All pastes #55734 Raw Edit

ziggz

public text v1 · immutable
#55734 ·published 2006-05-14 08:16 UTC
rendered paste body

Microsoft (R) Windows Debugger  Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini051406-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Sun May 14 03:00:20.656 2006 (GMT-4)
System Uptime: 0 days 1:17:49.309
Loading Kernel Symbols
............................................................................................................................................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {b, ff, 0, 804e35e9}

Probably caused by : win32k.sys ( win32k!GreAcquireSemaphore+18 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000b, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 804e35e9, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS:  0000000b 

CURRENT_IRQL:  ff

FAULTING_IP: 
nt!ExAcquireResourceExclusiveLite+36
804e35e9 66837e0c00       cmp     word ptr [esi+0xc],0x0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xA

LAST_CONTROL_TRANSFER:  from 804e35e9 to 804e187f

STACK_TEXT:  
b93ccba8 804e35e9 badb0d00 00000000 00000000 nt!KiTrap0E+0x233
b93ccc24 bf801913 ffffffff 00000001 e1b01008 nt!ExAcquireResourceExclusiveLite+0x36
b93ccc34 bf803cc4 bbe406e8 b93ccc84 bf828fa2 win32k!GreAcquireSemaphore+0x18
b93ccc40 bf828fa2 e1b01008 bf9a9fe0 bbe406e8 win32k!GreLockDisplay+0x11
b93ccc84 bf8276a3 bf9a9fe0 00000000 bbe461d0 win32k!zzzBltValidBits+0x28
b93cccdc bf82a3be 00000001 00000000 00000000 win32k!xxxEndDeferWindowPosEx+0x121
b93cccfc bf83912d bbe461d0 00000000 00000000 win32k!xxxSetWindowPos+0x101
b93ccd30 bf8394a6 00000010 00000097 b93ccd64 win32k!xxxShowWindow+0x250
b93ccd54 804de7ec 0002004e 00000000 0006f01c win32k!NtUserShowWindow+0xa1
b93ccd54 7c90eb94 0002004e 00000000 0006f01c nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0006f01c 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!GreAcquireSemaphore+18
bf801913 5e               pop     esi

FAULTING_SOURCE_CODE:  


SYMBOL_STACK_INDEX:  2

FOLLOWUP_NAME:  MachineOwner

SYMBOL_NAME:  win32k!GreAcquireSemaphore+18

MODULE_NAME:  win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  43446a58

FAILURE_BUCKET_ID:  0xA_win32k!GreAcquireSemaphore+18

BUCKET_ID:  0xA_win32k!GreAcquireSemaphore+18

Followup: MachineOwner
---------