bad pool caller


i have encountered the above bugcheck after about 2 days testing my
encryption filter driver using file headers. surprisingly, the bugcheck
happens in my close routine after i have passed the irp to ntfs w/o doing
anything to it as the file concerned is not one of those that my filter
driver will handle. the memory tag of the pool is Ntfc.

does anyone know what can be the probable cause? i suspect ntfs is freeing
memory for one of its fcb/ccb which happens to have been freed…

Ho Mun Chuen
@@ “Not everything that counts can be counted;
<” )~ and not everything that can be counted counts"
//\ … Albert Einstein


You can try using driver verifier. Also you may go through the docs.
provided with Windbg. Hope it helps.