Snapshotting executing code with a modifiable snapshot definition

• US 9,465,721 B2
• Filed: 08/19/2013
• Issued: 10/11/2016
• Est. Priority Date: 08/19/2013
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Garrett, Charles D., Gounares, Alexander G.
• Primary Examiner(s): Chen, Xi D
• Application Number:
  US13/970,302
• Publication Number:
  US 20150052403A1
• Time in Patent Office: 1,149 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 11/366 using diagnostics G06F11/0703 takes precedence

Abstract

A tracing and debugging system may take a snapshot of an application in response to an event, and may continue executing the program after the snapshot is captured. The snapshot may be stored and retrieved later in a debugging tool where a programmer may browse the snapshot or the snapshot may have some other analysis performed. The snapshot may contain a subset of the state of the application, such as call stacks, portions of source code, the values of local and global variables, and various metadata. The snapshot may be defined in a snapshot configuration that may include an event description and data to be collected.

Claims

1. A method, implemented at a computer system that includes one or more processors, for collecting performance data and snapshot data of an application executing on the one or more processors, the method comprising:

during execution of an application;

collecting performance data comprising one or more of counters, processing times, and data throughput;

identifying a snapshot definition, comprising (i) an event definition defining a condition under which execution of the application is to be paused and a snapshot of the paused application is to be taken, and (ii) a dataset definition defining a plurality of snapshot data items, different from the performance data, that are to be collected as part of the snapshot and that define an execution state of the application when satisfaction of the condition occurred, the plurality of snapshot data items including one or more of a call stack and one or more variable values; and

identifying satisfaction of the condition;

based at least on identifying satisfaction of the condition, pausing both execution of the application and collection of performance data;

while execution of the application is paused, collecting the plurality of snapshot data items according to the dataset definition;

subsequent to collecting the plurality of snapshot data items, resuming both execution of the application and collection of the performance data;

assigning a first security policy to the collected performance data and a second security policy to the collected plurality of snapshot data items, the first security policy including a first indication that the collected performance data should be unencrypted and the second security policy including a second indication that the collected plurality of snapshot items should be encrypted;

storing the collected performance data within a performance database in an unencrypted format based on the first indication of the first security policy; and

storing the collected plurality of snapshot data items within a snapshot database in an encrypted format based on an the second indication of the second security policy.

2. The method of claim 1, wherein the snapshot definition comprises executable code, the executable code defining at least one parameter to be collected.

3. The method of claim 2, wherein the executable code also defines the condition.

4. The method of claim 2, wherein the executable code is executed in a thread different from the application.

5. The method of claim 1, wherein the condition is defined by a function call within the application.

6. The method of claim 1, further comprising adding the function call to the application prior to compilation.

7. The method of claim 1, further comprising adding the function call to the application after compilation.

8. The method of claim 1, wherein the condition comprises an event descriptor.

9. The method of claim 1, wherein collecting the plurality of snapshot data items according to the dataset definition comprises traversing a call stack and gathering at least one local variable at one frame in the call stack.

10. A computer program product comprising one or more hardware storage devices having stored thereon computer-executable instructions that are executable by at least one processor of a computer system to configure the computer system to collect performance data and snapshot data of an application executing on the at least one processor, the computer-executable instructions including instructions that configure the computer system to perform at least the following:

during execution of an application;

collect performance data comprising one or more of counters, processing times, and data throughput;

identify a snapshot definition comprising (i) an event definition defining a condition under which execution of the application is to be paused and a snapshot of the paused application is to be taken, and (ii) a dataset definition defining a plurality of snapshot data items, different from the performance data, that are to be collected as part of the snapshot and that define an execution state of the application when satisfaction of the condition occurred, the plurality of snapshot data items including one or more of a call stack and one or more variable values; and

identify satisfaction of the condition for collecting said snapshot;

based at least on identifying satisfaction of the condition, pause both execution of the application and collection of performance data;

while execution of the application is paused, collect the plurality of snapshot data items according to the dataset definition;

subsequent to collecting the plurality of snapshot data items, resume both execution of the application and collection of performance data

assign a first security policy to the collected performance data and a second security policy to the collected plurality of snapshot data items, the first security policy including a first indication that the collected performance data should be unencrypted and the second security policy including a second indication that the collected plurality of snapshot items should be encrypted;

store the collected performance data within a performance database in an unencrypted format based on the first indication of the first security policy; and

store the collected plurality of snapshot data items within a snapshot database in an encrypted format based on an the second indication of the second security policy.

11. The computer program product of claim 10, wherein the security policy also includes at least one of:

user access restrictions;

network configuration; and

physical security.

12. A computer system comprising:

at least one processor; and

one or more computer readable media having stored thereon computer-executable instructions that are executable by the at least one processor to collect performance data and snapshot data of an application executing on the at least one processor, the computer-executable instructions including instructions that are executable to configure the computer system to perform at least the following;

during execution of an application;

collect performance data comprising one or more of counters, processing times, and data throughput;

identify a snapshot definition comprising (i) an event definition defining a condition under which execution of the application is to be paused and a snapshot of the paused application is to be taken, and (ii) a dataset definition defining a plurality of snapshot data items, different from the performance data, that are to be collected as part of the snapshot and that define an execution state of the application when satisfaction of the condition occurred, the plurality of snapshot data items including one or more of a call stack and one or more variable values; and

identify satisfaction of the condition;

based at least on identifying satisfaction of the condition, pause both execution of the application and collection of performance data;

while execution of the application is paused, collect the plurality of snapshot data items according to the dataset definition;

subsequent to collecting the plurality of snapshot data items, resume both execution of the application and collection of the performance data;

assign a first security policy to the collected performance data and a second security policy to the collected plurality of snapshot data items, the first security policy including a first indication that the collected performance data should be unencrypted and the second security policy including a second indication that the collected plurality of snapshot items should be encrypted;

store the collected performance data within a performance database in an unencrypted format based on the first indication of the first security policy; and

store the collected plurality of snapshot data items within a snapshot database in an encrypted format based on an the second indication of the second security policy.

13. The computer system of claim 12, wherein the condition is defined by a function call within the application.

14. The computer system of claim 13, wherein manager the computer system is also configured to add the function call to said application.

15. The computer system of claim 14, wherein the computer system is also configured to add the function call prior to compilation.

16. The computer system of claim 14, wherein the computer system is also configured to add the function call after compilation.

17. The computer system of claim 14, wherein the computer system is also configured to add the function call within a debugging environment.

18. The computer system of claim 12, wherein the condition comprises an event descriptor.

19. The computer system of claim 18, wherein the event descriptor comprises a descriptor for an input/output event.

20. The computer system of claim 19, wherein the descriptor comprises a device state descriptor.

21. The computer system of claim 18, wherein the event descriptor comprises an expression, the expression comprising a reference to a variable within the application.

22. The computer system of claim 21, wherein the variable comprises a local variable.

23. The computer system of claim 12, wherein the computer system is also configured to gather the plurality of snapshot data items by traversing a call stack and gathering at least one local variable at one frame in the call stack.

24. The computer system of claim 12, wherein the environment within which the application is executing comprises a virtual machine.

25. The computer system of claim 12, wherein the environment within which the application is executing comprises an operating system.