Analyzing PAGE_FAULT_IN_NONPAGED_AREA (50)

WINDBG
1

Hi

I get the BugCheck 50, {e48a2ffe, 0, bff0f610, 1} when my file system
filter driver (win 2k) is active. I have a complete crash dump and some
difficulties trying to understand whats happening. Can someone point some
directions I should take trying to analyze this?
The shows !analyze -v:

f1131758 bff0c5a2 812bdb88 8134b008 f11317cc Ntfs!NtfsCommonCreate+0x1634
f113180c 8041fb8b 8150c020 8134b008 f1131878 Ntfs!NtfsFsdCreate+0x1fe
f1131820 f17721a3 00000000 815c5c10 81040200 nt!IopfCallDriver+0x35
WARNING: Stack unwind information not available. Following frames may be
wrong.
f1131844 f177551e 8150c020 f1131898 f1131884 SYMEVENT+0x11a3
f1131879 988134b0 108134b1 48815c5c f8815574
SYMEVENT!SYMEvent_Operation+0x380
08f11300 00000000 00000000 00000000 00000000 0x988134b0

Thaks,
Ronen

2

Finish retrieving the stack. I wrote an article for The NT Insider on
EXACTLY this issue earlier this year.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@hotmail.com [mailto:xxxxx@hotmail.com]
Sent: Monday, August 18, 2003 10:13 AM
To: Kernel Debugging Interest List
Subject: [windbg] Analyzing PAGE_FAULT_IN_NONPAGED_AREA (50)

Hi

I get the BugCheck 50, {e48a2ffe, 0, bff0f610, 1} when my file system
filter driver (win 2k) is active. I have a complete crash dump and some
difficulties trying to understand whats happening. Can someone point some
directions I should take trying to analyze this?
The shows !analyze -v:

f1131758 bff0c5a2 812bdb88 8134b008 f11317cc Ntfs!NtfsCommonCreate+0x1634
f113180c 8041fb8b 8150c020 8134b008 f1131878 Ntfs!NtfsFsdCreate+0x1fe
f1131820 f17721a3 00000000 815c5c10 81040200 nt!IopfCallDriver+0x35
WARNING: Stack unwind information not available. Following frames may be
wrong.
f1131844 f177551e 8150c020 f1131898 f1131884 SYMEVENT+0x11a3
f1131879 988134b0 108134b1 48815c5c f8815574
SYMEVENT!SYMEvent_Operation+0x380
08f11300 00000000 00000000 00000000 00000000 0x988134b0

Thaks,
Ronen

You are currently subscribed to windbg as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

3

Do you have the article name?

Ronen