Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


Windows system hang: "Driver Commit" has large value.

KunalKunal Member - All Emails Posts: 21
Hi,

I have a crash dump file generated from a system which was unresponsive and was in a hung state. From !vm output shows that there is large amount of "Driver commit" which is more than the Physical memory. Apart from this I couldn't find anything suspicious.
Can this large value of "Driver commit" be responsible for system hang?
How can I proceed from here to narrow down the module causing the hang?

0: kd> !vm

*** Virtual Memory Usage ***
Physical Memory: 3145613 ( 12582452 Kb)
Page File: \??\S:\pagefile.sys
Current: 12288000 Kb Free Space: 12126600 Kb
Minimum: 12288000 Kb Maximum: 12288000 Kb
Error reading free nonpaged PTEs 0000000000000004
Available Pages: 527062 ( 2108248 Kb)
ResAvail Pages: 2992611 ( 11970444 Kb)
Locked IO Pages: 0 ( 0 Kb)
Free System PTEs: 20075 ( 80300 Kb)
Free NP PTEs: 0 ( 0 Kb)
Modified Pages: 1202 ( 4808 Kb)
Modified PF Pages: 1202 ( 4808 Kb)
NonPagedPool Usage: 297 ( 1188 Kb)
NonPagedPoolNx Usage: 41250 ( 165000 Kb)
NonPagedPool Max: 4294967296 (17179869184 Kb)
PagedPool 0 Usage: 68268 ( 273072 Kb)
PagedPool 1 Usage: 15849 ( 63396 Kb)
PagedPool 2 Usage: 12052 ( 48208 Kb)
PagedPool 3 Usage: 12079 ( 48316 Kb)
PagedPool 4 Usage: 12105 ( 48420 Kb)
PagedPool Usage: 120353 ( 481412 Kb)
PagedPool Maximum: 4160749568 (16642998272 Kb)
Session Commit: 26858 ( 107432 Kb)
Shared Commit: 78751 ( 315004 Kb)
Special Pool: 0 ( 0 Kb)
Shared Process: 17410 ( 69640 Kb)
PagedPool Commit: 120417 ( 481668 Kb)
Driver Commit: 21474843404 (85899373616 Kb)
Committed pages: 3420715 ( 13682860 Kb)
Commit limit: 6217613 ( 24870452 Kb)
-------------------------------------

0: kd> !poolused /t5 4
Sorting by Paged Pool Consumed

Pool Used:
NonPaged Paged
Tag Allocs Used Allocs Used
CM31 0 0 27689 126816256 Internal Configuration manager allocations , Binary: nt!cm
MmSt 0 0 36935 75067440 Mm section object prototype ptes , Binary: nt!mm
Ntff 17 5440 25769 33396624 FCB_DATA , Binary: ntfs.sys
FMfn 4 1216 53448 21122160 NAME_CACHE_NODE structure , Binary: fltmgr.sys
NtfF 0 0 12928 19030016 FCB_INDEX , Binary: ntfs.sys
TOTAL 405924 129302480 494266 376068688

-------------------------------------
0: kd> !poolused /t5 2
Sorting by NonPaged Pool Consumed

Pool Used:
NonPaged Paged
Tag Allocs Used Allocs Used
File 51509 17284048 0 0 File objects
Ntfx 38851 12807984 0 0 General Allocation , Binary: ntfs.sys
FMsl 38608 11119104 0 0 STREAM_LIST_CTRL structure , Binary: fltmgr.sys
MmCa 34349 9607744 0 0 Mm control areas for mapped files , Binary: nt!mm
mfel 14475 8211472 1 144 UNKNOWN pooltag 'mfel', please update pooltag.txt
TOTAL 405924 129302480 494266 376068688

-------------------------------------

Thanks,
Kunal

Comments

  • KunalKunal Member - All Emails Posts: 21
    This huge value was due to older version of windbg. After upgrading windbg to latest version, !vm output seems to be normal.

    -kunal
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Writing WDF Drivers 7 Dec 2020 LIVE ONLINE
Internals & Software Drivers 25 Jan 2021 LIVE ONLINE
Developing Minifilters 8 March 2021 LIVE ONLINE