[pso] [Windows][Tema1]solutie.sys dubios

Sorin Dumitru dumitru.sorin87 at gmail.com
Mon Apr 12 22:23:20 EEST 2010


Ceva mai multe detalii:

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8080dab2, The address that the exception occurred at
Arg3: f78eaaec, Exception Record Address
Arg4: f78ea7e8, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx"
referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!KeDisconnectInterrupt+d
8080dab2 8a4e2c          mov     cl,byte ptr [esi+2Ch]

EXCEPTION_RECORD:  f78eaaec -- (.exr 0xfffffffff78eaaec)
ExceptionAddress: 8080dab2 (nt!KeDisconnectInterrupt+0x0000000d)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 0000002c
Attempt to read from address 0000002c

CONTEXT:  f78ea7e8 -- (.cxr 0xfffffffff78ea7e8)
eax=81a780e0 ebx=00000000 ecx=00000000 edx=81a780e0 esi=00000000 edi=00000000
eip=8080dab2 esp=f78eabb4 ebp=f78eabdc iopl=0         nv up ei ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010282
nt!KeDisconnectInterrupt+0xd:
8080dab2 8a4e2c          mov     cl,byte ptr [esi+2Ch]      ds:0023:0000002c=??
Resetting default scope

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx"
referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  0000002c

READ_ADDRESS:  0000002c

FOLLOWUP_IP:
solutie+1c0b
f7838c0b 8b55f8          mov     edx,dword ptr [ebp-8]

BUGCHECK_STR:  0x7E

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from 808e2244 to 8080dab2

STACK_TEXT:
f78eabdc 808e2244 00000000 82627810 e1932f30 nt!KeDisconnectInterrupt+0xd
f78eabf4 f7838c0b 00000000 00000001 81a780e0 nt!IoDisconnectInterrupt+0x11
WARNING: Stack unwind information not available. Following frames may be wrong.
f78eac28 f7838f1a 82627810 00000000 00000001 solutie+0x1c0b
f78eac88 808e0097 82627810 823ef000 00000000 solutie+0x1f1a
f78ead58 808e1a58 80000890 00000001 00000000 nt!IopLoadDriver+0x689
f78ead80 8082050b 80000890 00000000 827a5db0 nt!IopLoadUnloadDriver+0x45
f78eadac 80905b5b f6427cf4 00000000 00000000 nt!ExpWorkerThread+0xeb
f78eaddc 808286ad 8082044e 00000001 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  solutie+1c0b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: solutie

IMAGE_NAME:  solutie.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4bc10304

STACK_COMMAND:  .cxr 0xfffffffff78ea7e8 ; kb

FAILURE_BUCKET_ID:  0x7E_solutie+1c0b

BUCKET_ID:  0x7E_solutie+1c0b

Followup: MachineOwner
---------



2010/4/12 Sorin Dumitru <dumitru.sorin87 at gmail.com>:
> Salut,
>
> Am incarcat pe rand modulele, mai intai al meu apoi solutie, si am
> observat ca da bsod la solutie.sys. A mai intalnit cineva situatia
> asta? Care ar putea fi problema.
> Modulul meu doar verifica valoarea din registru, dar nu cred ca are
> cum sa afecteze asta celalalt modul.
>
> Sorin
>


More information about the pso mailing list