HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS

NTFSD
1

HELP!

does any one knows or encounter this bug check and tell what can cause
this bug check 0x35.
I have the kernel crush dump if you need more details to help me,
please guys I am stuck almost a week ,
Thanks in advance,
Daniel.

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

From the DDK Docs:

Comments (Bug Check 0x35: NO_MORE_IRP_STACK_LOCATIONS):
A higher-level driver has attempted to call a lower-level driver through
the IoCallDriver interface, but there are no more stack locations in the
packet. This will prevent the lower-level driver from accessing its
parameters.

This is a disastrous situation, since the higher level driver is
proceeding as if it has filled in the parameters for the lower level
driver (as required). But since there is no stack location for the
latter driver, the former has actually written off the end of the
packet. This means that some other memory has been corrupted as well.

Regards,
Ravi.

-----Original Message-----
From: Danny [mailto:xxxxx@neptune.co.il]
Sent: Wednesday, June 20, 2001 4:34 PM
To: File Systems Developers
Subject: [ntfsd] HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS

HELP!

does any one knows or encounter this bug check and tell what
can cause this bug check 0x35. I have the kernel crush dump
if you need more details to help me, please guys I am stuck
almost a week , Thanks in advance, Daniel.

You are currently subscribed to ntfsd as: xxxxx@microsoft.com
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

3

Thanks a lot,
I allready checked the ddk docs, i couldn’t get much of that.if someone
but there are no more stack locations in the packet.
What can couse this,I dont create any irp .
ever met this bugcheck HELP.

Ravi Gollapudi wrote:

>From the DDK Docs:

Comments (Bug Check 0x35: NO_MORE_IRP_STACK_LOCATIONS):
A higher-level driver has attempted to call a lower-level driver through
the IoCallDriver interface, but there are no more stack locations in the
packet. This will prevent the lower-level driver from accessing its
parameters.

This is a disastrous situation, since the higher level driver is
proceeding as if it has filled in the parameters for the lower level
driver (as required). But since there is no stack location for the
latter driver, the former has actually written off the end of the
packet. This means that some other memory has been corrupted as well.

Regards,
Ravi.

> -----Original Message-----
> From: Danny [mailto:xxxxx@neptune.co.il]
> Sent: Wednesday, June 20, 2001 4:34 PM
> To: File Systems Developers
> Subject: [ntfsd] HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS
>
>
> HELP!
>
> does any one knows or encounter this bug check and tell what
> can cause this bug check 0x35. I have the kernel crush dump
> if you need more details to help me, please guys I am stuck
> almost a week , Thanks in advance, Daniel.
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@microsoft.com
> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>

You are currently subscribed to ntfsd as: xxxxx@neptune.co.il
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

4

Daniel,

Are you copying the IRP stack location? If so, you may be inadvertently
copying a completion routine. See IoCopyCurrentIrpStackLocationToNext (a
macro) in the Windows 2000 DDK - you can use this technique (copying PART of
the I/O stack location) in Windows NT 4.0 and earlier. Alternatively, you
can call IoSetCompletionRoutine() to clear the completion routine field
after you have copied the IRP stack location. I prefer the first technique,
but the second will work as well.

This normally is triggered when your filter is in the path called by SRV
(the CIFS/SMB/LanManager Server component.)

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: Danny [mailto:xxxxx@neptune.co.il]
Sent: Wednesday, June 20, 2001 7:34 PM
To: File Systems Developers
Subject: [ntfsd] HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS

HELP!

does any one knows or encounter this bug check and tell what can cause
this bug check 0x35.
I have the kernel crush dump if you need more details to help me,
please guys I am stuck almost a week ,
Thanks in advance,
Daniel.

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

5

Your filter driver should install directly after the driver you are
filtering. What version and SP of Windows NT/2000 are you using and
what driver are you filtering?

This information might yield a more precise answer.

-----Original Message-----
From: Danny [mailto:xxxxx@neptune.co.il]
Sent: Wednesday, June 20, 2001 5:46 PM
To: File Systems Developers
Subject: [ntfsd] RE: HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS

Thanks a lot,
I allready checked the ddk docs, i couldn’t get much of that.if someone
but there are no more stack locations in the packet. What can couse
this,I dont create any irp . ever met this bugcheck HELP.

Ravi Gollapudi wrote:

>From the DDK Docs:

Comments (Bug Check 0x35: NO_MORE_IRP_STACK_LOCATIONS):
A higher-level driver has attempted to call a lower-level driver
through the IoCallDriver interface, but there are no more stack
locations in the packet. This will prevent the lower-level driver from

accessing its parameters.

This is a disastrous situation, since the higher level driver is
proceeding as if it has filled in the parameters for the lower level
driver (as required). But since there is no stack location for the
latter driver, the former has actually written off the end of the
packet. This means that some other memory has been corrupted as well.

Regards,
Ravi.

> -----Original Message-----
> From: Danny [mailto:xxxxx@neptune.co.il]
> Sent: Wednesday, June 20, 2001 4:34 PM
> To: File Systems Developers
> Subject: [ntfsd] HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS
>
>
> HELP!
>
> does any one knows or encounter this bug check and tell what can
> cause this bug check 0x35. I have the kernel crush dump if you need
> more details to help me, please guys I am stuck almost a week ,
> Thanks in advance, Daniel.
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@microsoft.com To
> unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>

You are currently subscribed to ntfsd as: xxxxx@neptune.co.il To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@MICROSOFT.com To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

6

Win2k, sp1,file system.
Thanks

Eric W Hanson wrote:

Your filter driver should install directly after the driver you are
filtering.  What version and SP of Windows NT/2000 are you using and
what driver are you filtering?

This information might yield a more precise answer.

-----Original Message-----
From: Danny [mailto:xxxxx@neptune.co.il]
Sent: Wednesday, June 20, 2001 5:46 PM
To: File Systems Developers
Subject: [ntfsd] RE: HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS

Thanks a lot,
I allready checked the ddk docs, i couldn’t get much of that.if someone
but there are no more stack locations in the packet. What can couse
this,I dont create any irp . ever met this bugcheck HELP.

Ravi Gollapudi wrote:

> >From the DDK Docs:
>
> Comments (Bug Check 0x35: NO_MORE_IRP_STACK_LOCATIONS):
> A higher-level driver has attempted to call a lower-level driver
> through the IoCallDriver interface, but there are no more stack
> locations in the packet. This will prevent the lower-level driver from

> accessing its parameters.
>
> This is a disastrous situation, since the higher level driver is
> proceeding as if it has filled in the parameters for the lower level
> driver (as required). But since there is no stack location for the
> latter driver, the former has actually written off the end of the
> packet. This means that some other memory has been corrupted as well.
>
> Regards,
> Ravi.
>
> > -----Original Message-----
> > From: Danny [mailto:xxxxx@neptune.co.il]
> > Sent: Wednesday, June 20, 2001 4:34 PM
> > To: File Systems Developers
> > Subject: [ntfsd] HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS
> >
> >
> > HELP!
> >
> > does any one knows or encounter this bug check and tell what can
> > cause this bug check 0x35. I have the kernel crush dump if you need
> > more details to help me, please guys I am stuck almost a week ,
> > Thanks in advance, Daniel.
> >
> >
> > —
> > You are currently subscribed to ntfsd as: xxxxx@microsoft.com To
> > unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> >
>
> —
> You are currently subscribed to ntfsd as: xxxxx@neptune.co.il To
> unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@MICROSOFT.com To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@neptune.co.il
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

7

Read the following article from the NT Insider:

http://www.osr.com/ntinsider/1997/iocomp/iocomp.htm

  • Eric
    -----Original Message-----
    From: Danny [mailto:xxxxx@neptune.co.il]
    Sent: Wednesday, June 20, 2001 7:32 PM
    To: File Systems Developers
    Subject: [ntfsd] RE: HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS

Win2k, sp1,file system.
Thanks

Eric W Hanson wrote:

Your filter driver should install directly after the driver you are
filtering.? What version and SP of Windows NT/2000 are you using and
what driver are you filtering?

This information might yield a more precise answer.

-----Original Message-----
From: Danny [mailto:xxxxx@neptune.co.il]
Sent: Wednesday, June 20, 2001 5:46 PM
To: File Systems Developers
Subject: [ntfsd] RE: HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS

Thanks a lot,
I allready checked the ddk docs, i couldn’t get much of that.if
someone but there are no more stack locations in the packet. What can
couse this,I dont create any irp . ever met this bugcheck HELP.

Ravi Gollapudi wrote:

> >From the DDK Docs:
>
> Comments (Bug Check 0x35: NO_MORE_IRP_STACK_LOCATIONS):
> A higher-level driver has attempted to call a lower-level driver
> through the IoCallDriver interface, but there are no more stack
> locations in the packet. This will prevent the lower-level driver
> from

> accessing its parameters.
>
> This is a disastrous situation, since the higher level driver is
> proceeding as if it has filled in the parameters for the lower level

> driver (as required). But since there is no stack location for the
> latter driver, the former has actually written off the end of the
> packet. This means that some other memory has been corrupted as
> well.
>
> Regards,
> Ravi.
>
> > -----Original Message-----
> > From: Danny [mailto:xxxxx@neptune.co.il]
> > Sent: Wednesday, June 20, 2001 4:34 PM
> > To: File Systems Developers
> > Subject: [ntfsd] HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS
> >
> >
> > HELP!
> >
> > does any one knows or encounter this bug check and tell what can
> > cause this bug check 0x35. I have the kernel crush dump if you
> > need more details to help me, please guys I am stuck almost a week

> > , Thanks in advance, Daniel.
> >
> >
> > —
> > You are currently subscribed to ntfsd as: xxxxx@microsoft.com To
> > unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> >
>
> —
> You are currently subscribed to ntfsd as: xxxxx@neptune.co.il To
> unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@MICROSOFT.com To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@neptune.co.il To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@MICROSOFT.com To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

8

Thanks a lot Tony ,
Maybe this is the case ,let me check it and see what happens.
I think I should use IoSkipCurrentIrpStackLocation macro.can this resolve the
problem.
Thanks again,
Daniel.

Tony Mason wrote:

Daniel,

Are you copying the IRP stack location?  If so, you may be inadvertently
copying a completion routine.  See IoCopyCurrentIrpStackLocationToNext (a
macro) in the Windows 2000 DDK - you can use this technique (copying PART of
the I/O stack location) in Windows NT 4.0 and earlier.  Alternatively, you
can call IoSetCompletionRoutine() to clear the completion routine field
after you have copied the IRP stack location.  I prefer the first technique,
but the second will work as well.

This normally is triggered when your filter is in the path called by SRV
(the CIFS/SMB/LanManager Server component.)

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: Danny [mailto:xxxxx@neptune.co.il]
Sent: Wednesday, June 20, 2001 7:34 PM
To: File Systems Developers
Subject: [ntfsd] HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS

HELP!

does any one knows or encounter this bug check and tell what can cause
this bug check 0x35.
I have the kernel crush dump if you need more details to help me,
please guys I am stuck almost a week ,
Thanks in advance,
Daniel.

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@neptune.co.il
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

9

Thanks,
it is a good one,
Thank again,
Daniel.

Eric W Hanson wrote:

Read the following article from the NT Insider:

http://www.osr.com/ntinsider/1997/iocomp/iocomp.htm

  • Eric
    -----Original Message-----
    From: Danny [mailto:xxxxx@neptune.co.il]
    Sent: Wednesday, June 20, 2001 7:32 PM
    To: File Systems Developers
    Subject: [ntfsd] RE: HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS

Win2k, sp1,file system.
Thanks

Eric W Hanson wrote:

> Your filter driver should install directly after the driver you are
> filtering.  What version and SP of Windows NT/2000 are you using and
> what driver are you filtering?
>
> This information might yield a more precise answer.
>
> -----Original Message-----
> From: Danny [mailto:xxxxx@neptune.co.il]
> Sent: Wednesday, June 20, 2001 5:46 PM
> To: File Systems Developers
> Subject: [ntfsd] RE: HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS
>
> Thanks a lot,
> I allready checked the ddk docs, i couldn’t get much of that.if
> someone but there are no more stack locations in the packet. What can
> couse this,I dont create any irp . ever met this bugcheck HELP.
>
> Ravi Gollapudi wrote:
>
> > >From the DDK Docs:
> >
> > Comments (Bug Check 0x35: NO_MORE_IRP_STACK_LOCATIONS):
> > A higher-level driver has attempted to call a lower-level driver
> > through the IoCallDriver interface, but there are no more stack
> > locations in the packet. This will prevent the lower-level driver
> > from
>
> > accessing its parameters.
> >
> > This is a disastrous situation, since the higher level driver is
> > proceeding as if it has filled in the parameters for the lower level

> > driver (as required). But since there is no stack location for the
> > latter driver, the former has actually written off the end of the
> > packet. This means that some other memory has been corrupted as
> > well.
> >
> > Regards,
> > Ravi.
> >
> > > -----Original Message-----
> > > From: Danny [mailto:xxxxx@neptune.co.il]
> > > Sent: Wednesday, June 20, 2001 4:34 PM
> > > To: File Systems Developers
> > > Subject: [ntfsd] HELP bugcheck 0x035-NO_MORE IRP STACK LOCATIONS
> > >
> > >
> > > HELP!
> > >
> > > does any one knows or encounter this bug check and tell what can
> > > cause this bug check 0x35. I have the kernel crush dump if you
> > > need more details to help me, please guys I am stuck almost a week

> > > , Thanks in advance, Daniel.
> > >
> > >
> > > —
> > > You are currently subscribed to ntfsd as: xxxxx@microsoft.com To
> > > unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > >
> >
> > —
> > You are currently subscribed to ntfsd as: xxxxx@neptune.co.il To
> > unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
> —
> You are currently subscribed to ntfsd as: xxxxx@MICROSOFT.com To
> unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
> —
> You are currently subscribed to ntfsd as: xxxxx@neptune.co.il To
> unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@MICROSOFT.com To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@neptune.co.il
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com