SetUnhandledExceptionFilter生成Mini-dump文件分析(代码整理)

最新推荐文章于 2023-06-29 18:17:50 发布

xl-xulei

最新推荐文章于 2023-06-29 18:17:50 发布

阅读量1.3k

点赞数

分类专栏：技术文章 VC C/C++ 文章标签：异常 SetUnhandledExceptio minidump

C/C++ 同时被 3 个专栏收录

33 篇文章

订阅专栏

16 篇文章

订阅专栏

技术文章

13 篇文章

订阅专栏

本文介绍了一个使用C++实现的程序异常处理方法，通过覆盖`SetUnhandledExceptionFilter`函数并创建内存转储文件来捕获程序崩溃时的信息。此方法适用于x86平台，并展示了如何自定义异常过滤器及生成崩溃报告。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

C++ 代码: 新建一个WIN32 工程, 加入以下代码就行

#include "stdafx.h"

#include <windows.h>
#include <dbghelp.h>
#include <stdio.h>
#include <time.h>
#pragma comment(lib, "dbghelp")
#ifndef _M_IX86
#error "The following code only works for x86!"
#endif

void DisableSetUnhandledExceptionFilter()
{
	void *addr = (void*)GetProcAddress(LoadLibrary(_T("kernel32.dll")),
		"SetUnhandledExceptionFilter");
	if (addr)
	{
		unsigned char code[16];
		int size = 0;
		code[size++] = 0x33;
		code[size++] = 0xC0;
		code[size++] = 0xC2;
		code[size++] = 0x04;
		code[size++] = 0x00;

		DWORD dwOldFlag, dwTempFlag;
		VirtualProtect(addr, size, PAGE_READWRITE, &dwOldFlag);
		WriteProcessMemory(GetCurrentProcess(), addr, code, size, NULL);
		VirtualProtect(addr, size, dwOldFlag, &dwTempFlag);
	}
}

LONG WINAPI MyUnhandledExceptionFilter(struct _EXCEPTION_POINTERS* lpExceptionInfo)
{
	TCHAR szProgramPath[MAX_PATH] = {0};
	if(GetModuleFileName(NULL, szProgramPath, MAX_PATH))
	{
		LPTSTR lpSlash = _tcsrchr(szProgramPath, '//');
		if(lpSlash)
		{
			*(lpSlash + 1) = '/0';
		}
	}
	TCHAR szDumpFile[MAX_PATH] = {0};
	_stprintf(szDumpFile, _T("%s%d.dmp"), szProgramPath, time(NULL));
	TCHAR szReportFile[MAX_PATH] = {0};
	_stprintf(szReportFile, _T("%sBugReport.exe"), szProgramPath);

	HANDLE hDumpFile = CreateFile(szDumpFile, GENERIC_WRITE, 0, NULL, CREATE_ALWAYS,FILE_ATTRIBUTE_NORMAL ,NULL);
	MINIDUMP_EXCEPTION_INFORMATION stMiniDumpExceptionInfo;
	stMiniDumpExceptionInfo.ExceptionPointers = lpExceptionInfo;
	stMiniDumpExceptionInfo.ThreadId = GetCurrentThreadId();
	stMiniDumpExceptionInfo.ClientPointers = TRUE;
	MiniDumpWriteDump(GetCurrentProcess(), GetCurrentProcessId(), hDumpFile,
		MiniDumpNormal, &stMiniDumpExceptionInfo, NULL, NULL);
	CloseHandle(hDumpFile);
	::ShellExecute(NULL, NULL, szReportFile, szDumpFile, NULL, SW_HIDE);

	//Use your own user-friendly ui prompt here
	MessageBox(NULL, _T("Oh, No! 程序居然崩溃了!"), _T("ERROR"), MB_OK);
	return EXCEPTION_EXECUTE_HANDLER;
}

int main()
{
	int *p = NULL;
	SetUnhandledExceptionFilter(MyUnhandledExceptionFilter);
	DisableSetUnhandledExceptionFilter();
	*p = 22;
	return 0;
}

C代码, 新建一个空工程, 加入以下代码

#include <windows.h>
#include <dbghelp.h>
#include <stdio.h>
#include <time.h>
#include <wchar.h>
#include <TCHAR.H >

#pragma comment(lib, "dbghelp")
#ifndef _M_IX86
#error "The following code only works for x86!"
#endif

void DisableSetUnhandledExceptionFilter()
{
	DWORD dwOldFlag, dwTempFlag;

	void *addr = (void*)GetProcAddress(LoadLibrary(_T("kernel32.dll")),
		"SetUnhandledExceptionFilter");
	if (addr)
	{
		unsigned char code[16];
		int size = 0;
		code[size++] = 0x33;
		code[size++] = 0xC0;
		code[size++] = 0xC2;
		code[size++] = 0x04;
		code[size++] = 0x00;

		
		VirtualProtect(addr, size, PAGE_READWRITE, &dwOldFlag);
		WriteProcessMemory(GetCurrentProcess(), addr, code, size, NULL);
		VirtualProtect(addr, size, dwOldFlag, &dwTempFlag);
	}
}

LONG WINAPI MyUnhandledExceptionFilter(struct _EXCEPTION_POINTERS* lpExceptionInfo)
{
	TCHAR szProgramPath[MAX_PATH] = {0};
	TCHAR szDumpFile[MAX_PATH] = {0};
	TCHAR szReportFile[MAX_PATH] = {0};
	HANDLE hDumpFile;
	MINIDUMP_EXCEPTION_INFORMATION stMiniDumpExceptionInfo;

	if(GetModuleFileName(NULL, szProgramPath, MAX_PATH))
	{
		LPTSTR lpSlash = _tcsrchr(szProgramPath, '//');
		if(lpSlash)
		{
			*(lpSlash + 1) = '/0';
		}
	}
	
	_stprintf(szDumpFile, _T("%s%d.dmp"), szProgramPath, time(NULL));
	
	_stprintf(szReportFile, _T("%sBugReport.exe"), szProgramPath);

	hDumpFile = CreateFile(szDumpFile, GENERIC_WRITE, 0, NULL, CREATE_ALWAYS,FILE_ATTRIBUTE_NORMAL ,NULL);
	
	stMiniDumpExceptionInfo.ExceptionPointers = lpExceptionInfo;
	stMiniDumpExceptionInfo.ThreadId = GetCurrentThreadId();
	stMiniDumpExceptionInfo.ClientPointers = TRUE;
	MiniDumpWriteDump(GetCurrentProcess(), GetCurrentProcessId(), hDumpFile,
		MiniDumpNormal, &stMiniDumpExceptionInfo, NULL, NULL);
	CloseHandle(hDumpFile);
	ShellExecute(NULL, NULL, szReportFile, szDumpFile, NULL, SW_HIDE);

	//Use your own user-friendly ui prompt here
	MessageBox(NULL, _T("Oh, No! 程序居然崩溃了!"), _T("ERROR"), MB_OK);
	return EXCEPTION_EXECUTE_HANDLER;
}

int main()
{
	int *p = NULL;
	SetUnhandledExceptionFilter(MyUnhandledExceptionFilter);
	DisableSetUnhandledExceptionFilter();
	*p = 22;
	return 0;
}