I am running into this problem, where my driver
crashes during bootup. It throws out a 0x7E, with
ACCESS_VIOLATION.
I look at KB and it shows me that it is crashing at
the first line of one of my functions.
The code is written in C++ and the call is a Native
C++ call. Hence the ECX is supposed to have the
pointer to “this” object. But I see that the ECX value
is “0”.
the first line in my func is like
member_of_this.a = 0;
and when I look at the disassembly of this it is
like
mov eax DWORD PTR[ecx+0x1890] and ECX is ZERO.
However if I look at the cod files and lookup the
disaaembly of my func the first line is
mov eax DWORD PTR[ecx+6288]
Is someone stomping on the stack? Any clues what is
happening?
Appreciate any help.
Thanks.
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
> mov eax DWORD PTR[ecx+0x1890] and ECX is ZERO.
> However if I look at the cod files and lookup the
> disaaembly of my func the first line is
> mov eax DWORD PTR[ecx+6288]
0x1890 == 6288 decimal.
Nobody is stomping on your stack. It’s just a bug in your driver.
Cheers,
Felix.
May be you are calling your objects method simply via a null pointer.
mov eax DWORD PTR[ecx+0x1890] and ECX is ZERO.
It seems to be an huge object?!
Volker.
-----Original Message-----
From: Venkat Yellepeddy [mailto:xxxxx@yahoo.com]
Sent: Monday, June 16, 2003 6:39 PM
To: Kernel Debugging Interest List
Subject: [windbg] ACCESS_VIOLATION
I am running into this problem, where my driver
crashes during bootup. It throws out a 0x7E, with
ACCESS_VIOLATION.
I look at KB and it shows me that it is crashing at
the first line of one of my functions.
The code is written in C++ and the call is a Native
C++ call. Hence the ECX is supposed to have the
pointer to “this” object. But I see that the ECX value
is “0”.
the first line in my func is like
member_of_this.a = 0;
and when I look at the disassembly of this it is
like
mov eax DWORD PTR[ecx+0x1890] and ECX is ZERO.
However if I look at the cod files and lookup the
disaaembly of my func the first line is
mov eax DWORD PTR[ecx+6288]
Is someone stomping on the stack? Any clues what is
happening?
Appreciate any help.
Thanks.
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
You are currently subscribed to windbg as:
xxxxx@baslerweb.com
To unsubscribe send a blank email to xxxxx@lists.osr.com