NDIS miniport driver VPN issue

Hi,

We have a NDIS-WDM driver. WDM part is USB bus. The driver works fine if the “VPN Client protocol” is not enabled for our adapter.

If “VPN Client protocol” is enabled for our adapter system gives BSOD at different places everytime.

here is !analyze -v data of one of such errors

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 393837a2, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804f4010, address which referenced memory

Debugging Details:

WRITE_ADDRESS: 393837a2

CURRENT_IRQL: 2

FAULTING_IP:
nt!CcInitializeCacheMap+1aa
804f4010 83666cbf and dword ptr [esi+0x6c],0xffffffbf

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from f75cf2b3 to 804f4010

TRAP_FRAME: b86949dc – (.trap ffffffffb86949dc)
ErrCode = 00000002
eax=85385324 ebx=84e69648 ecx=85385300 edx=00000400 esi=39383736 edi=00000000
eip=804f4010 esp=b8694a50 ebp=b8694a88 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!CcInitializeCacheMap+0x1aa:
804f4010 83666cbf and dword ptr [esi+0x6c],0xffffffbf ds:0023:393837a2=???
Resetting default scope

STACK_TEXT:
b8694a88 f75cf2b3 84e69648 00cdd9a8 00000000 nt!CcInitializeCacheMap+0x1aa
b8694b60 f75cefbf 847fc990 85877858 00000001 Ntfs!NtfsCommonRead+0xc68
b8694c00 804e37f7 866fb020 85877858 866f4270 Ntfs!NtfsFsdRead+0x22d
b8694c10 f768f459 b8694c58 804e37f7 866fc640 nt!IopfCallDriver+0x31
b8694c18 804e37f7 866fc640 85877858 00000000 sr!SrPassThrough+0x31
b8694c28 b7f8e9a9 85848700 865ddfa8 85877858 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
b8694c58 b7f88930 84e69648 85848700 8648d308 naiavf5x+0x89a9
b8694c6c 804e37f7 854dd310 85877858 806ed070 naiavf5x+0x2930
b8694c7c 8056a201 85877a54 85877858 84e69648 nt!IopfCallDriver+0x31
b8694c90 805715ba 854dd310 85877858 84e69648 nt!IopSynchronousServiceTail+0x60
b8694d38 804de7ec 000003b8 00000000 00000000 nt!NtReadFile+0x580
b8694d38 7c90eb94 000003b8 00000000 00000000 nt!KiFastCallEntry+0xf8
01e0fb64 7c90e288 7c801875 000003b8 00000000 ntdll!KiFastSystemCallRet
01e0fb68 7c801875 000003b8 00000000 00000000 ntdll!NtReadFile+0xc
01e0fbd0 0040dc2a 000003b8 00b8c018 00002800 kernel32!ReadFile+0x16c
01e0fc08 0040a15e 00385ab0 01e0fd08 01e0fcf8 FireSvc+0xdc2a
01e0fc40 0041f4ab 00000df4 01e0fd08 01e0fcf8 FireSvc+0xa15e
01e0fcac 7e418bc9 7e471088 00000003 01e0fcf8 FireSvc+0x1f4ab
01e0fcbc 7e41b3bc 7e41b397 01e0fce4 7e41b3e9 USER32!_EndUserApiHook+0x11
01e0fcc0 7e41b397 01e0fce4 7e41b3e9 00000004 USER32!DefWindowProcW+0x94
01e0fcf8 00000000 00000000 00000000 003a0043 USER32!DefWindowProcW+0x86

FOLLOWUP_IP:
naiavf5x+89a9
b7f8e9a9 5f pop edi

SYMBOL_STACK_INDEX: 6

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: naiavf5x+89a9

MODULE_NAME: naiavf5x

IMAGE_NAME: naiavf5x.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4410d63d

STACK_COMMAND: .trap ffffffffb86949dc ; kb

FAILURE_BUCKET_ID: 0xA_W_naiavf5x+89a9

BUCKET_ID: 0xA_W_naiavf5x+89a9

Followup: MachineOwner

Can anybody throw some light on this?
Appriciated…

Rahul

xxxxx@yahoo.com wrote:

We have a NDIS-WDM driver. WDM part is USB bus. The driver works fine if the “VPN Client protocol” is not enabled for our adapter.

If “VPN Client protocol” is enabled for our adapter system gives BSOD at different places everytime.

here is !analyze -v data of one of such errors

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 393837a2, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804f4010, address which referenced memory

Debugging Details:

WRITE_ADDRESS: 393837a2

CURRENT_IRQL: 2

FAULTING_IP:
nt!CcInitializeCacheMap+1aa
804f4010 83666cbf and dword ptr [esi+0x6c],0xffffffbf

Did you notice that the address in esi is the ASCII string “6789”? Does
that give you any clues?


Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

No clues…can u please elaborate it?
— Tim Roberts wrote:

> xxxxx@yahoo.com wrote:
> > We have a NDIS-WDM driver. WDM part is USB bus.
> The driver works fine if the “VPN Client protocol”
> is not enabled for our adapter.
> >
> > If “VPN Client protocol” is enabled for our
> adapter system gives BSOD at different places
> everytime.
> >
> > here is !analyze -v data of one of such errors
> >
> > kd> !analyze -v
> >
>
***
> > *
>
> > * Bugcheck Analysis
>
> > *
>
> >
>

> >
> > IRQL_NOT_LESS_OR_EQUAL (a)
> > An attempt was made to access a pageable (or
> completely invalid) address at an
> > interrupt request level (IRQL) that is too high.
> This is usually
> > caused by drivers using improper addresses.
> > If a kernel debugger is available get the stack
> backtrace.
> > Arguments:
> > Arg1: 393837a2, memory referenced
> > Arg2: 00000002, IRQL
> > Arg3: 00000001, value 0 = read operation, 1 =
> write operation
> > Arg4: 804f4010, address which referenced memory
> >
> > Debugging Details:
> > ------------------
> >
> >
> > WRITE_ADDRESS: 393837a2
> >
> > CURRENT_IRQL: 2
> >
> > FAULTING_IP:
> > nt!CcInitializeCacheMap+1aa
> > 804f4010 83666cbf and dword ptr
> [esi+0x6c],0xffffffbf
> >
>
> Did you notice that the address in esi is the ASCII
> string “6789”? Does
> that give you any clues?
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other
> seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR
> Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

____________________________________________________________________________________
Be a better Heartthrob. Get better relationship answers from someone who knows. Yahoo! Answers - Check it out.
http://answers.yahoo.com/dir/?link=list&sid=396545433