Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Microsoft (R) Windows Debugger Version 10.0.22549.1000 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [C:\Users\batkiz\AppData\Local\CrashDumps\msedge.exe.29280.dmp]
- User Mini Dump File: Only registers, stack and portions of memory are available
- Symbol search path is: srv*
- Executable search path is:
- Windows 10 Version 22557 MP (16 procs) Free x64
- Product: WinNt, suite: SingleUserTS
- Edition build lab: 22557.1.amd64fre.ni_release.220210-1445
- Machine Name:
- Debug session time: Sat Feb 19 18:27:51.000 2022 (UTC + 8:00)
- System Uptime: 0 days 2:33:15.413
- Process Uptime: 0 days 0:00:11.000
- .........................
- This dump file has an exception of interest stored in it.
- The stored exception information can be accessed via .ecxr.
- (7260.6da0): Security check failure or stack buffer overrun - code c0000409 (first/second chance not available)
- Subcode: 0x39 FAST_FAIL_CONTROL_INVALID_RETURN_ADDRESS Shadow stack violation
- For analysis of this file, run !analyze -v
- 00007df5`6d410192 c3 ret
- 0:000> !analyze -v
- ERROR: FindPlugIns 8007007b
- *******************************************************************************
- * *
- * Exception Analysis *
- * *
- *******************************************************************************
- KEY_VALUES_STRING: 1
- Key : Analysis.CPU.mSec
- Value: 1608
- Key : Analysis.DebugAnalysisManager
- Value: Create
- Key : Analysis.Elapsed.mSec
- Value: 33885
- Key : Analysis.Init.CPU.mSec
- Value: 827
- Key : Analysis.Init.Elapsed.mSec
- Value: 17321
- Key : Analysis.Memory.CommitPeak.Mb
- Value: 86
- Key : FailFast.Name
- Value: CONTROL_INVALID_RETURN_ADDRESS
- Key : FailFast.Type
- Value: 57
- Key : Timeline.OS.Boot.DeltaSec
- Value: 9195
- Key : Timeline.Process.Start.DeltaSec
- Value: 11
- Key : WER.OS.Branch
- Value: ni_release
- Key : WER.OS.Timestamp
- Value: 2022-02-10T14:45:00Z
- Key : WER.OS.Version
- Value: 10.0.22557.1
- Key : WER.Process.Version
- Value: 99.0.1150.16
- FILE_IN_CAB: msedge.exe.29280.dmp
- NTGLOBALFLAG: 0
- PROCESS_BAM_CURRENT_THROTTLED: 0
- PROCESS_BAM_PREVIOUS_THROTTLED: 0
- APPLICATION_VERIFIER_FLAGS: 0
- CONTEXT: (.ecxr)
- rax=335d74fff8830003 rbx=0000000000000000 rcx=0000009aa3c1d000
- rdx=00007ff780e3c890 rsi=0000000000000000 rdi=0000000000000000
- rip=00007df56d410192 rsp=0000009aa45ffd60 rbp=0000000000000000
- r8=0000000000000001 r9=0000000000000001 r10=0000024f4d7502d0
- r11=0000009aa45fe9a0 r12=0000000000000000 r13=0000000000000000
- r14=0000000000000000 r15=0000000000000000
- iopl=0 nv up ei pl nz na pe nc
- cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010202
- 00007df5`6d410192 c3 ret
- Resetting default scope
- EXCEPTION_RECORD: (.exr -1)
- ExceptionAddress: 00007df56d410192
- ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
- ExceptionFlags: 00000001
- NumberParameters: 3
- Parameter[0]: 0000000000000039
- Parameter[1]: 0000009aa4dfeff0
- Parameter[2]: 0000000040024000
- Subcode: 0x39 FAST_FAIL_CONTROL_INVALID_RETURN_ADDRESS Shadow stack violation
- PROCESS_NAME: msedge.exe
- ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
- EXCEPTION_CODE_STR: c0000409
- EXCEPTION_PARAMETER1: 0000000000000039
- EXCEPTION_PARAMETER2: 0000009aa4dfeff0
- EXCEPTION_PARAMETER3: 0000000040024000
- IP_ON_HEAP: 335d74fff8830003
- The fault address in not in any loaded module, please check your build's rebase
- log at <releasedir>\bin\build_logs\timebuild\ntrebase.log for module which may
- contain the address if it were loaded.
- FRAME_ONE_INVALID: 1
- FAULTING_THREAD: 00006da0
- STACK_TEXT:
- 0000009a`a45ffd60 335d74ff`f8830003 : 00007ffb`2b7d1474 00000050`00000020 00000000`00000000 00000000`00000800 : 0x00007df5`6d410192
- 0000009a`a45ffd68 00007ffb`2b7d1474 : 00000050`00000020 00000000`00000000 00000000`00000800 80000000`00000800 : 0x335d74ff`f8830003
- 0000009a`a45ffd70 00007ffb`2cf83258 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
- 0000009a`a45ffda0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x28
- STACK_COMMAND: ~0s ; .cxr ; kb
- SYMBOL_NAME: unknown!noop+0
- MODULE_NAME: unknown!
- IMAGE_NAME: unknown.dll
- FAILURE_BUCKET_ID: FAIL_FAST_CONTROL_INVALID_RETURN_ADDRESS_c0000409_unknown.dll!noop
- OS_VERSION: 10.0.22557.1
- BUILDLAB_STR: ni_release
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- FAILURE_ID_HASH: {26fe757f-2a7e-6bed-070f-d1f1f16ead3c}
- Followup: MachineOwner
- ---------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement