Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
- Online Crash Dump Analysis Service
- See http://www.osronline.com for more information
- Windows 8 Kernel Version 14393 MP (8 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS Personal
- Built by: 14393.953.amd64fre.rs1_release_inmarket.170303-1614
- Machine Name:*** WARNING: Unable to verify timestamp for srv.sys
- *** ERROR: Module load completed but symbols could not be loaded for srv.sys
- Kernel base = 0xfffff802`e9c08000 PsLoadedModuleList = 0xfffff802`e9f07000
- Debug session time: Tue Mar 21 22:01:27.748 2017 (UTC - 4:00)
- System Uptime: 0 days 1:07:39.496
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- BAD_POOL_HEADER (19)
- The pool is already corrupt at the time of the current request.
- This may or may not be due to the caller.
- The internal pool links must be walked to figure out a possible cause of
- the problem, and then special pool applied to the suspect tags or the driver
- verifier to a suspect driver.
- Arguments:
- Arg1: 0000000000000020, a pool block header size is corrupt.
- Arg2: ffff858b310fd1a0, The pool entry we were looking for within the page.
- Arg3: ffff858b310fd1c0, The next pool entry.
- Arg4: 000000000402001a, (reserved)
- Debugging Details:
- ------------------
- ***** Kernel symbols are WRONG. Please fix symbols to do analysis.
- *************************************************************************
- *** ***
- *** ***
- *** Either you specified an unqualified symbol, or your debugger ***
- *** doesn't have full symbol information. Unqualified symbol ***
- *** resolution is turned off by default. Please either specify a ***
- *** fully qualified symbol module!symbolname, or enable resolution ***
- *** of unqualified symbols by typing ".symopt- 100". Note that ***
- *** enabling unqualified symbol resolution with network symbol ***
- *** server shares in the symbol path may cause the debugger to ***
- *** appear to hang for long periods of time when an incorrect ***
- *** symbol name is typed or the network symbol server is down. ***
- *** ***
- *** For some commands to work properly, your symbol path ***
- *** must point to .pdb files that have full type information. ***
- *** ***
- *** Certain .pdb files (such as the public OS symbols) do not ***
- *** contain the required information. Contact the group that ***
- *** provided you with these symbols if you need this command to ***
- *** work. ***
- *** ***
- *** Type referenced: nt!_KPRCB ***
- *** ***
- *************************************************************************
- TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
- *************************************************************************
- *** ***
- *** ***
- *** Either you specified an unqualified symbol, or your debugger ***
- *** doesn't have full symbol information. Unqualified symbol ***
- *** resolution is turned off by default. Please either specify a ***
- *** fully qualified symbol module!symbolname, or enable resolution ***
- *** of unqualified symbols by typing ".symopt- 100". Note that ***
- *** enabling unqualified symbol resolution with network symbol ***
- *** server shares in the symbol path may cause the debugger to ***
- *** appear to hang for long periods of time when an incorrect ***
- *** symbol name is typed or the network symbol server is down. ***
- *** ***
- *** For some commands to work properly, your symbol path ***
- *** must point to .pdb files that have full type information. ***
- *** ***
- *** Certain .pdb files (such as the public OS symbols) do not ***
- *** contain the required information. Contact the group that ***
- *** provided you with these symbols if you need this command to ***
- *** work. ***
- *** ***
- *** Type referenced: nt!_KPRCB ***
- *** ***
- *************************************************************************
- *************************************************************************
- *** ***
- *** ***
- *** Either you specified an unqualified symbol, or your debugger ***
- *** doesn't have full symbol information. Unqualified symbol ***
- *** resolution is turned off by default. Please either specify a ***
- *** fully qualified symbol module!symbolname, or enable resolution ***
- *** of unqualified symbols by typing ".symopt- 100". Note that ***
- *** enabling unqualified symbol resolution with network symbol ***
- *** server shares in the symbol path may cause the debugger to ***
- *** appear to hang for long periods of time when an incorrect ***
- *** symbol name is typed or the network symbol server is down. ***
- *** ***
- *** For some commands to work properly, your symbol path ***
- *** must point to .pdb files that have full type information. ***
- *** ***
- *** Certain .pdb files (such as the public OS symbols) do not ***
- *** contain the required information. Contact the group that ***
- *** provided you with these symbols if you need this command to ***
- *** work. ***
- *** ***
- *** Type referenced: nt!_KPRCB ***
- *** ***
- *************************************************************************
- ADDITIONAL_DEBUG_TEXT:
- Use '!findthebuild' command to search for the target build information.
- If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
- MODULE_NAME: tcpip
- FAULTING_MODULE: fffff802e9c08000 nt
- DEBUG_FLR_IMAGE_TIMESTAMP: 58ba5996
- BUGCHECK_STR: 0x19_20
- POOL_ADDRESS: unable to get nt!MmSpecialPoolStart
- unable to get nt!MmSpecialPoolEnd
- unable to get nt!MmPagedPoolEnd
- unable to get nt!MmNonPagedPoolStart
- unable to get nt!MmSizeOfNonPagedPoolInBytes
- ffff858b310fd1a0
- DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
- CURRENT_IRQL: 0
- LAST_CONTROL_TRANSFER: from fffff802e9e51de8 to fffff802e9d567c0
- STACK_TEXT:
- ffffb381`0246c058 fffff802`e9e51de8 : 00000000`00000019 00000000`00000020 ffff858b`310fd1a0 ffff858b`310fd1c0 : nt+0x14e7c0
- ffffb381`0246c060 00000000`00000019 : 00000000`00000020 ffff858b`310fd1a0 ffff858b`310fd1c0 00000000`0402001a : nt+0x249de8
- ffffb381`0246c068 00000000`00000020 : ffff858b`310fd1a0 ffff858b`310fd1c0 00000000`0402001a ffffb381`e0000001 : 0x19
- ffffb381`0246c070 ffff858b`310fd1a0 : ffff858b`310fd1c0 00000000`0402001a ffffb381`e0000001 ffffb381`0246c2c0 : 0x20
- ffffb381`0246c078 ffff858b`310fd1c0 : 00000000`0402001a ffffb381`e0000001 ffffb381`0246c2c0 ffff858b`00000000 : 0xffff858b`310fd1a0
- ffffb381`0246c080 00000000`0402001a : ffffb381`e0000001 ffffb381`0246c2c0 ffff858b`00000000 fffff80f`676e7049 : 0xffff858b`310fd1c0
- ffffb381`0246c088 ffffb381`e0000001 : ffffb381`0246c2c0 ffff858b`00000000 fffff80f`676e7049 00000000`00006883 : 0x402001a
- ffffb381`0246c090 ffffb381`0246c2c0 : ffff858b`00000000 fffff80f`676e7049 00000000`00006883 ffff858b`334fcf50 : 0xffffb381`e0000001
- ffffb381`0246c098 ffff858b`00000000 : fffff80f`676e7049 00000000`00006883 ffff858b`334fcf50 fffff80f`c76bf055 : 0xffffb381`0246c2c0
- ffffb381`0246c0a0 fffff80f`676e7049 : 00000000`00006883 ffff858b`334fcf50 fffff80f`c76bf055 00000000`00000000 : 0xffff858b`00000000
- ffffb381`0246c0a8 00000000`00006883 : ffff858b`334fcf50 fffff80f`c76bf055 00000000`00000000 ffffb381`0246c140 : 0xfffff80f`676e7049
- ffffb381`0246c0b0 ffff858b`334fcf50 : fffff80f`c76bf055 00000000`00000000 ffffb381`0246c140 ffff858b`310fd1c0 : 0x6883
- ffffb381`0246c0b8 fffff80f`c76bf055 : 00000000`00000000 ffffb381`0246c140 ffff858b`310fd1c0 ffff858b`2cfbe940 : 0xffff858b`334fcf50
- ffffb381`0246c0c0 00000000`00000000 : ffffb381`0246c140 ffff858b`310fd1c0 ffff858b`2cfbe940 ffffb381`0246c110 : tcpip+0x15f055
- STACK_COMMAND: kb
- FOLLOWUP_IP:
- tcpip+15f055
- fffff80f`c76bf055 4c8d9c2480000000 lea r11,[rsp+80h]
- SYMBOL_STACK_INDEX: d
- SYMBOL_NAME: tcpip+15f055
- FOLLOWUP_NAME: MachineOwner
- IMAGE_NAME: tcpip.sys
- BUCKET_ID: WRONG_SYMBOLS
- Followup: MachineOwner
- ---------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement