************************************************** ****************************
*
* Bugcheck Analysis
*
************************************************** ****************************
Use !analyze -v to get detailed debugging information
BugCheck 1000007E, {ffffffffc0000005, fffff800020d2d69
fffffa60005afa08, fffffa60005af3e0
Probably caused by : memory_corruption ( nt!MiUnlinkFreeOrZeroedPage+8
Followup: MachineOwne
--------
2: kd> !analyze -
************************************************** ****************************
*
* Bugcheck Analysis
*
************************************************** ****************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e
This is a very common bugcheck. Usually the exception addres
pinpoint
the driver/function that caused the problem. Always note this addres
as well as the link date of the driver/image that contains thi
address
Some common problems are exception code 0x80000003. This means a har
coded breakpoint or assertion was hit, but this system was boote
/NODEBUG. This is not supposed to happen as developers should neve
hav
hardcoded breakpoints in retail code, but ..
If this happens, make sure a debugger gets connected, and th
system is booted /DEBUG. This will let us see why this breakpoint i
happening
Arguments
Arg1: ffffffffc0000005, The exception code that was not handle
Arg2: fffff800020d2d69, The address that the exception occurred a
Arg3: fffffa60005afa08, Exception Record Addres
Arg4: fffffa60005af3e0, Context Record Addres
Debugging Details
-----------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08l
referenced memory at 0x%08lx. The memory could not be %s
FAULTING_IP:
nt!MiUnlinkFreeOrZeroedPage+8
fffff800`020d2d69 49890cc0 mov qword ptr [r8+rax*8],rc
EXCEPTION_RECORD: fffffa60005afa08 -- (.exr 0xfffffa60005afa08
ExceptionAddress: fffff800020d2d6
(nt!MiUnlinkFreeOrZeroedPage+0x0000000000000089
ExceptionCode: c0000005 (Access violation
ExceptionFlags: 0000000
NumberParameters:
Parameter[0]: 000000000000000
Parameter[1]: fffffffffffffff
Attempt to read from address fffffffffffffff
CONTEXT: fffffa60005af3e0 -- (.cxr 0xfffffa60005af3e0
rax=00c00000008ce8fc rbx=fffffa8001212780 rcx=00000000001b0f6
rdx=0020000000177c2a rsi=0000000000060628 rdi=fffff800021cdbc
rip=fffff800020d2d69 rsp=fffffa60005afc40 rbp=000000000000000
r8=fffffa8000000008 r9=fffffa8006600000 r10=0000fffffffff00
r11=2aaaaaaaaaaaaaab r12=fffff8000205b000 r13=000005800000000
r14=fffffa8006600600 r15=000000000000004
iopl=0 nv up ei pl nz ac po n
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b
efl=0001021
nt!MiUnlinkFreeOrZeroedPage+0x89
fffff800`020d2d69 49890cc0 mov qword ptr [r8+rax*8],rc
ds:002b:05fffa80`046747e8=???????????????
Resetting default scop
CUSTOMER_CRASH_COUNT:
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAUL
PROCESS_NAME: Syste
CURRENT_IRQL:
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08l
referenced memory at 0x%08lx. The memory could not be %s
EXCEPTION_PARAMETER1: 000000000000000
EXCEPTION_PARAMETER2: fffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read fro
fffff8000228408
ffffffffffffffff
FOLLOWUP_IP:
nt!MiUnlinkFreeOrZeroedPage+8
fffff800`020d2d69 49890cc0 mov qword ptr [r8+rax*8],rc
BUGCHECK_STR: 0x7
LAST_CONTROL_TRANSFER: from fffff800020a4356 to fffff800020d2d6
STACK_TEXT:
fffffa60`005afc40 fffff800`020a4356 : 00000000`0000002
00000000`0000003f 00000000`00000000 fffff800`0081da40
nt!MiUnlinkFreeOrZeroedPage+0x8
fffffa60`005afc80 fffff800`0249cb1e : 01c85e33`0000000
fffffa80`00000000 00000000`00000000 fffff800`024eb000
nt!MmZeroPageThread+0x276
fffffa60`005afd20 fffff800`022d2ff3 : 002e0070`00630061
fffff800`020ea539 00000000`00000010 00000000`00000286 :
nt!Phase1Initialization+0xe
fffffa60`005afd50 fffff800`020ea546 : fffff800`021cf680
fffffa80`066c24c0 fffff800`021d4b80 fffff800`0081da40 :
nt!PspSystemThreadStartup+0x57
fffffa60`005afd80 00000000`00000000 : 00000000`00000000
00000000`00000000 00000000`00000000 00000000`00000000 :
nt!KxStartSystemThread+0x16
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiUnlinkFreeOrZeroedPage+89
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 48d1ba35
STACK_COMMAND: .cxr 0xfffffa60005af3e0 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x7E_nt!MiUnlinkFreeOrZeroedPage+89
BUCKET_ID: X64_0x7E_nt!MiUnlinkFreeOrZeroedPage+89
Followup: MachineOwner
--
Mark77
|