vista issues

NTFSD
1

my minifilter works exactly fine on windows xp.
but it crashes the system on vista with this

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.

and following is stack trace
STACK_TEXT:
a9816af8 8206bb54 00000000 bf318000 00000000 nt!MmAccessFault+0x10a
a9816af8 82063343 00000000 bf318000 00000000 nt!KiTrap0E+0xdc
a9816bb0 827ca809 85ede5b8 a9816bd0 a9816bf0 nt!RtlInitUnicodeString+0x1b
a9816c0c 827ccff8 a9816c54 00000000 a9816c54 fltmgr!FltpPerformPreCallbacks+0x2e5
a9816c20 827cd8f7 a9816c54 00000000 87137020 fltmgr!FltpPassThroughInternal+0x32
a9816c3c 827cdd53 a9816c00 87137020 00000000 fltmgr!FltpPassThrough+0x1a3
a9816c6c 820ccfd3 87137020 84797e00 84797e00 fltmgr!FltpDispatch+0xb1
a9816c84 8225d5e5 84ef0c64 84797e00 84797fd8 nt!IofCallDriver+0x63
a9816ca4 822388ed 87137020 84ef0c38 00000001 nt!IopSynchronousServiceTail+0x1d9
a9816d38 82068a1a 87137020 000002fc 00000000 nt!NtWriteFile+0x6fc
a9816d38 77af9a94 87137020 000002fc 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
024fe560 00000000 00000000 00000000 00000000 0x77af9a94
and has a problem while unloading the driver.

what kind of compat issues i need to look into.

2

I bet that you are calling RtlInitUnicodeString on something that is
either invaild or not terminated by 0.

L.

my minifilter works exactly fine on windows xp.
but it crashes the system on vista with this

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.

and following is stack trace
STACK_TEXT:
a9816af8 8206bb54 00000000 bf318000 00000000 nt!MmAccessFault+0x10a
a9816af8 82063343 00000000 bf318000 00000000 nt!KiTrap0E+0xdc
a9816bb0 827ca809 85ede5b8 a9816bd0 a9816bf0 nt!RtlInitUnicodeString+0x1b
a9816c0c 827ccff8 a9816c54 00000000 a9816c54
fltmgr!FltpPerformPreCallbacks+0x2e5
a9816c20 827cd8f7 a9816c54 00000000 87137020
fltmgr!FltpPassThroughInternal+0x32
a9816c3c 827cdd53 a9816c00 87137020 00000000 fltmgr!FltpPassThrough+0x1a3
a9816c6c 820ccfd3 87137020 84797e00 84797e00 fltmgr!FltpDispatch+0xb1
a9816c84 8225d5e5 84ef0c64 84797e00 84797fd8 nt!IofCallDriver+0x63
a9816ca4 822388ed 87137020 84ef0c38 00000001
nt!IopSynchronousServiceTail+0x1d9
a9816d38 82068a1a 87137020 000002fc 00000000 nt!NtWriteFile+0x6fc
a9816d38 77af9a94 87137020 000002fc 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
024fe560 00000000 00000000 00000000 00000000 0x77af9a94
and has a problem while unloading the driver.

what kind of compat issues i need to look into.

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

3

Dump the part of the code where you use RtlInitUnicodeString please.

With respect,
Gabriel Bercea

GaMiTech Software Development
Mobile contact: ?(+40)0740049634
eMail: xxxxx@gmail.com
Blog: http://gamitech.blogspot.com/
Linkedin: http://www.linkedin.com/in/gamitech
Twitter: http://www.twitter.com/gamitech

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@gmail.com
Sent: Thursday, August 27, 2009 9:52 AM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] vista issues

my minifilter works exactly fine on windows xp.
but it crashes the system on vista with this

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by
try-except,
it must be protected by a Probe. Typically the address is just plain bad or
it
is pointing at freed memory.

and following is stack trace
STACK_TEXT:
a9816af8 8206bb54 00000000 bf318000 00000000 nt!MmAccessFault+0x10a
a9816af8 82063343 00000000 bf318000 00000000 nt!KiTrap0E+0xdc
a9816bb0 827ca809 85ede5b8 a9816bd0 a9816bf0 nt!RtlInitUnicodeString+0x1b
a9816c0c 827ccff8 a9816c54 00000000 a9816c54
fltmgr!FltpPerformPreCallbacks+0x2e5
a9816c20 827cd8f7 a9816c54 00000000 87137020
fltmgr!FltpPassThroughInternal+0x32
a9816c3c 827cdd53 a9816c00 87137020 00000000 fltmgr!FltpPassThrough+0x1a3
a9816c6c 820ccfd3 87137020 84797e00 84797e00 fltmgr!FltpDispatch+0xb1
a9816c84 8225d5e5 84ef0c64 84797e00 84797fd8 nt!IofCallDriver+0x63
a9816ca4 822388ed 87137020 84ef0c38 00000001
nt!IopSynchronousServiceTail+0x1d9
a9816d38 82068a1a 87137020 000002fc 00000000 nt!NtWriteFile+0x6fc
a9816d38 77af9a94 87137020 000002fc 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
024fe560 00000000 00000000 00000000 00000000 0x77af9a94
and has a problem while unloading the driver.

what kind of compat issues i need to look into.

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer