Win8 7b

Prokash_Sinha · July 9, 2012, 2:12pm

After I converted the sources to win8 build, I'm getting 7B. Not sure if
signing is coming in the way ( will try to disable the signing and give it
another try ). I noticed that the binary being signed by Microsoft test,
then by us ...

MODULE_NAME: nt

FAULTING_MODULE: fffff80159a79000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4fe6a478

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

BUGCHECK_STR: 0x7B

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80159be117a to fffff80159ae0870

STACK_TEXT:
fffff880009a8968 fffff80159be117a : 0000000000000000 000000000000007b
fffff880009a8ad0 fffff80159b66930 : nt!DbgBreakPointWithStatus
fffff880009a8970 fffff80159be07d2 : 0000000000000003 0000000000000000
fffff80159b63810 000000000000007b : nt!KeEnterKernelDebugger+0x1192
fffff880009a89d0 fffff80159ae6044 : fffff880009a9180 fffff80159eb7034
ffff46c05a9d3f71 fffffa8005306e60 : nt!KeEnterKernelDebugger+0x7ea
fffff880009a90f0 fffff80159c3df8d : 000000000000007b fffff880009a9160
ffffffffc0000034 0000000000000000 : nt!KeBugCheckEx+0x104
fffff880009a9130 fffff8015a15487c : fffff8a000362d60 ffffffff80000194
fffff80158c76aa0 ffffffffffe17b80 : nt!XIPDispatch+0xf385
fffff880009a91b0 fffff8015a158d24 : ffffffff8000009c 0000000000000000
fffff80159d3f360 fffff80158c15a20 : nt!KeFindConfigurationNextEntry+0x147c
fffff880009a93b0 fffff8015a1613d7 : 0000000000000000 0000000000000000
fffff80158c1d980 fffff80159a79000 :
nt!IoUnregisterBootDriverCallback+0x3114
fffff880009a94d0 fffff80159f4ce49 : 244489485824448d fffffa8003c18040
fffff80158c15a20 fffffa8003bfc988 :
nt!IoUnregisterBootDriverCallback+0xb7c7
fffff880009a9be0 fffff80159ac6181 : 24748b48ffff3bbc 49ffffffffbb4158
8bd78b486b77f33b 0000000000000080 : nt!RtlAddRange+0x1335
fffff880009a9c10 fffff80159ad5e26 : fffff80159d5c180 fffffa8003c18040
fffff80159db4880 fffffa8003bfc6c0 : nt!FsRtlInitializeLargeMcb+0x559
fffff880009a9c60 0000000000000000 : fffff880009aa000 fffff880009a4000
0000000000000000 0000000000000000 : nt!_misaligned_access+0x606

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KeEnterKernelDebugger+1192
fffff80159be117a e987000000 jmp nt!KeEnterKernelDebugger+0x121e (fffff80159be1206)

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!KeEnterKernelDebugger+1192

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: ntkrnlmp.exe

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner

Any suggestion ???

-pro

Ken_Johnson · July 9, 2012, 2:16pm

Fix your symbols first.

S (Msft)

From: xxxxx@lists.osr.com [xxxxx@lists.osr.com] on behalf of Prokash Sinha [xxxxx@gmail.com]
Sent: Monday, July 09, 2012 11:11 AM
To: Kernel Debugging Interest List
Subject: [windbg] Win8 7b

After I converted the sources to win8 build, I'm getting 7B. Not sure if signing is coming in the way ( will try to disable the signing and give it another try ). I noticed that the binary being signed by Microsoft test, then by us ...

MODULE_NAME: nt

FAULTING_MODULE: fffff80159a79000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4fe6a478

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

BUGCHECK_STR: 0x7B

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80159be117a to fffff80159ae0870

STACK_TEXT:
fffff880009a8968 fffff80159be117a : 0000000000000000 000000000000007b fffff880009a8ad0 fffff80159b66930 : nt!DbgBreakPointWithStatus
fffff880009a8970 fffff80159be07d2 : 0000000000000003 0000000000000000 fffff80159b63810 000000000000007b : nt!KeEnterKernelDebugger+0x1192
fffff880009a89d0 fffff80159ae6044 : fffff880009a9180 fffff80159eb7034 ffff46c05a9d3f71 fffffa8005306e60 : nt!KeEnterKernelDebugger+0x7ea
fffff880009a90f0 fffff80159c3df8d : 000000000000007b fffff880009a9160 ffffffffc0000034 0000000000000000 : nt!KeBugCheckEx+0x104
fffff880009a9130 fffff8015a15487c : fffff8a000362d60 ffffffff80000194 fffff80158c76aa0 ffffffffffe17b80 : nt!XIPDispatch+0xf385
fffff880009a91b0 fffff8015a158d24 : ffffffff8000009c 0000000000000000 fffff80159d3f360 fffff80158c15a20 : nt!KeFindConfigurationNextEntry+0x147c
fffff880009a93b0 fffff8015a1613d7 : 0000000000000000 0000000000000000 fffff80158c1d980 fffff80159a79000 : nt!IoUnregisterBootDriverCallback+0x3114
fffff880009a94d0 fffff80159f4ce49 : 244489485824448d fffffa8003c18040 fffff80158c15a20 fffffa8003bfc988 : nt!IoUnregisterBootDriverCallback+0xb7c7
fffff880009a9be0 fffff80159ac6181 : 24748b48ffff3bbc 49ffffffffbb4158 8bd78b486b77f33b 0000000000000080 : nt!RtlAddRange+0x1335
fffff880009a9c10 fffff80159ad5e26 : fffff80159d5c180 fffffa8003c18040 fffff80159db4880 fffffa8003bfc6c0 : nt!FsRtlInitializeLargeMcb+0x559
fffff880009a9c60 0000000000000000 : fffff880009aa000 fffff880009a4000 0000000000000000 0000000000000000 : nt!_misaligned_access+0x606

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KeEnterKernelDebugger+1192
fffff80159be117a e987000000 jmp nt!KeEnterKernelDebugger+0x121e (fffff80159be1206)

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!KeEnterKernelDebugger+1192

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: ntkrnlmp.exe

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner

Any suggestion ???

-pro
--- WINDBG is sponsored by OSR For our schedule of WDF, WDM, debugging and other seminars visit: OSR Seminars – OSR To unsubscribe, visit the List Server section of OSR Online at ListServer/Forum

Prokash_Sinha · July 9, 2012, 2:39pm

I did .symfix, .reload before I sent it …

On Mon, Jul 9, 2012 at 11:15 AM, Skywing wrote:

> Fix your symbols first.
>
> - S (Msft)
> ------------------------------
> From: xxxxx@lists.osr.com [
> xxxxx@lists.osr.com] on behalf of Prokash Sinha [
> xxxxx@gmail.com]
> Sent: Monday, July 09, 2012 11:11 AM
> To: Kernel Debugging Interest List
> Subject: [windbg] Win8 7b
>
> After I converted the sources to win8 build, I’m getting 7B. Not sure
> if signing is coming in the way ( will try to disable the signing and give
> it another try ). I noticed that the binary being signed by Microsoft test,
> then by us …
>
> MODULE_NAME: nt
>
> FAULTING_MODULE: fffff80159a79000 nt
>
> DEBUG_FLR_IMAGE_TIMESTAMP: 4fe6a478
>
> DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
>
> BUGCHECK_STR: 0x7B
>
> CURRENT_IRQL: 0
>
> LAST_CONTROL_TRANSFER: from fffff80159be117a to fffff80159ae0870
>
> STACK_TEXT:
> fffff880009a8968 fffff80159be117a : 0000000000000000 000000000000007b
> fffff880009a8ad0 fffff80159b66930 : nt!DbgBreakPointWithStatus
> fffff880009a8970 fffff80159be07d2 : 0000000000000003 0000000000000000
> fffff80159b63810 000000000000007b : nt!KeEnterKernelDebugger+0x1192
> fffff880009a89d0 fffff80159ae6044 : fffff880009a9180 fffff80159eb7034
> ffff46c05a9d3f71 fffffa8005306e60 : nt!KeEnterKernelDebugger+0x7ea
> fffff880009a90f0 fffff80159c3df8d : 000000000000007b fffff880009a9160
> ffffffffc0000034 0000000000000000 : nt!KeBugCheckEx+0x104
> fffff880009a9130 fffff8015a15487c : fffff8a000362d60 ffffffff80000194
> fffff80158c76aa0 ffffffffffe17b80 : nt!XIPDispatch+0xf385
> fffff880009a91b0 fffff8015a158d24 : ffffffff8000009c 0000000000000000
> fffff80159d3f360 fffff80158c15a20 : nt!KeFindConfigurationNextEntry+0x147c
> fffff880009a93b0 fffff8015a1613d7 : 0000000000000000 0000000000000000
> fffff80158c1d980 fffff80159a79000 :
> nt!IoUnregisterBootDriverCallback+0x3114
> fffff880009a94d0 fffff80159f4ce49 : 244489485824448d fffffa8003c18040
> fffff80158c15a20 fffffa8003bfc988 :
> nt!IoUnregisterBootDriverCallback+0xb7c7
> fffff880009a9be0 fffff80159ac6181 : 24748b48ffff3bbc 49ffffffffbb4158
> 8bd78b486b77f33b 0000000000000080 : nt!RtlAddRange+0x1335
> fffff880009a9c10 fffff80159ad5e26 : fffff80159d5c180 fffffa8003c18040
> fffff80159db4880 fffffa8003bfc6c0 : nt!FsRtlInitializeLargeMcb+0x559
> fffff880009a9c60 0000000000000000 : fffff880009aa000 fffff880009a4000
> 0000000000000000 0000000000000000 : nt!_misaligned_access+0x606
>
>
> STACK_COMMAND: kb
>
> FOLLOWUP_IP:
> nt!KeEnterKernelDebugger+1192
> fffff80159be117a e987000000 jmp nt!KeEnterKernelDebugger+0x121e<br>> (fffff80159be1206)
>
> SYMBOL_STACK_INDEX: 1
>
> SYMBOL_NAME: nt!KeEnterKernelDebugger+1192
>
> FOLLOWUP_NAME: MachineOwner
>
> IMAGE_NAME: ntkrnlmp.exe
>
> BUCKET_ID: WRONG_SYMBOLS
>
> Followup: MachineOwner
> ---------
>
> Any suggestion ???
>
> -pro
> — WINDBG is sponsored by OSR For our schedule of WDF, WDM, debugging and
> other seminars visit: http://www.osr.com/seminars To unsubscribe, visit
> the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
> —
> WINDBG is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

OSR_Community_User · July 11, 2012, 8:48am

What??s the type of your driver? If it??s not a disk driver, won??t cause
this issue even not digital signed. Ever tested under win8 32bits?

???: xxxxx@lists.osr.com [mailto:xxxxx@lists.
osr.com] ??? Prokash Sinha
???ʱ??: July 10, 2012 02:38
?ռ???: Kernel Debugging Interest List
???: Re: [windbg] Win8 7b

I did .symfix, .reload before I sent it …

On Mon, Jul 9, 2012 at 11:15 AM, Skywing
wrote:

Fix your symbols first.

- S (Msft)

_____

From: xxxxx@lists.osr.com [xxxxx@lists.osr.com]
on behalf of Prokash Sinha [xxxxx@gmail.com]
Sent: Monday, July 09, 2012 11:11 AM
To: Kernel Debugging Interest List
Subject: [windbg] Win8 7b

After I converted the sources to win8 build, I’m getting 7B. Not sure if
signing is coming in the way ( will try to disable the signing and give it
another try ). I noticed that the binary being signed by Microsoft test,
then by us …

MODULE_NAME: nt

FAULTING_MODULE: fffff80159a79000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4fe6a478

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

BUGCHECK_STR: 0x7B

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80159be117a to fffff80159ae0870

STACK_TEXT:

fffff880009a8968 fffff80159be117a : 0000000000000000 000000000000007b
fffff880009a8ad0 fffff80159b66930 : nt!DbgBreakPointWithStatus

fffff880009a8970 fffff80159be07d2 : 0000000000000003 0000000000000000
fffff80159b63810 000000000000007b : nt!KeEnterKernelDebugger+0x1192

fffff880009a89d0 fffff80159ae6044 : fffff880009a9180 fffff80159eb7034
ffff46c05a9d3f71 fffffa8005306e60 : nt!KeEnterKernelDebugger+0x7ea

fffff880009a90f0 fffff80159c3df8d : 000000000000007b fffff880009a9160
ffffffffc0000034 0000000000000000 : nt!KeBugCheckEx+0x104

fffff880009a9130 fffff8015a15487c : fffff8a000362d60 ffffffff80000194
fffff80158c76aa0 ffffffffffe17b80 : nt!XIPDispatch+0xf385

fffff880009a91b0 fffff8015a158d24 : ffffffff8000009c 0000000000000000
fffff80159d3f360 fffff80158c15a20 : nt!KeFindConfigurationNextEntry+0x147c

fffff880009a93b0 fffff8015a1613d7 : 0000000000000000 0000000000000000
fffff80158c1d980 fffff80159a79000 :
nt!IoUnregisterBootDriverCallback+0x3114

fffff880009a94d0 fffff80159f4ce49 : 244489485824448d fffffa8003c18040
fffff80158c15a20 fffffa8003bfc988 :
nt!IoUnregisterBootDriverCallback+0xb7c7

fffff880009a9be0 fffff80159ac6181 : 24748b48ffff3bbc 49ffffffffbb4158
8bd78b486b77f33b 0000000000000080 : nt!RtlAddRange+0x1335

fffff880009a9c10 fffff80159ad5e26 : fffff80159d5c180 fffffa8003c18040
fffff80159db4880 fffffa8003bfc6c0 : nt!FsRtlInitializeLargeMcb+0x559

fffff880009a9c60 0000000000000000 : fffff880009aa000 fffff880009a4000
0000000000000000 0000000000000000 : nt!_misaligned_access+0x606

STACK_COMMAND: kb

FOLLOWUP_IP:

nt!KeEnterKernelDebugger+1192

fffff80159be117a e987000000 jmp nt!KeEnterKernelDebugger+0x121e<br>(fffff80159be1206)

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!KeEnterKernelDebugger+1192

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: ntkrnlmp.exe

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner

---------

Any suggestion ???

-pro

— WINDBG is sponsored by OSR For our schedule of WDF, WDM, debugging and
other seminars visit: http://www.osr.com/seminars To unsubscribe, visit the
List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

—
WINDBG is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

— WINDBG is sponsored by OSR For our schedule of WDF, WDM, debugging and
other seminars visit: http://www.osr.com/seminars To unsubscribe, visit the
List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

Prokash_Sinha · July 11, 2012, 9:37am

It was not really a problem, I was converting a few win7 projects to vs2012
wdk, and had some issues with inf, now it is okay.

-pro

On Wed, Jul 11, 2012 at 5:48 AM, Moore.Zhang wrote:

> What??s the type of your driver? If it??s not a disk driver, won??t cause
> this issue even not digital signed. Ever tested under win8 32bits?
>
>
>
> ???: xxxxx@lists.osr.com [mailto:
> xxxxx@lists.osr.com] ??? Prokash Sinha
> ???ʱ??: July 10, 2012 02:38
> ?ռ???: Kernel Debugging Interest List
> ???: Re: [windbg] Win8 7b
>
> ****
>
> I did .symfix, .reload before I sent it …
>
> On Mon, Jul 9, 2012 at 11:15 AM, Skywing
> wrote:
>
> Fix your symbols first.
>
>
>
> - S (Msft)
> ------------------------------
>
> From: xxxxx@lists.osr.com [
> xxxxx@lists.osr.com] on behalf of Prokash Sinha [
> xxxxx@gmail.com]
> Sent: Monday, July 09, 2012 11:11 AM
> To: Kernel Debugging Interest List
> Subject: [windbg] Win8 7b**
>
> After I converted the sources to win8 build, I’m getting 7B. Not sure if
> signing is coming in the way ( will try to disable the signing and give it
> another try ). I noticed that the binary being signed by Microsoft test,
> then by us …
>
>
>
> MODULE_NAME: nt
>
> ****
>
> FAULTING_MODULE: fffff80159a79000 nt
>
>
>
> DEBUG_FLR_IMAGE_TIMESTAMP: 4fe6a478
>
> ****
>
> DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
>
>
>
> BUGCHECK_STR: 0x7B
>
> ****
>
> CURRENT_IRQL: 0
>
>
>
> LAST_CONTROL_TRANSFER: from fffff80159be117a to fffff80159ae0870
>
> ****
>
> STACK_TEXT:
>
> fffff880009a8968 fffff80159be117a : 0000000000000000 000000000000007b
> fffff880009a8ad0 fffff80159b66930 : nt!DbgBreakPointWithStatus
>
> fffff880009a8970 fffff80159be07d2 : 0000000000000003 0000000000000000
> fffff80159b63810 000000000000007b : nt!KeEnterKernelDebugger+0x1192
>
> fffff880009a89d0 fffff80159ae6044 : fffff880009a9180 fffff80159eb7034
> ffff46c05a9d3f71 fffffa8005306e60 : nt!KeEnterKernelDebugger+0x7ea
>
> fffff880009a90f0 fffff80159c3df8d : 000000000000007b fffff880009a9160
> ffffffffc0000034 0000000000000000 : nt!KeBugCheckEx+0x104
>
> fffff880009a9130 fffff8015a15487c : fffff8a000362d60 ffffffff80000194
> fffff80158c76aa0 ffffffffffe17b80 : nt!XIPDispatch+0xf385
>
> fffff880009a91b0 fffff8015a158d24 : ffffffff8000009c 0000000000000000
> fffff80159d3f360 fffff80158c15a20 : nt!KeFindConfigurationNextEntry+0x147c
>
>
> fffff880009a93b0 fffff8015a1613d7 : 0000000000000000 0000000000000000
> fffff80158c1d980 fffff80159a79000 :
> nt!IoUnregisterBootDriverCallback+0x3114
>
> fffff880009a94d0 fffff80159f4ce49 : 244489485824448d fffffa8003c18040
> fffff80158c15a20 fffffa8003bfc988 :
> nt!IoUnregisterBootDriverCallback+0xb7c7
>
> fffff880009a9be0 fffff80159ac6181 : 24748b48ffff3bbc 49ffffffffbb4158
> 8bd78b486b77f33b 0000000000000080 : nt!RtlAddRange+0x1335
>
> fffff880009a9c10 fffff80159ad5e26 : fffff80159d5c180 fffffa8003c18040
> fffff80159db4880 fffffa8003bfc6c0 : nt!FsRtlInitializeLargeMcb+0x559
>
> fffff880009a9c60 0000000000000000 : fffff880009aa000 fffff880009a4000
> 0000000000000000 0000000000000000 : nt!_misaligned_access+0x606
>
> ****
>
> ****
>
> STACK_COMMAND: kb
>
>
>
> FOLLOWUP_IP:
>
> nt!KeEnterKernelDebugger+1192****
>
> fffff80159be117a e987000000 jmp nt!KeEnterKernelDebugger+0x121e<br>> (fffff80159be1206)****
>
> ****
>
> SYMBOL_STACK_INDEX: 1
>
>
>
> SYMBOL_NAME: nt!KeEnterKernelDebugger+1192
>
> ****
>
> FOLLOWUP_NAME: MachineOwner
>
>
>
> IMAGE_NAME: ntkrnlmp.exe
>
> ****
>
> BUCKET_ID: WRONG_SYMBOLS
>
>
>
> Followup: MachineOwner
>
> ---------
>
>
>
> Any suggestion ???
>
> ****
>
> -pro
>
> — WINDBG is sponsored by OSR For our schedule of WDF, WDM, debugging and
> other seminars visit: http://www.osr.com/seminars To unsubscribe, visit
> the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
>
> —
> WINDBG is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
>
> — WINDBG is sponsored by OSR For our schedule of WDF, WDM, debugging and
> other seminars visit: http://www.osr.com/seminars To unsubscribe, visit
> the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
> —
> WINDBG is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>