these when the log ate up all my HD space!).
> 
> So, the question now is what to do with the error log.
> 
> The last few lines before the crash are:
>   0009:Ret  ntdll.RtlFreeUnicodeString() retval=7bc4fc60 ret=7b875485
>   0009:Call ntdll.RtlFreeUnicodeString(0034dc6c) ret=7b875493
>   0009:Ret  ntdll.RtlFreeUnicodeString() retval=7bc4fc60 ret=7b875493
>   0009:Call
> ntdll.NtWaitForMultipleObjects(00000001,0034db50,00000000,00000000,00000000) ret=7b8881c6
>   0009:Ret  ntdll.NtWaitForMultipleObjects() retval=00000000
> ret=7b8881c6
> 0009:Ret  KERNEL32.UnhandledExceptionFilter() retval=00000000
> ret=7c34c456
> 0009:Call
> ntdll.NtQueryVirtualMemory(ffffffff,035b2000,00000000,0034dfc8,0000001c,0034dcec) ret=7b897aa1
> 0009:Ret  ntdll.NtQueryVirtualMemory() retval=00000000 ret=7b897aa1

Well, those are not the actual last few lines before the crash, because 
I see a return from KERNEL32.UnhandledExceptionFilter() without the 
call. I think the program actually crashed somewhere before the call to 
that function. I often grep through the log for "xception" (without 
"E"/"e" so that case does not matter) to find the first place in the log 
where that word shows up.