Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini102610-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (3 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.100427-1636
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Tue Oct 26 19:14:01.000 2010 (UTC + 2:00)
System Uptime: 0 days 0:00:32.828
Loading Kernel Symbols
...............................................................
............................................................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, 8054b10d, a53b3884, 0}
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+107 )
Followup: Pool_corruption
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8054b10d, The address that the exception occurred at
Arg3: a53b3884, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in "0x%08lx" verweist auf Speicher in "0x%08lx". Der Vorgang "%s" konnte nicht auf dem Speicher durchgef hrt werden.
FAULTING_IP:
nt!ExDeferredFreePool+107
8054b10d 893b mov dword ptr [ebx],edi
TRAP_FRAME: a53b3884 -- (.trap 0xffffffffa53b3884)
ErrCode = 00000002
eax=8a51d2c8 ebx=00000000 ecx=000001ff edx=8a51d2c8 esi=8a51d028 edi=00000000
eip=8054b10d esp=a53b38f8 ebp=a53b3938 iopl=0 nv up ei ng nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
nt!ExDeferredFreePool+0x107:
8054b10d 893b mov dword ptr [ebx],edi ds:0023:00000000=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: [B]svchost.exe[/B]
LAST_CONTROL_TRANSFER: from 8054b75f to 8054b10d
STACK_TEXT:
a53b3938 8054b75f 00000001 a53b3a5c 8000000b nt!ExDeferredFreePool+0x107
a53b3978 805e5674 e273e008 00000000 00000000 nt!ExFreePoolWithTag+0x47f
a53b399c 805e5a35 00000000 00000000 00000000 nt!RtlpInheritAcl+0x76
a53b3a78 805f0e35 00000000 e2693c08 a53b3ad0 nt!RtlpNewSecurityObject+0x387
a53b3aa4 805bff45 00000000 00000000 a53b3ad0 nt!SeAssignSecurity+0x4f
a53b3ad4 805c3387 a53b3af8 00000000 e2701588 nt!ObAssignSecurity+0x35
a53b3bbc 805ec8fd e2701588 a53b3af8 00000000 nt!ObInsertObject+0x401
a53b3bfc 805f69e3 e1dd6970 00000000 e2701588 nt!SeCopyClientToken+0x4d
a53b3c20 805f6a73 e1dd6970 a53b3c94 00000000 nt!SepCreateClientSecurity+0x83
a53b3c58 805a412f 8a14ed80 a53b3c94 00000000 nt!SeCreateClientSecurity+0x39
a53b3d10 805a45ba 000cf0ec 00c5fd20 00c5fd28 nt!NtSecureConnectPort+0x405
a53b3d3c 8054164c 000cf0ec 00c5fd20 00c5fd28 nt!NtConnectPort+0x24
a53b3d3c 7c91e514 000cf0ec 00c5fd20 00c5fd28 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00c5fe0c 00000000 00000000 00000000 00000000 0x7c91e514
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExDeferredFreePool+107
8054b10d 893b mov dword ptr [ebx],edi
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExDeferredFreePool+107
FOLLOWUP_NAME: Pool_corruption
IMAGE_NAME: Pool_Corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: Pool_Corruption
FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+107
BUCKET_ID: 0x8E_nt!ExDeferredFreePool+107
Followup: Pool_corruption
---------
