The !wdfkd.wdfcrashdump extension displays error log information and other crash dump information from a minidump file, if the data is present.


!wdfkd.wdfcrashdump [InfoType]


!wdfkd.wdfcrashdump [DriverName.dll][-d | -f | -m]


Specifies the kind of information to display. InfoType is optional and can be any one of the following values:

Displays error log information, if available in the crash dump file. This is the default value.

Displays the minidump's dynamic-bound drivers.

Specifies the name of a UMDF driver. You must include the .dll file suffix. If this optional parameter is omitted, output includes metadata, the loaded module list, and available logs.

Displays only the driver logs.

Displays only the framework logs.

Merges framework and driver logs in their recorded order.





UMDF 2.15


This example shows how to use !wdfkd.wdfcrashdump to view information about KMDF drivers. If you specify loader for InfoType, the output includes dynamic-bound drivers in the minidump file.

0: kd> !wdfcrashdump loader 
Retrieving crashdump loader information...
## Local buffer 0x002B4D00, bufferSize 720
  ImageName      Version    FxGlobals

  Wdf01000       v1.9(6902)
  msisadrv       v1.9(6913) 0x84deb260
  vdrvroot       v1.9(6913) 0x860e8260
  storflt        v1.5(6000) 0x861dfe90
  cdrom          v1.9(6913) 0x84dca008
  intelppm       v1.9(6913) 0x864704a8
  HDAudBus       v1.7(6001) 0x86101c98
  1394ohci       v1.7(6001) 0x8610d2e8
  CompositeBus   v1.9(6913) 0x86505b98
  ObjTestClassExt v1.9(6902) 0x865b7f00
  mqfilter       v1.9(6902) 0x865b8008
  mqueue         v1.9(6902) 0x865b6910
  umbus          v1.9(6913) 0x8618aea0
  monitor        v1.9(6913) 0x86aac1d8
  PEAUTH         v1.5(6000) 0x854e5350

This example shows how to use !wdfkd.wdfcrashdump to view information about UMDF drivers. If you issue !wdfkd.wdfcrashdump with no parameters, the output includes the driver that caused the crash and a list of all loaded drivers in the host process that failed. You can click on drivers in this list that have associated logs.

0:001> !wdfkd.wdfcrashdump
Opening minidump at location C:\temp\WudfHost_ext__1312.dmp

Faulting driver: wpptest.dll
Failure type: Unhandled Exception (WUDFUnhandledException)
Faulting thread ID: 2840

Listing all drivers loaded in this host process at the time of the failure:


In the example above, output includes failure type, which is the event type in the WER report. Here, it can be WUDFVerifierFailure or WUDFUnhandledException. For more information, see Accessing UMDF Metadata in WER Reports. The output for UMDF includes an error code, if event type is WUDFVerifierFailure.

To display the framework's error log records from a complete memory dump, a kernel memory dump, or a live kernel-mode target, you can also try the !wdfkd.wdflogdump extension.

Additional Information

For information about enabling the inflight trace recorder for your driver, see Using Inflight Trace Recorder (IFR) in KMDF and UMDF 2 Drivers. For more information about debugging WDF drivers, see Debugging WDF Drivers. For information about KMDF debugging, see Kernel-Mode Driver Framework Debugging.

See also