The PDB File Format
Introduction
PDB (Program Database) is a file format invented by Microsoft and which contains debug information that can be consumed by debuggers and other tools. Since officially supported APIs exist on Windows for querying debug information from PDBs even without the user understanding the internals of the file format, a large ecosystem of tools has been built for Windows to consume this format. In order for Clang to be able to generate programs that can interoperate with these tools, it is necessary for us to generate PDB files ourselves.
At the same time, LLVM has a long history of being able to cross-compile from any platform to any platform, and we wish for the same to be true here. So it is necessary for us to understand the PDB file format at the byte-level so that we can generate PDB files entirely on our own.
This manual describes what we know about the PDB file format today. The layout of the file, the various streams contained within, the format of individual records within, and more.
We would like to extend our heartfelt gratitude to Microsoft, without whom we would not be where we are today. Much of the knowledge contained within this manual was learned through reading code published by Microsoft on their GitHub repo.
File Layout
Important
Unless otherwise specified, all numeric values are encoded in little endian.
If you see a type such as uint16_t
or uint64_t
going forward, always
assume it is little endian!
The MSF Container
A PDB file is an MSF (Multi-Stream Format) file. An MSF file is a "file system within a file". It contains multiple streams (aka files) which can represent arbitrary data, and these streams are divided into blocks which may not necessarily be contiguously laid out within the MSF container file. Additionally, the MSF contains a stream directory (aka MFT) which describes how the streams (files) are laid out within the MSF.
For more information about the MSF container format, stream directory, and block layout, see :doc:`MsfFile`.
Streams
The PDB format contains a number of streams which describe various information such as the types, symbols, source files, and compilands (e.g. object files) of a program, as well as some additional streams containing hash tables that are used by debuggers and other tools to provide fast lookup of records and types by name, and various other information about how the program was compiled such as the specific toolchain used, and more. A summary of streams contained in a PDB file is as follows:
Name | Stream Index | Contents |
---|---|---|
Old Directory |
|
|
PDB Stream |
|
|
TPI Stream |
|
|
DBI Stream |
|
|
IPI Stream |
|
|
/LinkInfo |
|
|
/src/headerblock |
|
|
/names |
|
|
Module Info Stream |
|
|
Public Stream |
|
|
Global Stream |
|
|
TPI Hash Stream |
|
|
IPI Hash Stream |
|
|
More information about the structure of each of these can be found on the following pages:
- :doc:`PdbStream`
- Information about the PDB Info Stream and how it is used to match PDBs to EXEs.
- :doc:`TpiStream`
- Information about the TPI stream and the CodeView records contained within.
- :doc:`DbiStream`
- Information about the DBI stream and relevant substreams including the Module Substreams, source file information, and CodeView symbol records contained within.
- :doc:`ModiStream`
- Information about the Module Information Stream, of which there is one for each compilation unit and the format of symbols contained within.
- :doc:`PublicStream`
- Information about the Public Symbol Stream.
- :doc:`GlobalStream`
- Information about the Global Symbol Stream.
- :doc:`HashTable`
- Information about the serialized hash table format used internally to represent things such as the Named Stream Map and the Hash Adjusters in the :doc:`TPI/IPI Stream <TpiStream>`.
CodeView
CodeView is another format which comes into the picture. While MSF defines the structure of the overall file, and PDB defines the set of streams that appear within the MSF file and the format of those streams, CodeView defines the format of symbol and type records that appear within specific streams. Refer to the pages on :doc:`CodeViewSymbols` and :doc:`CodeViewTypes` for more information about the CodeView format.