debugger icon indicating copy to clipboard operation
debugger copied to clipboard

WinDbg TTD sometimes does not capture the buffer content

Open xusheng6 opened this issue 9 months ago • 0 comments

The issue is during TTD replay, the content of a buffer is inaccessible despite it has been both written to and read from by the recorded process. You can see in the attached screenshot that the content of the rdi buffer is accessible during a live debugging session, and inaccessible from a TTD replay.

Image

Image

I have verified that this is not a bug caused by the Binary Ninja debugger -- the same issue can be observed in WinDbg as well.

xusheng6 avatar Apr 02 '25 07:04 xusheng6