Hi all
I am seeing a system crash occassionally . When it happened this is the data
I got from the Debugger. Does the data in the KdDebugger indicate that there
is a memory leak in the driver ?
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pagable (or completely invalid) address at
an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 8cfb7740, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8040066c, address which referenced memory
Details:
Read address 8cfb7740, Nonpaged pool expansion
Current IRQL 2
Fault occurred in driver ntoskrnl.exe ( ntoskrnl!HAL_NULL_THUNK_DATA+0x80 )
8040066c 8b10 mov edx,[eax]
Followup : MachineOwner
BUCKET: 0xA_2_ntoskrnl!HAL_NULL_THUNK_DATA_ntoskrnl.exe
ChildEBP RetAddr
f4c8c70c 8042c068 ntoskrnl!MmGetVirtualForPhysical+0x2e
f4c8ca94 80464b1f ntoskrnl!IopWritePageToDisk+0x5d
f4c8cab0 00000023 ntoskrnl!MmLocateUnloadedDriver+0x509
Creating .\DMP1A87.tmp - mini kernel dump
KdDebuggerData.MmSpecialPoolTag is NULL
KdDebuggerData.MmTriageActionTaken is NULL
KdDebuggerData.KernelVerifier is NULL
KdDebuggerData.MmAllocatedNonPagedPool is NULL
KdDebuggerData.MmPeakCommitment is NULL
KdDebuggerData.MmTotalCommitLimitMaximum is NULL
Thanks in advance
srinivasa
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com