Hey we are getting a crash when our whitelisting product and another third party is installed together. THis crash does not come with either of these products alone. WE used driver verifier but even then we are having trouble getting the driver at fault. I understand what the bugcheck is saying but having trouble deciphering the faulty driver.
I ll call my product as product 1 and other product as product2 in the stack.
OS:: Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
!address fffff98003b12000
Usage: System Cache
Base Address: fffff98003b00000 End Address: fffff980
03b40000
Region Size: 00000000`00040000
VA Type: SystemDynamicSpace
VACB: fffffa800670de80 [$Mft]
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
Arguments:
Arg1: fffff98003b12000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
Arg4: fffff800032de756, address which referenced memory
WRITE_ADDRESS: fffff98003b12000
CURRENT_IRQL: 2
nt!KeBugCheckEx
nt!KiBugCheckDispatch+0x69
nt!KiPageFault+0x260
nt!IopCompleteRequest+0xc76
nt!KiDeliverApc+0x1c7
nt!KiCheckForKernelApcDelivery+0x25
nt!MmAccessFault+0x1a3c
nt!KiPageFault+0x16e
nt! ?? ::NNGAKEGL::string'+0x2b2f5 nt!NtMapViewOfSection+0x2bd nt!KiSystemServiceCopyEnd+0x13 ntdll!ZwMapViewOfSection+0xa KERNELBASE!BasepLoadLibraryAsDataFileInternal+0x27d KERNELBASE!LoadLibraryExW+0x1b7 PRODUCT2's dll+0xe86b 0x000007fe
f8230000
0x2cd780
0x2cd810
IRPS qued to this thread are:
fffff98167822ee0: (0006,0118) Flags: 40060000 Mdl: 00000000
fffff98167828ee0: (0006,0118) Flags: 40060000 Mdl: 00000000
fffff9816858cee0: (0006,0118) Flags: 40060000 Mdl: 00000000
fffff981678e6ee0: (0006,0118) Flags: 40060000 Mdl: 00000000
fffff9816781eb80: (0006,0478) Flags: 40060000 Mdl: 00000000
2: kd> !irp fffff98167822ee0
Irp is active with 1 stacks 3 is current (= 00000000)
No Mdl: No System Buffer: Thread fffff800032ddae0: Irp is completed.
cmd flg cl Device File Completion-Context
[e, 0] 0 10 fffffa800eb917b0 00000000 00000000-00000000
\Driver\PRODUCT2
Args: 00000000 00000000 00000000 fffff88009d22bb0
Similarly for fffff98167828ee0,fffff9816858cee0,fffff981678e6ee0.
Last irp is with NTFS:
2: kd> !irp fffff9816781eb80
Irp is active with 13 stacks 13 is current (= 0xfffff9816781efb0)
No Mdl: No System Buffer: Thread fffffa8011197590: Irp stack trace.
cmd flg cl Device File Completion-Context
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[0, 0] 0 10 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[c, 2] 0 1 fffffa8007abe030 fffffa801119cb80 00000000-00000000 pending
\FileSystem\Ntfs
Args: 00000020 00000011 00000000 00000000
Please help me debug this problem.