forum.lissyara.su

Код: Выделить всё

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is
caused by drivers that have corrupted the system pool.  Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000005, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8054385e, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR:  0xC5_2

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MmInSwapProcess+696
8054385e 895a04          mov     dword ptr [edx+4],ebx

CUSTOMER_CRASH_COUNT:  3

DEFAULT_BUCKET_ID:  DRIVER_FAULT

PROCESS_NAME:  System

LAST_CONTROL_TRANSFER:  from 80543e6f to 8054385e

STACK_TEXT:  
ba50bd1c 80543e6f 88856330 896d2558 889bed50 nt!MmInSwapProcess+0x696
ba50bd5c 80507245 896d2558 00000000 80557838 nt!MmInSwapProcess+0xca7
ba50bd8c 80508936 e477a818 00000000 89a39da8 nt!KeCancelTimer+0x103
ba50bdac 805c4a28 00000000 00000000 00000000 nt!KeWaitForMultipleObjects+0x3e2
ba50bddc 80540fa2 80508898 00000000 00000000 nt!ExpSmallPagedPoolLookasideLists+0x928
00000000 00000000 00000000 00000000 00000000 nt!MiDeleteValidAddress+0x712


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MmInSwapProcess+696
8054385e 895a04          mov     dword ptr [edx+4],ebx

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MmInSwapProcess+696

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  41107b0c

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  0xC5_2_nt!MmInSwapProcess+696

BUCKET_ID:  0xC5_2_nt!MmInSwapProcess+696

Followup: MachineOwner
---------