hi all,
I am analysing my driver code for errors because it crashes with a blue
screen with IRQL_NOT_LESS_OR_EQUAL. The Parameters are as follows:-
Address that was referenced –> 0x44
IRQL at runtime –> 0x1c
Type Of Access –> 0
Address where reference occured –> 0x8011661d
Also WinDbg says that the error was probably caused by my driver and it
also points out the problematic routine which happens to be a routine
called from the dispatch routine.
But my question is that how can the IRQL be so high in the dispatch
routine? Isnt it supposed to run at PASSIVE_LEVEL? Please throw some light
on this issue.
Regards.
You are currently subscribed to windbg as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com
It is because there is an memory access violation. The kernel uses high
level IRQL when it’s halting the system in KeBugCheck.
Suifun
xxxxx@hotmail.c
om To: “Kernel Debugging Interest List”
Sent by: cc:
xxxxx@lis Subject: [windbg] IRQL_NOT_LESS_OR_EQUAL
ts.osr.com
01/10/2002 08:15 PM
Please respond to
“Kernel Debugging
Interest List”
hi all,
I am analysing my driver code for errors because it crashes with a blue
screen with IRQL_NOT_LESS_OR_EQUAL. The Parameters are as follows:-
Address that was referenced –> 0x44
IRQL at runtime –> 0x1c
Type Of Access –> 0
Address where reference occured –> 0x8011661d
Also WinDbg says that the error was probably caused by my driver and it
also points out the problematic routine which happens to be a routine
called from the dispatch routine.
But my question is that how can the IRQL be so high in the dispatch
routine? Isnt it supposed to run at PASSIVE_LEVEL? Please throw some light
on this issue.
Regards.
—
You are currently subscribed to windbg as: suifun@us.ibm.com
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com
—
You are currently subscribed to windbg as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Any time you have an address that is in the first 4K page (<0x1000), you
*probably* have NULL pointer in a routine that treats that pointer as a
struct. The fact that you are dereferencing address 0x44 suggests that
your code is trying to read whatever element of the struct is 68 bytes from
the base. I don’t have any explanation for the high IRQL without more
information.
Phil
xxxxx@xxxxx@lists.osr.com on 01/10/2002 09:15:14 PM
Please respond to “Kernel Debugging Interest List”
Sent by: xxxxx@lists.osr.com
To: “Kernel Debugging Interest List”
cc:
Subject: [windbg] IRQL_NOT_LESS_OR_EQUAL
hi all,
I am analysing my driver code for errors because it crashes with a blue
screen with IRQL_NOT_LESS_OR_EQUAL. The Parameters are as follows:-
Address that was referenced –> 0x44
IRQL at runtime –> 0x1c
Type Of Access –> 0
Address where reference occured –> 0x8011661d
Also WinDbg says that the error was probably caused by my driver and it
also points out the problematic routine which happens to be a routine
called from the dispatch routine.
But my question is that how can the IRQL be so high in the dispatch
routine? Isnt it supposed to run at PASSIVE_LEVEL? Please throw some light
on this issue.
Regards.
—
You are currently subscribed to windbg as: xxxxx@seagate.com
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com
—
You are currently subscribed to windbg as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com