hn.today

Show HN: I built a post-mortem debugger for native Windows x64/x86 crashes

forensicdbg.com35 points7 comments
Screenshot of Show HN: I built a post-mortem debugger for native Windows x64/x86 crashes

ForensicDbg is a modern post-mortem debugger for Windows x86 and x64 that focuses on making crash analysis fast and reliable. It handles crash dumps, live process attachment, and can be set as the just-in-time debugger for on-crash capture. The tool includes a simple C++ expression evaluator, SourceServer and SourceLink support, multi-threaded symbol loading, and a responsive UI with light/dark themes, color-coded output, clickable addresses for navigation, and synchronized panels. It is in active development and currently available via a private beta.

The debugger exposes an MCP server interface for automated crash analysis and direct interoperability with AI tools using stdio MCP Server communication, formatting and labeling data to reduce token use and improve LLM results. Analysis engines deduce types from usage, track register values through disassembly, validate callstacks, and simulate the image loader to rebuild missing read-only regions in minidumps, plus it auto-selects the thread, frame, and instruction that caused the exception. A specific recent bug fix addressed a null-check omission in CTextWindowBase::SetSelectionBegin that could dereference a null GetLine() when a window had no lines, with the remedy to guard the result and skip the update.

Read on forensicdbg.com7 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Security

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.