Hello,
I was writing some crappy vfw codec code which I guess was wrong or
something and surprisingly it crashed/blue screened the system !
Which isn't supposed to happen is it ? (I was debugging the codec from
delphi's debugger via virtual dub and dll's attach to process I guess etc)
(Windows XP x64 Pro SP2 all patched up):
Text report from WinDBG... I shall upload the minidump as well so somebody
might examine it.
Link to minidump:
http://members.home.nl/hbthoupperman...i051010-01.dmp
"
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini051010-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is:
SRV*c:\Tools\WinDbg\WebSymbols*
http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free
x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_gdr.100216-1301
Machine Name:
Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011d4140
Debug session time: Mon May 10 17:40:10.171 2010 (GMT+2)
System Uptime: 0 days 9:03:49.104
Loading Kernel Symbols
.................................................. ..............
.................................................. ...............
..........................
Loading User Symbols
Loading unloaded module list
.................................................. .
************************************************** *****************************
*
*
* Bugcheck Analysis
*
*
*
************************************************** *****************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80050031, 6f8, fffff800010554b7}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b8 )
Followup: MachineOwner
---------
0: kd> !analyze -v
************************************************** *****************************
*
*
* Bugcheck Analysis
*
*
*
************************************************** *****************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff800010554b7
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: VirtualDub.exe
CURRENT_IRQL: 1
EXCEPTION_RECORD: fffffadfc65c19f0 -- (.exr 0xfffffadfc65c19f0)
ExceptionAddress: fffff8000104efca
(nt!RtlpUnwindPrologue+0x000000000000016b)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 00000000000000d1
Attempt to read from address 00000000000000d1
TRAP_FRAME: fffffadfc65c1a80 -- (.trap 0xfffffadfc65c1a80)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000004 rbx=0000000000000000 rcx=fffff8000104efb8
rdx=00000000000000d1 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000104efca rsp=fffffadfc65c1c10 rbp=fffffadfc65c1d00
r8=0000000000000006 r9=fffff80001170f04 r10=0000000000000001
r11=fffffadfc65c1db0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!RtlpUnwindPrologue+0x16b:
fffff800`0104efca 488b02 mov rax,qword ptr [rdx]
ds:00000000`000000d1=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff8000102e5b4 to fffff8000102e890
STACK_TEXT:
fffff800`0007cce8 fffff800`0102e5b4 : 00000000`0000007f 00000000`00000008
00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff800`0007ccf0 fffff800`0102ceb8 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x74
fffff800`0007ce70 fffff800`010554b7 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb8
fffffadf`c65c0c40 fffff800`0100b901 : fffffadf`c65c19f0 fffffadf`c65c1400
fffffadf`c65c19f0 fffffadf`c65c1a80 : nt!RtlDispatchException+0x37
fffffadf`c65c1300 fffff800`0102e6af : fffffadf`c65c19f0 00000000`00000000
fffffadf`c65c1a80 00000000`00000000 : nt!KiDispatchException+0xd9
fffffadf`c65c1900 fffff800`0102d521 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : nt!KiExceptionExit
fffffadf`c65c1a80 fffff800`0104efca : 00000000`00000000 00000000`00000001
fffff800`011eb678 fffff800`01000000 : nt!KiPageFault+0x1e1
fffffadf`c65c1c10 fffff800`0104a1d1 : fffff800`01027eb1 fffff800`0127f131
00000000`00000000 fffff800`012166ec : nt!RtlpUnwindPrologue+0x16b
fffffadf`c65c1c60 fffff800`01054a97 : 00000000`00000000 fffffadf`c65c6b90
00000000`00000000 00000000`c65c24a0 : nt!RtlVirtualUnwind+0x27b
fffffadf`c65c1ce0 00000000`00000000 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : nt!RtlDispatchException+0x10b
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiDoubleFaultAbort+b8
fffff800`0102ceb8 90 nop
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiDoubleFaultAbort+b8
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4b7abd06
FAILURE_BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b8
BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b8
Followup: MachineOwner
---------
"
Bye,
Skybuck.
Similar Threads
Linear Mode
