pykd/changelog

version 0.0.17 15/04/2011
[+] added:  isDumpAnalyzing function. Check if it is a dump analyzing or live debuggiv
[+] added : loadChars routine. Load raw buffer. 
[+] added : docstrings for all functions and classes
[+] added : checksum() and timestamp() methods for dbgModuleClass
[+] added : callbacks for bp class ( breakpoint ) 

[~] removed : isSessionStart() function

[~] updated : typedVarList can parse lists with LIST_ENTRY and lists with links pointing to the head of the next element

[!] fixed : issue 8470 ( python.exe crashes after first pykd call )
[!] fixed : issue 8614 ( go() works incorrectly while process is terminating )
[!] fixed : issue 8499 ( !py command crashs with wrong script's path )
[!] fixed : issue 8578 ( findModule returns None for WOW64 process )
[!] fixed : issue 8493 ( loadPtrs returns dict instead list ) 
[!] fixed : issue 8469 ( dprintln does not work in console mode ) 

version 0.0.16 03/03/2011
[+] added : isValid() routine; it validates virtual address 
[+] added : image() and pdb() method for dbgModuleClass class. They return paths to pdb and image files. 
[+] added : function getTypeClass() - create instance of typeClass by module an type name 
[+] added : addSynSymbol function adds a synthetic symbol to a module by virtual address
[+] added : dbgModuleClass::addSynSymbol method adds a synthetic symbol by offset related to module base
[+] added : dbgStackFrameClass::print() 
[+] added : dbgBreakpointClass::print()
[+] added : dbgExtensionClass::print()
[+] added : dbgModuleClass::print()
[+] added : startProcess routine for live user-mode debugging

[~] updated : loadArray returns python list, not dict 
[~] updated : typedVar routine will return None if varibales's address is invalid.
[~] updated : loadDump routine returns bool now ( not string ) 
[~] updated : createSession routine is depricated now

[!] fixed : issue #8336 ( typedVar returns value with wrong type of fields ) 
[!] fixed : infinity loop on x32, if passed into typedVarList() address is not cast to addr64-format. condition in for(): entryAddress != address 
[!] fixed : issue 8458 ( doubled output in windbg ) 


version 0.0.15 04/02/2011
[+] added : locals() routine; it returns local var for current scope 
[+] added : typedVarArray routine 
[~] updated : dbgModuleClass constructor fills symbol cache for optimization 
[!] fixed : issue #8236 ( dprint/dprintln/print doesn't work with unicode string )
[!] fixed : issue #8229 ( loadModuel("some_drv") - out message "IDebugSymbol::Reload failed" )
[!] fixed : issue #8239 ( ptrSignByte returns str value )


version 0.0.14 17/01/2011
[+] added : __getattribute__ method for dbgModuleClass class to simplify access to module symbols's offsets
[+] added : __str__ method for typedVar class, so it can be outputed by print operator
[!] bug fixed: issue #8103 ( !py windbg extension imports modules into the global space )
[~] changed: eval() renamed to expr()


version 0.0.13 27/12/2010
[+] added : go, step, trace routine for control execution
[+] added : bp class for control breakpoints
[+] added : ptrMWord, ptrSignMWord for reading target's machine word ( 32 or 64 bits ) from memory\
[+] added : eval routine for evaluation windbg expression
[!] fixed : issue #6782 ( typedVar works very slowly )


version 0.0.12 27/11/2010
[+] added : getCurrentPorcess, setCurrentProcess routines
[!] fixed: loadModule return None for non existin module with out outputing error message
[+] added : getProcessorMode, setProcessorMode routines; 
[+] added : sample stacks.py 
[+] added: getThreadList routine; returns thread object's ptr list 
[!] fixed : loadTypedVar for unnamed union tag ::<unnamed-tag>
[!] fixed : loadMemory does not throw exception and return false
[!] bug fixed: issue #7727 ( loadUnicodeString returns empty string )
[+] added: isKernelDebugging routine
[+] added: windbg snippet displaying IAT for module 
[!] bug fixed: findModule does not work for address < 4GB 

version 0.0.11 22/11/2010
[!] bug fixed: issue #7717 ( !py command failed to find standart modules )
[!] bug fixed: issue #7718 ( sys.argv[0] does not contain script name ) 
[!] bug fixed: issue #7697 ( raw_input does not work ) 
[+] added: windbgIn windbgOut class for redirecting in/out from stdin/stdout 
[!] bug fixed: issue #7688 ( dbgIsSessionStart returns false after dbgCreateSession call ) 

version 0.0.10 12/11/2010
[!] updated: loadUnicodeStr routine returns unicode string ( instead of ansi string )
[!] bug fixed: issue #7623 ( memory routines failed to work at wow64 application )
[+] added: windbg snippet displaying list of export for module
[+] added: loadCStr, loadWStr routine added ( loading c-style string )
[!] typedVar routine fixed: loading array of complex type 

version 0.0.9 03/11/2010
[+] added: windbg snippet displaying GDT entries
[+] added: windbg snippet displaying VMCS structure ( Intel-VT virtualization context )
[!] bug fixed: issue #7528 ( loadBytes raises error "did not match C++ signature" )
[+] added: windbg snippet displaying CR0 register
[+] added: windbg snippet displaying CR4 register
[+] added: !py windbg command can work without python script file extension ".py"

version 0.0.8   27/10/2010
[+] added: physical memory read support ( for loadBytes, loadWords etc)
[+] added: !pythonpath windbg command - print enviroment var $pythonpath
[+] added: !py windbg command uses $pythonpath var for search scripts
[+] added: ptrSize routine ( returns pointer's size at the target platform )
[!] bug fixed: issue #7164 ( loadTypedVarList can fall in infinite loop )
[+] added: sizeof routine ( returns size of type )
[+] added: sizeof method for typedVarClass ( return size of var in memory )

version 0.0.7   20/08/2010

[+] added: getImplicitThread routine( get address of the current thread )
[+] added: setImplicitThread routine ( change current thread context )
[+] added: dbgStackFrameClass class ( information about stack frame )
[+] added: getCurrentStack routine ( get current stack as collections of dbgStackFrameClass object )
[+] added: loadLinkedList routine
[+] added: getPdbFile routine
[+] added: reloadSymbols
[!] bug fixed: issue #6862 ( loadUnicodeString for x64 target does not work )

version 0.0.6   09/08/2010

[+] added: dbgExtensionClass class for calling windbg extension command from python script
[!] bug fixed: issue #6812 ( windbg ext command !py does not work with full path )
[+] added: !pycmd command for windbg extension


version 0.0.5   03/08/2010

[!] fixed: issue #6769 ( Args parsing is not supporting quoting )
[+] added: proclist.py sample
[+] added: loadTypedVarList routine
[!] fixed: typedVar

version 0.0.4   29/07/2010

[+] added: loadUnicodeString routine
[+] added: loadAnsiStr routine
[+] added: drvobj.py sample
[+] fixed: issue #6747 ( windbg script's call parameters passing into python script added )


version 0.0.3   28/07/2010

[!] bugfix: typedVar
[+] routines for loading integer value by pointer ( PtrByte, PtrSignByte, PtrWord ... ) added
[+] routines for loading array with sign extending( loadSignBytes, loadSignWords ... ) added
[+] routines for loading array ( loadBytes, loadWords ... ) added
[+] ssdt.py sample added
[+] idt.py sample added