Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


Before Posting...

Please check out the Community Guidelines in the Announcements and Administration Category.

Need help: BugCheck Code 0x00000030

Hello,

In trying to debug my Win2K Bus Driver, I got the following when WinDbg hung (and I restarted it once but could not establish connection) and I restarted it the second time.

I have given below the stack trace from WinDbg. I still have the screen below, as I think if I say in WinDbg, it will cause it to blue-screen. The code is the same 0x00000030 (SET_OF_INVALID_CONTEXT).

Since I'm new to WinDbg, could somebody please help me figure out what is going on ?

A few questions:

1. What is the meaning of No FPO ?
2. What is TrapFrame-EDITED @ 8047052c ?

3. The stack for CPU 3 shows some routine KiUnlockDispatcherDatabase() as causing the BugCheck. Any ideas what this does ?

Appreciate any help you can offer me!

Thanks
Puja


== WinDbg Output begins ==

Thread Create: Process=0, Thread=0
Kernel debugger waiting to connect on com2 @ 19200 baud
>
>
>
DMKD: Sending breakin packet...
Thread Create: Process=0, Thread=1
Thread Create: Process=0, Thread=2
Thread Create: Process=0, Thread=3
Kernel Debugger connection established on com2 @ 19200 baud
Kernel Version 2195 Free loaded @ ffffffff80400000
>
>
>
>
Module Load: E:\WINNT\symbols\Free\EXE\ntkrnlmp.pdb (symbols loaded)
E:\WINNT\symbols\Free\EXE\NTKRNLMP.dbg for NTKRNLMP.EXE (symbols loaded)
Hard coded breakpoint hit
>
>
>

*** Fatal System Error: 0x00000030
(0x00000000,0x00000000,0x00000000,0x00000000)

Hard coded breakpoint hit
>
>
> ~
0 1 Running 1 0xFFFFFFFF80068F15
1 2 Running 1 [email protected]
2 3 Running 1 0xFFFFFFFF80A99800
* 3 4 Stopped 1 @[email protected]
>
> kvbns
# FramePtr RetAddr Param1 Param2 Param3 Function Name
00 fffffffff24335ec ffffffff8045302a 0000000000000001 fffffffff2433860 0000000000000000 NT!RtlpBreakWithStatusInstruction (FPO: [1,0,0])
01 fffffffff2433834 ffffffff8042a5b3 ffffffff8042a1e2 0000000000000030 0000000000000000 NT!DbgPrint+0xba (EBP)
02 fffffffff2433bd0 ffffffff80429ea7 0000000000000000 0000000000000000 0000000000000000 NT!KeBugCheckEx+0x32b (EBP)
03 fffffffff2433be8 ffffffff8042de10 0000000000000030 0000000000000202 ffffffff80a9313c NT!KeBugCheck+0xf (FPO: [1,0,0])
04 fffffffff2433bfc ffffffff8042e1dc fffffffff2433ccc fffffffff249fc68 ffffffff80481580 NT!KiEspToTrapFrame+0x2a (FPO: [2,0,3])
05 fffffffff2433c18 ffffffff8043095e fffffffff2433c00 0000000000000000 ffffffff80a9313c NT!KeContextToKframes+0xe0 (EBP)
06 fffffffff2433ca4 ffffffff8042f208 fffffffff2433ccc 0000000000000000 ffffffffffffffff NT!KiRestoreProcessorState+0x26 (No FPO)
07 fffffffff2433cd8 ffffffff8046697c ffffffffffffffff ffffffff8042aba1 ffffffff8046c380 NT!KiIpiServiceRoutine+0x94 (FPO: [2,1,0])
08 fffffffff2433cd8 ffffffff8046697c ffffffffffffffff ffffffff8042aba1 ffffffff8046c380 [email protected]@4+0x1c (No FPO)
09 0000000000000204 0000000000000000 0000000000000000 0000000000000000 0000000000000000 [email protected]@4+0x1c (No FPO)
>
>
>
> ~0
> kvbns
# FramePtr RetAddr Param1 Param2 Param3 Function Name
00 ffffffff8047051c ffffffff8046631e ffffffffffffff02 00000000000000d1 ffffffff8047053c NT!RtlpBreakWithStatusInstruction+0x1 (FPO: [1,0,0])
01 ffffffff8047051c ffffffff80068f15 ffffffffffffff02 00000000000000d1 ffffffff8047053c NT!KeUpdateSystemTime+0x126 (FPO: [0,2] TrapFrame-EDITED @ 8047052c)
02 0000000000000008 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0xFFFFFFFF80068F15 (No FPO)
>
>
>
>
>
>
> ~1
>
> kvbns
# FramePtr RetAddr Param1 Param2 Param3 Function Name
00 fffffffff1dbfda0 ffffffff8043e866 fffffffff1dbfddc ffffffff80452614 ffffffffff20fe08 NT!RtlCompareMemory+0x14 (FPO: [3,0,0])
01 fffffffff1dbfddc ffffffff80467122 fffffffff6bfe2b8 ffffffffff20fe08 0000000000000000 NT!MmAllowWorkingSetExpansion+0x56 (FPO: [0,0,3])
02 fffffffff1dbfda8 ffffffff80452614 ffffffffff20fe08 0000000000000000 0000000000000000 NT!KiThreadStartup+0x16 (No FPO)
03 fffffffff1dbfddc ffffffff80467122 fffffffff6bfe2b8 ffffffffff20fe08 0000000000000000 NT!PspSystemThreadStartup+0x54 (EBP)
04 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 NT!KiThreadStartup+0x16 (No FPO)
>
>
>
> ~2
>
> kvbns
# FramePtr RetAddr Param1 Param2 Param3 Function Name
00 ffffffff80a99800 ffffffff80a99800 0000000000000000 0000000000000000 0000000000002c8c 0xFFFFFFFF80069BD5 (No FPO)
01 ffffffff80a99800 ffffffff80a99800 0000000000000000 0000000000000000 0000000000002c8c 0xFFFFFFFF80A99800 (No FPO)
>
>
> ~3
> kvbns
# FramePtr RetAddr Param1 Param2 Param3 Function Name
00 fffffffff24335ec ffffffff8045302a 0000000000000001 fffffffff2433860 0000000000000000 NT!RtlpBreakWithStatusInstruction (FPO: [1,0,0])
01 fffffffff2433834 ffffffff8042a5b3 ffffffff8042a1e2 0000000000000030 0000000000000000 NT!DbgPrint+0xba (EBP)
02 fffffffff2433bd0 ffffffff80429ea7 0000000000000000 0000000000000000 0000000000000000 NT!KeBugCheckEx+0x32b (EBP)
03 fffffffff2433be8 ffffffff8042de10 0000000000000030 0000000000000202 ffffffff80a9313c NT!KeBugCheck+0xf (FPO: [1,0,0])
04 fffffffff2433bfc ffffffff8042e1dc fffffffff2433ccc fffffffff249fc68 ffffffff80481580 NT!KiEspToTrapFrame+0x2a (FPO: [2,0,3])
05 fffffffff2433c18 ffffffff8043095e fffffffff2433c00 0000000000000000 ffffffff80a9313c NT!KeContextToKframes+0xe0 (EBP)
06 fffffffff2433ca4 ffffffff8042f208 fffffffff2433ccc 0000000000000000 ffffffffffffffff NT!KiRestoreProcessorState+0x26 (No FPO)
07 fffffffff2433cd8 ffffffff8046697c ffffffffffffffff ffffffff8042aba1 ffffffff8046c380 NT!KiIpiServiceRoutine+0x94 (FPO: [2,1,0])
08 fffffffff2433cd8 ffffffff8046697c ffffffffffffffff ffffffff8042aba1 ffffffff8046c380 [email protected]@4+0x1c (No FPO)
09 0000000000000204 0000000000000000 0000000000000000 0000000000000000 0000000000000000 [email protected]@4+0x1c (No FPO)

== WinDbg Output ends ==
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. Sign in or register to get started.

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Internals & Software Drivers 15 November 2021 Live, Online
Writing WDF Drivers TBD Live, Online
Developing Minifilters 7 February 2022 Live, Online
Kernel Debugging 21 March 2022 Live, Online