66238: DeviceLock DLP: Memory leaks

use Google Translate

Applies to: 

Last update: Tue, 2020-11-17 09:53


Got memory leaks on a computer with DeviceLock Service installed and running? In order to research the issue, we will need a process memory dump created with the <i>Usermode stack trace database</i> flag checked for DeviceLock Service executable file. This article contains the how-to.



Download the attached gflags.exe utility, then

- Run gflags /i dlservice.exe +ust +htc


- Run the gflags.exe utility in graphic mode, open Image File tab, input dlservice.exe and press the Tab key on keyboard. Make sure that the Сreate user mode stack trace database flag is checked on first tab and Enable Heap Tail Checking flag on the Image File tab

- Restart DeviceLock Service, wait for DLService.exe (or [i]dlservice_x64.exe) to take 200+ mb of RAM and send us a dump generated with Debugging Tools for Windows:


1. Download and install Debugging Tools for Windows: http://msdn.microsoft.com/en-us/windows/hardware/gg463009 (direct link for x86 systems:http://download.microsoft.com/download/A/6/A/A6AC035D-DA3F-4F0C-ADA4-37C...)

2. In DeviceLock Service Options-> DeviceLock Administrators, set Enable Default Security flag

3. Run WinDBG.exe

4. Select File\Attach to Process..., select dlservice.exe from the list, press OK

5. In the command line of debugger, type .dump /ma /u C:\dlservice.dmp

6. Wait until the dump is created and debugger returns message similar to

Creating C:\dlservice_0f50_2009-05-27_13-47-20-193_0454.dmp - mini user dump

Dump successfully written

7. Compress the dump file from c:\dlservice_....dmp to an archive (.zip) and upload it to ftp.devicelock.com.


*Contact DeviceLock support team (http://devicelock.com/support) for FTP server credentials.

**Please upload files to the FTP server using binary mode (refer to your FTP client documentation). Otherwise files are likely to get corrupted.

***Set the type of the archive you compress the dump into, as ZIP.