ACCESS_VOLATION raises while allocating pool on Windows7 64bit SP1

NTDEV
1

Hi guys. I build a win7 x64 version of driver using DDK 7600.16385.1. A large variety of exceptions raise while using it, such as ACCESS_VOLATION or dead lock. All exceptions come from the memory allocation function: ExAllocatePoolWithTag and ExFreePoolWithTag. However, these kinds of exceptions do not exist in win7 x86 build of driver.
Any clue what happens?

2

Can you provide an !analyze -v dump?

Gary Little
H (952) 223-1349
C (952) 454-4629
xxxxx@comcast.net

On Jan 13, 2012, at 1:11 PM, 007xgen@163.com wrote:

Hi guys. I build a win7 x64 version of driver using DDK 7600.16385.1. A large variety of exceptions raise while using it, such as ACCESS_VOLATION or dead lock. All exceptions come from the memory allocation function: ExAllocatePoolWithTag and ExFreePoolWithTag. However, these kinds of exceptions do not exist in win7 x86 build of driver.
Any clue what happens?

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

3

Run with DriverVerifier enabled, special pool.

4

007xgen@163.com wrote:

Hi guys. I build a win7 x64 version of driver using DDK 7600.16385.1. A large variety of exceptions raise while using it, such as ACCESS_VOLATION or dead lock. All exceptions come from the memory allocation function: ExAllocatePoolWithTag and ExFreePoolWithTag. However, these kinds of exceptions do not exist in win7 x86 build of driver. Any clue what happens?

Given such sketchy information, my guess is that you are, somewhere,
storing pointers in a DWORD, or passing addresses to user mode and back
in a 32-bit value.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

5

> Any clue what happens?

Random memory corruption due to some sizing errror related to different pointer and ULONG_PTR sizes on x64.

Review the code, or use Verifier Special Pool which will provide you with much more exact crashes.

–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com