KiRetireDpcList calling NULL function

NTDEV
1

Hi,
I’ve got the following stituation in my driver on XP:

ChildEBP RetAddr Args to Child
fc8d6b20 805226a5 00000003 00000000 000000d1 ntoskrnl!RtlpBreakWithStatusInstruction
fc8d6b6c 80522dea 00000003 00000000 00000000 ntoskrnl!KiBugCheckDebugBreak+0x19
fc8d6f34 804fc1bb 000000d1 00000000 00000002 ntoskrnl!KeBugCheck2+0x43c
fc8d6f54 804d7c50 0000000a 00000000 00000002 ntoskrnl!KeBugCheckEx+0x19
fc8d6f54 00000000 0000000a 00000000 00000002 ntoskrnl!KiTrap0E+0x2ad
WARNING: Stack unwind information not available. Following frames may be wrong.
fc8d6fe0 804f02eb fc27a314 fc27a324 00000000 0x0
fc8d6ff4 804effd3 fc90e438 004e02c8 002da098 ntoskrnl!KiRetireDpcList+0x30

It looks like there’s a NULL DPC set up or something.

Can anyone tell me what it’s a symptom of? As far as I can see my DPC’s are initialised ok.

Thanks,
Lee

2

This can be caused by any number of things. The most likely culprit is a bogus device object pointer from a bogus device extension passed to the DPC insert queue function … and all of this started because the IRP you are using looks good but was completed long ago and the memory re-allocated to someone else.

–
Gary G. Little
xxxxx@broadstor.com
xxxxx@inland.net

“Lee Rhodes” wrote in message news:xxxxx@ntdev…
Hi,
I’ve got the following stituation in my driver on XP:

ChildEBP RetAddr Args to Child
fc8d6b20 805226a5 00000003 00000000 000000d1 ntoskrnl!RtlpBreakWithStatusInstruction
fc8d6b6c 80522dea 00000003 00000000 00000000 ntoskrnl!KiBugCheckDebugBreak+0x19
fc8d6f34 804fc1bb 000000d1 00000000 00000002 ntoskrnl!KeBugCheck2+0x43c
fc8d6f54 804d7c50 0000000a 00000000 00000002 ntoskrnl!KeBugCheckEx+0x19
fc8d6f54 00000000 0000000a 00000000 00000002 ntoskrnl!KiTrap0E+0x2ad
WARNING: Stack unwind information not available. Following frames may be wrong.
fc8d6fe0 804f02eb fc27a314 fc27a324 00000000 0x0
fc8d6ff4 804effd3 fc90e438 004e02c8 002da098 ntoskrnl!KiRetireDpcList+0x30

It looks like there’s a NULL DPC set up or something.

Can anyone tell me what it’s a symptom of? As far as I can see my DPC’s are initialised ok.

Thanks,
Lee