Advertisement
Guest User

Untitled

a guest
Mar 23rd, 2017
66
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.79 KB | None | 0 0
  1. Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
  2. Online Crash Dump Analysis Service
  3. See http://www.osronline.com for more information
  4. Windows 8 Kernel Version 14393 MP (8 procs) Free x64
  5. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  6. Built by: 14393.953.amd64fre.rs1_release_inmarket.170303-1614
  7. Machine Name:*** WARNING: Unable to verify timestamp for srv.sys
  8. *** ERROR: Module load completed but symbols could not be loaded for srv.sys
  9.  
  10. Kernel base = 0xfffff802`e9c08000 PsLoadedModuleList = 0xfffff802`e9f07000
  11. Debug session time: Tue Mar 21 22:01:27.748 2017 (UTC - 4:00)
  12. System Uptime: 0 days 1:07:39.496
  13. *******************************************************************************
  14. * *
  15. * Bugcheck Analysis *
  16. * *
  17. *******************************************************************************
  18.  
  19. BAD_POOL_HEADER (19)
  20. The pool is already corrupt at the time of the current request.
  21. This may or may not be due to the caller.
  22. The internal pool links must be walked to figure out a possible cause of
  23. the problem, and then special pool applied to the suspect tags or the driver
  24. verifier to a suspect driver.
  25. Arguments:
  26. Arg1: 0000000000000020, a pool block header size is corrupt.
  27. Arg2: ffff858b310fd1a0, The pool entry we were looking for within the page.
  28. Arg3: ffff858b310fd1c0, The next pool entry.
  29. Arg4: 000000000402001a, (reserved)
  30.  
  31. Debugging Details:
  32. ------------------
  33.  
  34. ***** Kernel symbols are WRONG. Please fix symbols to do analysis.
  35.  
  36. *************************************************************************
  37. *** ***
  38. *** ***
  39. *** Either you specified an unqualified symbol, or your debugger ***
  40. *** doesn't have full symbol information. Unqualified symbol ***
  41. *** resolution is turned off by default. Please either specify a ***
  42. *** fully qualified symbol module!symbolname, or enable resolution ***
  43. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  44. *** enabling unqualified symbol resolution with network symbol ***
  45. *** server shares in the symbol path may cause the debugger to ***
  46. *** appear to hang for long periods of time when an incorrect ***
  47. *** symbol name is typed or the network symbol server is down. ***
  48. *** ***
  49. *** For some commands to work properly, your symbol path ***
  50. *** must point to .pdb files that have full type information. ***
  51. *** ***
  52. *** Certain .pdb files (such as the public OS symbols) do not ***
  53. *** contain the required information. Contact the group that ***
  54. *** provided you with these symbols if you need this command to ***
  55. *** work. ***
  56. *** ***
  57. *** Type referenced: nt!_KPRCB ***
  58. *** ***
  59. *************************************************************************
  60. TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
  61. *************************************************************************
  62. *** ***
  63. *** ***
  64. *** Either you specified an unqualified symbol, or your debugger ***
  65. *** doesn't have full symbol information. Unqualified symbol ***
  66. *** resolution is turned off by default. Please either specify a ***
  67. *** fully qualified symbol module!symbolname, or enable resolution ***
  68. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  69. *** enabling unqualified symbol resolution with network symbol ***
  70. *** server shares in the symbol path may cause the debugger to ***
  71. *** appear to hang for long periods of time when an incorrect ***
  72. *** symbol name is typed or the network symbol server is down. ***
  73. *** ***
  74. *** For some commands to work properly, your symbol path ***
  75. *** must point to .pdb files that have full type information. ***
  76. *** ***
  77. *** Certain .pdb files (such as the public OS symbols) do not ***
  78. *** contain the required information. Contact the group that ***
  79. *** provided you with these symbols if you need this command to ***
  80. *** work. ***
  81. *** ***
  82. *** Type referenced: nt!_KPRCB ***
  83. *** ***
  84. *************************************************************************
  85. *************************************************************************
  86. *** ***
  87. *** ***
  88. *** Either you specified an unqualified symbol, or your debugger ***
  89. *** doesn't have full symbol information. Unqualified symbol ***
  90. *** resolution is turned off by default. Please either specify a ***
  91. *** fully qualified symbol module!symbolname, or enable resolution ***
  92. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  93. *** enabling unqualified symbol resolution with network symbol ***
  94. *** server shares in the symbol path may cause the debugger to ***
  95. *** appear to hang for long periods of time when an incorrect ***
  96. *** symbol name is typed or the network symbol server is down. ***
  97. *** ***
  98. *** For some commands to work properly, your symbol path ***
  99. *** must point to .pdb files that have full type information. ***
  100. *** ***
  101. *** Certain .pdb files (such as the public OS symbols) do not ***
  102. *** contain the required information. Contact the group that ***
  103. *** provided you with these symbols if you need this command to ***
  104. *** work. ***
  105. *** ***
  106. *** Type referenced: nt!_KPRCB ***
  107. *** ***
  108. *************************************************************************
  109.  
  110. ADDITIONAL_DEBUG_TEXT:
  111.  
  112. Use '!findthebuild' command to search for the target build information.
  113.  
  114. If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
  115.  
  116. MODULE_NAME: tcpip
  117.  
  118. FAULTING_MODULE: fffff802e9c08000 nt
  119.  
  120. DEBUG_FLR_IMAGE_TIMESTAMP: 58ba5996
  121.  
  122. BUGCHECK_STR: 0x19_20
  123.  
  124. POOL_ADDRESS: unable to get nt!MmSpecialPoolStart
  125. unable to get nt!MmSpecialPoolEnd
  126. unable to get nt!MmPagedPoolEnd
  127. unable to get nt!MmNonPagedPoolStart
  128. unable to get nt!MmSizeOfNonPagedPoolInBytes
  129. ffff858b310fd1a0
  130.  
  131. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  132.  
  133. CURRENT_IRQL: 0
  134.  
  135. LAST_CONTROL_TRANSFER: from fffff802e9e51de8 to fffff802e9d567c0
  136.  
  137. STACK_TEXT:
  138. ffffb381`0246c058 fffff802`e9e51de8 : 00000000`00000019 00000000`00000020 ffff858b`310fd1a0 ffff858b`310fd1c0 : nt+0x14e7c0
  139. ffffb381`0246c060 00000000`00000019 : 00000000`00000020 ffff858b`310fd1a0 ffff858b`310fd1c0 00000000`0402001a : nt+0x249de8
  140. ffffb381`0246c068 00000000`00000020 : ffff858b`310fd1a0 ffff858b`310fd1c0 00000000`0402001a ffffb381`e0000001 : 0x19
  141. ffffb381`0246c070 ffff858b`310fd1a0 : ffff858b`310fd1c0 00000000`0402001a ffffb381`e0000001 ffffb381`0246c2c0 : 0x20
  142. ffffb381`0246c078 ffff858b`310fd1c0 : 00000000`0402001a ffffb381`e0000001 ffffb381`0246c2c0 ffff858b`00000000 : 0xffff858b`310fd1a0
  143. ffffb381`0246c080 00000000`0402001a : ffffb381`e0000001 ffffb381`0246c2c0 ffff858b`00000000 fffff80f`676e7049 : 0xffff858b`310fd1c0
  144. ffffb381`0246c088 ffffb381`e0000001 : ffffb381`0246c2c0 ffff858b`00000000 fffff80f`676e7049 00000000`00006883 : 0x402001a
  145. ffffb381`0246c090 ffffb381`0246c2c0 : ffff858b`00000000 fffff80f`676e7049 00000000`00006883 ffff858b`334fcf50 : 0xffffb381`e0000001
  146. ffffb381`0246c098 ffff858b`00000000 : fffff80f`676e7049 00000000`00006883 ffff858b`334fcf50 fffff80f`c76bf055 : 0xffffb381`0246c2c0
  147. ffffb381`0246c0a0 fffff80f`676e7049 : 00000000`00006883 ffff858b`334fcf50 fffff80f`c76bf055 00000000`00000000 : 0xffff858b`00000000
  148. ffffb381`0246c0a8 00000000`00006883 : ffff858b`334fcf50 fffff80f`c76bf055 00000000`00000000 ffffb381`0246c140 : 0xfffff80f`676e7049
  149. ffffb381`0246c0b0 ffff858b`334fcf50 : fffff80f`c76bf055 00000000`00000000 ffffb381`0246c140 ffff858b`310fd1c0 : 0x6883
  150. ffffb381`0246c0b8 fffff80f`c76bf055 : 00000000`00000000 ffffb381`0246c140 ffff858b`310fd1c0 ffff858b`2cfbe940 : 0xffff858b`334fcf50
  151. ffffb381`0246c0c0 00000000`00000000 : ffffb381`0246c140 ffff858b`310fd1c0 ffff858b`2cfbe940 ffffb381`0246c110 : tcpip+0x15f055
  152.  
  153.  
  154. STACK_COMMAND: kb
  155.  
  156. FOLLOWUP_IP:
  157. tcpip+15f055
  158. fffff80f`c76bf055 4c8d9c2480000000 lea r11,[rsp+80h]
  159.  
  160. SYMBOL_STACK_INDEX: d
  161.  
  162. SYMBOL_NAME: tcpip+15f055
  163.  
  164. FOLLOWUP_NAME: MachineOwner
  165.  
  166. IMAGE_NAME: tcpip.sys
  167.  
  168. BUCKET_ID: WRONG_SYMBOLS
  169.  
  170. Followup: MachineOwner
  171. ---------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement