Windbg exception when kernel debugging a multi-core processor machine

Oct 13, 2016 at 11:56 AM
Hi, I am using pykd, WinDbg 10.0.14321.1024 AMD64 on Windows 10 x64 and the target virtual machine is running Windows 10 x86.

I am using pykd.eventHandler to monitor function calls.
The code I used is very simple. But I got a wired problem.

When the target machine has only one core, one processor, it works very well.
However when the target machine has multi-core processor. it would trigger a windbg exception as shown below:

Single step exception - code 80000004 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.

The code:
import pykd
class HandleNtCreateFile(pykd.eventHandler):
    def __init__(self):
        nt = pykd.module('nt')
        self.bp_init = pykd.setBp(nt.NtCreateFile, self.enter_call_back)

    def enter_call_back(self):
        print 'enter_call_back'

Oct 13, 2016 at 2:40 PM
Does it seem like your problem?

PS: you don't need to hesitate class from 'pykd.eventHandler' in your case