Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ERROR: FindPlugIns 8007007b
- ERROR: Some plugins may not be available [8007007b]
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- DRIVER_CORRUPTED_EXPOOL (c5)
- An attempt was made to access a pageable (or completely invalid) address at an
- interrupt request level (IRQL) that is too high. This is
- caused by drivers that have corrupted the system pool. Run the driver
- verifier against any new (or suspect) drivers, and if that doesn't turn up
- the culprit, then use gflags to enable special pool.
- Arguments:
- Arg1: 0000000000000008, memory referenced
- Arg2: 0000000000000002, IRQL
- Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
- Arg4: fffff80002baa000, address which referenced memory
- Debugging Details:
- ------------------
- BUGCHECK_STR: 0xC5_2
- CURRENT_IRQL: f
- FAULTING_IP:
- nt!ExDeferredFreePool+174
- fffff800`02baa000 4c395008 cmp qword ptr [rax+8],r10
- DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
- PROCESS_NAME: System
- ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
- DPC_STACK_BASE: FFFFF80000BA2FB0
- TRAP_FRAME: fffff80000b9c7b0 -- (.trap 0xfffff80000b9c7b0)
- NOTE: The trap frame does not contain all registers.
- Some register values may be zeroed or incorrect.
- rax=0000000000000000 rbx=0000000000000000 rcx=fffff80002c05a40
- rdx=fffffa800445d810 rsi=0000000000000000 rdi=0000000000000000
- rip=fffff80002baa000 rsp=fffff80000b9c940 rbp=0000000000000000
- r8=fffffa800445e850 r9=fffffa800445d000 r10=fffffa800445d010
- r11=0000000000000001 r12=0000000000000000 r13=0000000000000000
- r14=0000000000000000 r15=0000000000000000
- iopl=0 nv up ei ng nz ac po cy
- nt!ExDeferredFreePool+0x174:
- fffff800`02baa000 4c395008 cmp qword ptr [rax+8],r10 ds:00000000`00000008=????????????????
- Resetting default scope
- LAST_CONTROL_TRANSFER: from fffff80002b6d6d2 to fffff80002a6ff60
- STACK_TEXT:
- fffff800`00b9bef8 fffff800`02b6d6d2 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`03c8d000 : nt!RtlpBreakWithStatusInstruction
- fffff800`00b9bf00 fffff800`02b6ea98 : fffff800`00000004 fffff800`02c76b40 00000000`0000000f fffff800`02bfec40 : nt!KiBugCheckDebugBreak+0x12
- fffff800`00b9bf60 fffff800`02a78004 : fffffa80`036b39b8 fffff880`0160154c fffffa80`036abcc0 fffff800`02af56a2 : nt!KeBugCheck2+0xcf8
- fffff800`00b9c630 fffff800`02a77469 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx+0x104
- fffff800`00b9c670 fffff800`02a760e0 : 00000000`00000001 00000000`00000000 fffffa80`03b240d0 00000000`00000001 : nt!KiBugCheckDispatch+0x69
- fffff800`00b9c7b0 fffff800`02baa000 : 00000000`00000000 fffffa80`03d27a10 fffffa80`03d271a0 fffff880`03c0f783 : nt!KiPageFault+0x260
- fffff800`00b9c940 fffff800`02bab4c1 : fffffa80`03d271a0 fffffa80`0445b920 00000000`00000000 00000000`00000000 : nt!ExDeferredFreePool+0x174
- fffff800`00b9c9d0 fffff880`03c35557 : 00000000`54627255 00000000`000003d0 fffffa80`70627375 fffffa80`000003ed : nt!ExFreePoolWithTag+0x411
- fffff800`00b9ca80 fffff880`03c205bc : fffffa80`03d27050 fffffa80`0445b902 00000000`00000000 fffffa80`03d271a0 : USBPORT!USBPORT_DereferenceDeviceHandle+0xff
- fffff800`00b9cae0 fffff880`03c20ab7 : fffffa80`04460802 fffffa80`0445d8c0 00000000`ffffffff fffffa80`03d27ea8 : USBPORT!USBPORT_Core_iCompleteDoneTransfer+0x9f8
- fffff800`00b9cbc0 fffff880`03c1e64f : fffffa80`03d27ea8 fffffa80`03d271a0 fffffa80`03d28040 00000000`00000000 : USBPORT!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x3a7
- fffff800`00b9cc20 fffff880`03c0ff89 : fffffa80`03d27050 00000000`00000000 fffffa80`03d27e02 fffffa80`03d27ea8 : USBPORT!USBPORT_Core_UsbIocDpc_Worker+0xf3
- fffff800`00b9cc60 fffff800`02a835dc : fffff800`02bf0e80 fffffa80`03d27ea8 fffffa80`03d27ec0 00000000`00000000 : USBPORT!USBPORT_Xdpc_Worker+0x1d9
- fffff800`00b9cc90 fffff800`02a806fa : fffff800`02bf0e80 fffff800`02bfec40 00000000`00000000 fffff880`03c0fdb0 : nt!KiRetireDpcList+0x1bc
- fffff800`00b9cd40 00000000`00000000 : fffff800`00b9d000 fffff800`00b97000 fffff800`00b9cd00 00000000`00000000 : nt!KiIdleLoop+0x5a
- STACK_COMMAND: kb
- FOLLOWUP_IP:
- nt!ExDeferredFreePool+174
- fffff800`02baa000 4c395008 cmp qword ptr [rax+8],r10
- SYMBOL_STACK_INDEX: 6
- SYMBOL_NAME: nt!ExDeferredFreePool+174
- FOLLOWUP_NAME: Pool_corruption
- IMAGE_NAME: Pool_Corruption
- DEBUG_FLR_IMAGE_TIMESTAMP: 0
- IMAGE_VERSION: 6.1.7600.16385
- MODULE_NAME: Pool_Corruption
- FAILURE_BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+174
- BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+174
- ANALYSIS_SOURCE: KM
- FAILURE_ID_HASH_STRING: km:x64_0xc5_2_nt!exdeferredfreepool+174
- FAILURE_ID_HASH: {ff178b7a-c645-45e3-1726-5c1ae55aa106}
- Followup: Pool_corruption
- ---------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement