A lot of "GetContextState failed, 0x80070005" in a BSOD dump, does this mean its corrupted?

WINDBG
1

So I have this dump that I have a feeling its corrupted or something, I just wanted to check with the experts here to make sure.

Some sample output when I load it with windbg:

GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
0: kd> k
GetContextState failed, 0x80070005
Unable to get current machine context, Win32 error 0n5
Unable to get initial context information
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
0: kd> lm
start             end                 module name
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005

Output of analyze -v :

!analyze -v
GetContextState failed, 0x80070005
Unable to get current machine context, Win32 error 0n5
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
Unable to get program counter
GetContextState failed, 0x80070005
Unable to get current machine context, Win32 error 0n5
GetContextState failed, 0x80070005
Unable to get current machine context, Win32 error 0n5
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffaa81130deea0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffaa81130dedf8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

GetContextState failed, 0x80070005
Unable to get current machine context, Win32 error 0n5
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
GetContextState failed, 0x80070005
Unable to get current machine context, Win32 error

Is this happening because the dump file is corrupted, or…?

2

Is this a minidump or a full kernel dump?

3

@Tim_Roberts said:
Is this a minidump or a full kernel dump?

It’s a full kernel dump

4

Probably corrupted in some way. How was the crash dump generated?

Not much you can do but you can try:

  1. What OS is the dump from and what debugger version are you using?
  2. .dumpdebug to dump the header and see if it looks “ok”
  3. Ctrl+Alt+D to enable diagnostics from the debugger engine
1 Like