Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Microsoft (R) Windows Debugger Version 6.2.8400.0 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [C:\Windows\Minidump\042714-6801-01.dmp]
- Mini Kernel Dump File: Only registers and stack trace are available
- Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols
- Executable search path is:
- Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS
- Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
- Machine Name:
- Kernel base = 0xfffff800`03466000 PsLoadedModuleList = 0xfffff800`036a96d0
- Debug session time: Sat Apr 26 22:30:35.219 2014 (UTC + 2:00)
- System Uptime: 0 days 6:31:25.046
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- ........................
- Loading User Symbols
- Loading unloaded module list
- ...........
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- Use !analyze -v to get detailed debugging information.
- BugCheck 50, {fffff6ba40012508, 0, fffff8000350f64d, 5}
- Could not read faulting driver name
- Probably caused by : memory_corruption ( nt!MiInPageSingleKernelStack+a1 )
- Followup: MachineOwner
- ---------
- 1: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- PAGE_FAULT_IN_NONPAGED_AREA (50)
- Invalid system memory was referenced. This cannot be protected by try-except,
- it must be protected by a Probe. Typically the address is just plain bad or it
- is pointing at freed memory.
- Arguments:
- Arg1: fffff6ba40012508, memory referenced.
- Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
- Arg3: fffff8000350f64d, If non-zero, the instruction address which referenced the bad memory
- address.
- Arg4: 0000000000000005, (reserved)
- Debugging Details:
- ------------------
- Could not read faulting driver name
- READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003713100
- GetUlongFromAddress: unable to read from fffff800037131c0
- fffff6ba40012508 Nonpaged pool
- FAULTING_IP:
- nt!MiInPageSingleKernelStack+a1
- fffff800`0350f64d 488b0410 mov rax,qword ptr [rax+rdx]
- MM_INTERNAL_CODE: 5
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
- BUGCHECK_STR: 0x50
- PROCESS_NAME: System
- CURRENT_IRQL: 0
- TRAP_FRAME: fffff88003363890 -- (.trap 0xfffff88003363890)
- NOTE: The trap frame does not contain all registers.
- Some register values may be zeroed or incorrect.
- rax=0000003a40012508 rbx=0000000000000000 rcx=0000000000000000
- rdx=fffff68000000000 rsi=0000000000000000 rdi=0000000000000000
- rip=fffff8000350f64d rsp=fffff88003363a20 rbp=0000000000000000
- r8=0000000000000001 r9=0000000000000008 r10=fffff80003466000
- r11=fffff88003363b88 r12=0000000000000000 r13=0000000000000000
- r14=0000000000000000 r15=0000000000000000
- iopl=0 nv up ei pl nz na pe nc
- nt!MiInPageSingleKernelStack+0xa1:
- fffff800`0350f64d 488b0410 mov rax,qword ptr [rax+rdx] ds:fffff6ba`40012508=????????????????
- Resetting default scope
- LAST_CONTROL_TRANSFER: from fffff800035585b3 to fffff800034dbbc0
- STACK_TEXT:
- fffff880`03363728 fffff800`035585b3 : 00000000`00000050 fffff6ba`40012508 00000000`00000000 fffff880`03363890 : nt!KeBugCheckEx
- fffff880`03363730 fffff800`034d9cee : 00000000`00000000 fffff6ba`40012508 00000000`00000000 fffff685`c00124e0 : nt! ?? ::FNODOBFM::`string'+0x43801
- fffff880`03363890 fffff800`0350f64d : 00000000`00000001 fffff880`0242e000 00000000`00000000 fffff6fc`40012170 : nt!KiPageFault+0x16e
- fffff880`03363a20 fffff800`0350f8d0 : fffffa80`06dd9b50 00000000`00000000 fffffa80`0ad08b50 fffff800`0350c70b : nt!MiInPageSingleKernelStack+0xa1
- fffff880`03363b30 fffff800`0350f85f : fffffa80`0ad08b50 00000000`00000080 fffffa80`066fb040 fffffa80`06dd9bf0 : nt!MmInPageKernelStack+0x40
- fffff880`03363b90 fffff800`0350f5a4 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`066fb000 : nt!KiInSwapKernelStacks+0x1f
- fffff880`03363bc0 fffff800`037782ea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeSwapProcessOrStack+0x84
- fffff880`03363c00 fffff800`034cc8e6 : fffff880`02f72180 fffffa80`0671e660 fffff880`02f7cfc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
- fffff880`03363c40 00000000`00000000 : fffff880`03364000 fffff880`0335e000 fffff880`03363910 00000000`00000000 : nt!KxStartSystemThread+0x16
- STACK_COMMAND: kb
- FOLLOWUP_IP:
- nt!MiInPageSingleKernelStack+a1
- fffff800`0350f64d 488b0410 mov rax,qword ptr [rax+rdx]
- SYMBOL_STACK_INDEX: 3
- SYMBOL_NAME: nt!MiInPageSingleKernelStack+a1
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: nt
- DEBUG_FLR_IMAGE_TIMESTAMP: 521ea035
- IMAGE_NAME: memory_corruption
- FAILURE_BUCKET_ID: X64_0x50_nt!MiInPageSingleKernelStack+a1
- BUCKET_ID: X64_0x50_nt!MiInPageSingleKernelStack+a1
- Followup: MachineOwner
- ---------
Advertisement
Add Comment
Please, Sign In to add comment