ホーム › System.Diagnostics.Debug › StackWalk64

StackWalk64

関数

64ビット対応でスレッドのスタックフレームを順次たどる。

DLLdbghelp.dll呼出規約winapi

シグネチャ

// dbghelp.dll
#include <windows.h>

BOOL StackWalk64(
    DWORD MachineType,
    HANDLE hProcess,
    HANDLE hThread,
    STACKFRAME64* StackFrame,
    void* ContextRecord,
    PREAD_PROCESS_MEMORY_ROUTINE64 ReadMemoryRoutine,   // optional
    PFUNCTION_TABLE_ACCESS_ROUTINE64 FunctionTableAccessRoutine,   // optional
    PGET_MODULE_BASE_ROUTINE64 GetModuleBaseRoutine,   // optional
    PTRANSLATE_ADDRESS_ROUTINE64 TranslateAddress   // optional
);

パラメーター

名前	型	方向
MachineType	DWORD	in
hProcess	HANDLE	in
hThread	HANDLE	in
StackFrame	STACKFRAME64*	inout
ContextRecord	void*	inout
ReadMemoryRoutine	PREAD_PROCESS_MEMORY_ROUTINE64	inoptional
FunctionTableAccessRoutine	PFUNCTION_TABLE_ACCESS_ROUTINE64	inoptional
GetModuleBaseRoutine	PGET_MODULE_BASE_ROUTINE64	inoptional
TranslateAddress	PTRANSLATE_ADDRESS_ROUTINE64	inoptional

戻り値の型: BOOL

各言語での呼び出し定義

// dbghelp.dll
#include <windows.h>

BOOL StackWalk64(
    DWORD MachineType,
    HANDLE hProcess,
    HANDLE hThread,
    STACKFRAME64* StackFrame,
    void* ContextRecord,
    PREAD_PROCESS_MEMORY_ROUTINE64 ReadMemoryRoutine,   // optional
    PFUNCTION_TABLE_ACCESS_ROUTINE64 FunctionTableAccessRoutine,   // optional
    PGET_MODULE_BASE_ROUTINE64 GetModuleBaseRoutine,   // optional
    PTRANSLATE_ADDRESS_ROUTINE64 TranslateAddress   // optional
);

[return: MarshalAs(UnmanagedType.Bool)]
[DllImport("dbghelp.dll", ExactSpelling = true)]
static extern bool StackWalk64(
    uint MachineType,   // DWORD
    IntPtr hProcess,   // HANDLE
    IntPtr hThread,   // HANDLE
    IntPtr StackFrame,   // STACKFRAME64* in/out
    IntPtr ContextRecord,   // void* in/out
    IntPtr ReadMemoryRoutine,   // PREAD_PROCESS_MEMORY_ROUTINE64 optional
    IntPtr FunctionTableAccessRoutine,   // PFUNCTION_TABLE_ACCESS_ROUTINE64 optional
    IntPtr GetModuleBaseRoutine,   // PGET_MODULE_BASE_ROUTINE64 optional
    IntPtr TranslateAddress   // PTRANSLATE_ADDRESS_ROUTINE64 optional
);

<DllImport("dbghelp.dll", ExactSpelling:=True)>
Public Shared Function StackWalk64(
    MachineType As UInteger,   ' DWORD
    hProcess As IntPtr,   ' HANDLE
    hThread As IntPtr,   ' HANDLE
    StackFrame As IntPtr,   ' STACKFRAME64* in/out
    ContextRecord As IntPtr,   ' void* in/out
    ReadMemoryRoutine As IntPtr,   ' PREAD_PROCESS_MEMORY_ROUTINE64 optional
    FunctionTableAccessRoutine As IntPtr,   ' PFUNCTION_TABLE_ACCESS_ROUTINE64 optional
    GetModuleBaseRoutine As IntPtr,   ' PGET_MODULE_BASE_ROUTINE64 optional
    TranslateAddress As IntPtr   ' PTRANSLATE_ADDRESS_ROUTINE64 optional
) As Boolean
End Function

' MachineType : DWORD
' hProcess : HANDLE
' hThread : HANDLE
' StackFrame : STACKFRAME64* in/out
' ContextRecord : void* in/out
' ReadMemoryRoutine : PREAD_PROCESS_MEMORY_ROUTINE64 optional
' FunctionTableAccessRoutine : PFUNCTION_TABLE_ACCESS_ROUTINE64 optional
' GetModuleBaseRoutine : PGET_MODULE_BASE_ROUTINE64 optional
' TranslateAddress : PTRANSLATE_ADDRESS_ROUTINE64 optional
Declare PtrSafe Function StackWalk64 Lib "dbghelp" ( _
    ByVal MachineType As Long, _
    ByVal hProcess As LongPtr, _
    ByVal hThread As LongPtr, _
    ByVal StackFrame As LongPtr, _
    ByVal ContextRecord As LongPtr, _
    ByVal ReadMemoryRoutine As LongPtr, _
    ByVal FunctionTableAccessRoutine As LongPtr, _
    ByVal GetModuleBaseRoutine As LongPtr, _
    ByVal TranslateAddress As LongPtr) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

StackWalk64 = ctypes.windll.dbghelp.StackWalk64
StackWalk64.restype = wintypes.BOOL
StackWalk64.argtypes = [
    wintypes.DWORD,  # MachineType : DWORD
    wintypes.HANDLE,  # hProcess : HANDLE
    wintypes.HANDLE,  # hThread : HANDLE
    ctypes.c_void_p,  # StackFrame : STACKFRAME64* in/out
    ctypes.POINTER(None),  # ContextRecord : void* in/out
    ctypes.c_void_p,  # ReadMemoryRoutine : PREAD_PROCESS_MEMORY_ROUTINE64 optional
    ctypes.c_void_p,  # FunctionTableAccessRoutine : PFUNCTION_TABLE_ACCESS_ROUTINE64 optional
    ctypes.c_void_p,  # GetModuleBaseRoutine : PGET_MODULE_BASE_ROUTINE64 optional
    ctypes.c_void_p,  # TranslateAddress : PTRANSLATE_ADDRESS_ROUTINE64 optional
]

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('dbghelp.dll')
StackWalk64 = Fiddle::Function.new(
  lib['StackWalk64'],
  [
    -Fiddle::TYPE_INT,  # MachineType : DWORD
    Fiddle::TYPE_VOIDP,  # hProcess : HANDLE
    Fiddle::TYPE_VOIDP,  # hThread : HANDLE
    Fiddle::TYPE_VOIDP,  # StackFrame : STACKFRAME64* in/out
    Fiddle::TYPE_VOIDP,  # ContextRecord : void* in/out
    Fiddle::TYPE_VOIDP,  # ReadMemoryRoutine : PREAD_PROCESS_MEMORY_ROUTINE64 optional
    Fiddle::TYPE_VOIDP,  # FunctionTableAccessRoutine : PFUNCTION_TABLE_ACCESS_ROUTINE64 optional
    Fiddle::TYPE_VOIDP,  # GetModuleBaseRoutine : PGET_MODULE_BASE_ROUTINE64 optional
    Fiddle::TYPE_VOIDP,  # TranslateAddress : PTRANSLATE_ADDRESS_ROUTINE64 optional
  ],
  Fiddle::TYPE_INT)

#[link(name = "dbghelp")]
extern "system" {
    fn StackWalk64(
        MachineType: u32,  // DWORD
        hProcess: *mut core::ffi::c_void,  // HANDLE
        hThread: *mut core::ffi::c_void,  // HANDLE
        StackFrame: *mut STACKFRAME64,  // STACKFRAME64* in/out
        ContextRecord: *mut (),  // void* in/out
        ReadMemoryRoutine: *const core::ffi::c_void,  // PREAD_PROCESS_MEMORY_ROUTINE64 optional
        FunctionTableAccessRoutine: *const core::ffi::c_void,  // PFUNCTION_TABLE_ACCESS_ROUTINE64 optional
        GetModuleBaseRoutine: *const core::ffi::c_void,  // PGET_MODULE_BASE_ROUTINE64 optional
        TranslateAddress: *const core::ffi::c_void  // PTRANSLATE_ADDRESS_ROUTINE64 optional
    ) -> i32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[return: MarshalAs(UnmanagedType.Bool)]
[DllImport("dbghelp.dll")]
public static extern bool StackWalk64(uint MachineType, IntPtr hProcess, IntPtr hThread, IntPtr StackFrame, IntPtr ContextRecord, IntPtr ReadMemoryRoutine, IntPtr FunctionTableAccessRoutine, IntPtr GetModuleBaseRoutine, IntPtr TranslateAddress);
"@
$api = Add-Type -MemberDefinition $sig -Name 'dbghelp_StackWalk64' -Namespace Win32 -PassThru
# $api::StackWalk64(MachineType, hProcess, hThread, StackFrame, ContextRecord, ReadMemoryRoutine, FunctionTableAccessRoutine, GetModuleBaseRoutine, TranslateAddress)

#uselib "dbghelp.dll"
#func global StackWalk64 "StackWalk64" sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr
; StackWalk64 MachineType, hProcess, hThread, varptr(StackFrame), ContextRecord, ReadMemoryRoutine, FunctionTableAccessRoutine, GetModuleBaseRoutine, TranslateAddress   ; 戻り値は stat
; MachineType : DWORD -> "sptr"
; hProcess : HANDLE -> "sptr"
; hThread : HANDLE -> "sptr"
; StackFrame : STACKFRAME64* in/out -> "sptr"
; ContextRecord : void* in/out -> "sptr"
; ReadMemoryRoutine : PREAD_PROCESS_MEMORY_ROUTINE64 optional -> "sptr"
; FunctionTableAccessRoutine : PFUNCTION_TABLE_ACCESS_ROUTINE64 optional -> "sptr"
; GetModuleBaseRoutine : PGET_MODULE_BASE_ROUTINE64 optional -> "sptr"
; TranslateAddress : PTRANSLATE_ADDRESS_ROUTINE64 optional -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

出力引数:

#uselib "dbghelp.dll"
#cfunc global StackWalk64 "StackWalk64" int, sptr, sptr, var, sptr, sptr, sptr, sptr, sptr
; res = StackWalk64(MachineType, hProcess, hThread, StackFrame, ContextRecord, ReadMemoryRoutine, FunctionTableAccessRoutine, GetModuleBaseRoutine, TranslateAddress)
; MachineType : DWORD -> "int"
; hProcess : HANDLE -> "sptr"
; hThread : HANDLE -> "sptr"
; StackFrame : STACKFRAME64* in/out -> "var"
; ContextRecord : void* in/out -> "sptr"
; ReadMemoryRoutine : PREAD_PROCESS_MEMORY_ROUTINE64 optional -> "sptr"
; FunctionTableAccessRoutine : PFUNCTION_TABLE_ACCESS_ROUTINE64 optional -> "sptr"
; GetModuleBaseRoutine : PGET_MODULE_BASE_ROUTINE64 optional -> "sptr"
; TranslateAddress : PTRANSLATE_ADDRESS_ROUTINE64 optional -> "sptr"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。#uselib "dbghelp.dll"
#cfunc global StackWalk64 "StackWalk64" int, sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr
; res = StackWalk64(MachineType, hProcess, hThread, varptr(StackFrame), ContextRecord, ReadMemoryRoutine, FunctionTableAccessRoutine, GetModuleBaseRoutine, TranslateAddress)
; MachineType : DWORD -> "int"
; hProcess : HANDLE -> "sptr"
; hThread : HANDLE -> "sptr"
; StackFrame : STACKFRAME64* in/out -> "sptr"
; ContextRecord : void* in/out -> "sptr"
; ReadMemoryRoutine : PREAD_PROCESS_MEMORY_ROUTINE64 optional -> "sptr"
; FunctionTableAccessRoutine : PFUNCTION_TABLE_ACCESS_ROUTINE64 optional -> "sptr"
; GetModuleBaseRoutine : PGET_MODULE_BASE_ROUTINE64 optional -> "sptr"
; TranslateAddress : PTRANSLATE_ADDRESS_ROUTINE64 optional -> "sptr"
; ※出力/バッファ引数はポインタ方式(token=sptr / 呼び出しは varptr(変数))。

出力引数:

; BOOL StackWalk64(DWORD MachineType, HANDLE hProcess, HANDLE hThread, STACKFRAME64* StackFrame, void* ContextRecord, PREAD_PROCESS_MEMORY_ROUTINE64 ReadMemoryRoutine, PFUNCTION_TABLE_ACCESS_ROUTINE64 FunctionTableAccessRoutine, PGET_MODULE_BASE_ROUTINE64 GetModuleBaseRoutine, PTRANSLATE_ADDRESS_ROUTINE64 TranslateAddress)
#uselib "dbghelp.dll"
#cfunc global StackWalk64 "StackWalk64" int, intptr, intptr, var, intptr, intptr, intptr, intptr, intptr
; res = StackWalk64(MachineType, hProcess, hThread, StackFrame, ContextRecord, ReadMemoryRoutine, FunctionTableAccessRoutine, GetModuleBaseRoutine, TranslateAddress)
; MachineType : DWORD -> "int"
; hProcess : HANDLE -> "intptr"
; hThread : HANDLE -> "intptr"
; StackFrame : STACKFRAME64* in/out -> "var"
; ContextRecord : void* in/out -> "intptr"
; ReadMemoryRoutine : PREAD_PROCESS_MEMORY_ROUTINE64 optional -> "intptr"
; FunctionTableAccessRoutine : PFUNCTION_TABLE_ACCESS_ROUTINE64 optional -> "intptr"
; GetModuleBaseRoutine : PGET_MODULE_BASE_ROUTINE64 optional -> "intptr"
; TranslateAddress : PTRANSLATE_ADDRESS_ROUTINE64 optional -> "intptr"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。; BOOL StackWalk64(DWORD MachineType, HANDLE hProcess, HANDLE hThread, STACKFRAME64* StackFrame, void* ContextRecord, PREAD_PROCESS_MEMORY_ROUTINE64 ReadMemoryRoutine, PFUNCTION_TABLE_ACCESS_ROUTINE64 FunctionTableAccessRoutine, PGET_MODULE_BASE_ROUTINE64 GetModuleBaseRoutine, PTRANSLATE_ADDRESS_ROUTINE64 TranslateAddress)
#uselib "dbghelp.dll"
#cfunc global StackWalk64 "StackWalk64" int, intptr, intptr, intptr, intptr, intptr, intptr, intptr, intptr
; res = StackWalk64(MachineType, hProcess, hThread, varptr(StackFrame), ContextRecord, ReadMemoryRoutine, FunctionTableAccessRoutine, GetModuleBaseRoutine, TranslateAddress)
; MachineType : DWORD -> "int"
; hProcess : HANDLE -> "intptr"
; hThread : HANDLE -> "intptr"
; StackFrame : STACKFRAME64* in/out -> "intptr"
; ContextRecord : void* in/out -> "intptr"
; ReadMemoryRoutine : PREAD_PROCESS_MEMORY_ROUTINE64 optional -> "intptr"
; FunctionTableAccessRoutine : PFUNCTION_TABLE_ACCESS_ROUTINE64 optional -> "intptr"
; GetModuleBaseRoutine : PGET_MODULE_BASE_ROUTINE64 optional -> "intptr"
; TranslateAddress : PTRANSLATE_ADDRESS_ROUTINE64 optional -> "intptr"
; ※出力/バッファ引数はポインタ方式(token=intptr / 呼び出しは varptr(変数))。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	dbghelp = windows.NewLazySystemDLL("dbghelp.dll")
	procStackWalk64 = dbghelp.NewProc("StackWalk64")
)

// MachineType (DWORD), hProcess (HANDLE), hThread (HANDLE), StackFrame (STACKFRAME64* in/out), ContextRecord (void* in/out), ReadMemoryRoutine (PREAD_PROCESS_MEMORY_ROUTINE64 optional), FunctionTableAccessRoutine (PFUNCTION_TABLE_ACCESS_ROUTINE64 optional), GetModuleBaseRoutine (PGET_MODULE_BASE_ROUTINE64 optional), TranslateAddress (PTRANSLATE_ADDRESS_ROUTINE64 optional)
r1, _, err := procStackWalk64.Call(
	uintptr(MachineType),
	uintptr(hProcess),
	uintptr(hThread),
	uintptr(StackFrame),
	uintptr(ContextRecord),
	uintptr(ReadMemoryRoutine),
	uintptr(FunctionTableAccessRoutine),
	uintptr(GetModuleBaseRoutine),
	uintptr(TranslateAddress),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // BOOL

function StackWalk64(
  MachineType: DWORD;   // DWORD
  hProcess: THandle;   // HANDLE
  hThread: THandle;   // HANDLE
  StackFrame: Pointer;   // STACKFRAME64* in/out
  ContextRecord: Pointer;   // void* in/out
  ReadMemoryRoutine: Pointer;   // PREAD_PROCESS_MEMORY_ROUTINE64 optional
  FunctionTableAccessRoutine: Pointer;   // PFUNCTION_TABLE_ACCESS_ROUTINE64 optional
  GetModuleBaseRoutine: Pointer;   // PGET_MODULE_BASE_ROUTINE64 optional
  TranslateAddress: Pointer   // PTRANSLATE_ADDRESS_ROUTINE64 optional
): BOOL; stdcall;
  external 'dbghelp.dll' name 'StackWalk64';

result := DllCall("dbghelp\StackWalk64"
    , "UInt", MachineType   ; DWORD
    , "Ptr", hProcess   ; HANDLE
    , "Ptr", hThread   ; HANDLE
    , "Ptr", StackFrame   ; STACKFRAME64* in/out
    , "Ptr", ContextRecord   ; void* in/out
    , "Ptr", ReadMemoryRoutine   ; PREAD_PROCESS_MEMORY_ROUTINE64 optional
    , "Ptr", FunctionTableAccessRoutine   ; PFUNCTION_TABLE_ACCESS_ROUTINE64 optional
    , "Ptr", GetModuleBaseRoutine   ; PGET_MODULE_BASE_ROUTINE64 optional
    , "Ptr", TranslateAddress   ; PTRANSLATE_ADDRESS_ROUTINE64 optional
    , "Int")   ; return: BOOL

●StackWalk64(MachineType, hProcess, hThread, StackFrame, ContextRecord, ReadMemoryRoutine, FunctionTableAccessRoutine, GetModuleBaseRoutine, TranslateAddress) = DLL("dbghelp.dll", "bool StackWalk64(dword, void*, void*, void*, void*, void*, void*, void*, void*)")
# 呼び出し: StackWalk64(MachineType, hProcess, hThread, StackFrame, ContextRecord, ReadMemoryRoutine, FunctionTableAccessRoutine, GetModuleBaseRoutine, TranslateAddress)
# MachineType : DWORD -> "dword"
# hProcess : HANDLE -> "void*"
# hThread : HANDLE -> "void*"
# StackFrame : STACKFRAME64* in/out -> "void*"
# ContextRecord : void* in/out -> "void*"
# ReadMemoryRoutine : PREAD_PROCESS_MEMORY_ROUTINE64 optional -> "void*"
# FunctionTableAccessRoutine : PFUNCTION_TABLE_ACCESS_ROUTINE64 optional -> "void*"
# GetModuleBaseRoutine : PGET_MODULE_BASE_ROUTINE64 optional -> "void*"
# TranslateAddress : PTRANSLATE_ADDRESS_ROUTINE64 optional -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。