IRQL_NOT_LESS_OR_EQUAL

hi all,

I am analysing my driver code for errors because it crashes with a blue
screen with IRQL_NOT_LESS_OR_EQUAL. The Parameters are as follows:-

Address that was referenced –> 0x44
IRQL at runtime –> 0x1c
Type Of Access –> 0
Address where reference occured –> 0x8011661d

Also WinDbg says that the error was probably caused by my driver and it
also points out the problematic routine which happens to be a routine
called from the dispatch routine.

But my question is that how can the IRQL be so high in the dispatch
routine? Isnt it supposed to run at PASSIVE_LEVEL? Please throw some light
on this issue.

Regards.


You are currently subscribed to windbg as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com

It is because there is an memory access violation. The kernel uses high
level IRQL when it’s halting the system in KeBugCheck.

Suifun

xxxxx@hotmail.c
om To: “Kernel Debugging Interest List”
Sent by: cc:
xxxxx@lis Subject: [windbg] IRQL_NOT_LESS_OR_EQUAL
ts.osr.com

01/10/2002 08:15 PM
Please respond to
“Kernel Debugging
Interest List”

hi all,

I am analysing my driver code for errors because it crashes with a blue
screen with IRQL_NOT_LESS_OR_EQUAL. The Parameters are as follows:-

Address that was referenced –> 0x44
IRQL at runtime –> 0x1c
Type Of Access –> 0
Address where reference occured –> 0x8011661d

Also WinDbg says that the error was probably caused by my driver and it
also points out the problematic routine which happens to be a routine
called from the dispatch routine.

But my question is that how can the IRQL be so high in the dispatch
routine? Isnt it supposed to run at PASSIVE_LEVEL? Please throw some light
on this issue.

Regards.


You are currently subscribed to windbg as: suifun@us.ibm.com
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com


You are currently subscribed to windbg as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com

Any time you have an address that is in the first 4K page (<0x1000), you
*probably* have NULL pointer in a routine that treats that pointer as a
struct. The fact that you are dereferencing address 0x44 suggests that
your code is trying to read whatever element of the struct is 68 bytes from
the base. I don’t have any explanation for the high IRQL without more
information.

Phil

xxxxx@xxxxx@lists.osr.com on 01/10/2002 09:15:14 PM

Please respond to “Kernel Debugging Interest List”

Sent by: xxxxx@lists.osr.com

To: “Kernel Debugging Interest List”
cc:

Subject: [windbg] IRQL_NOT_LESS_OR_EQUAL

hi all,

I am analysing my driver code for errors because it crashes with a blue
screen with IRQL_NOT_LESS_OR_EQUAL. The Parameters are as follows:-

Address that was referenced –> 0x44
IRQL at runtime –> 0x1c
Type Of Access –> 0
Address where reference occured –> 0x8011661d

Also WinDbg says that the error was probably caused by my driver and it
also points out the problematic routine which happens to be a routine
called from the dispatch routine.

But my question is that how can the IRQL be so high in the dispatch
routine? Isnt it supposed to run at PASSIVE_LEVEL? Please throw some light
on this issue.

Regards.


You are currently subscribed to windbg as: xxxxx@seagate.com
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com


You are currently subscribed to windbg as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-windbg-$subst(‘Recip.MemberIDChar’)@lists.osr.com