1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Help to Bugcheck analisys

Discussion in 'Legacy Windows' started by gabydiaz, 2006/07/04.

  1. 2006/07/04
    gabydiaz

    gabydiaz Inactive Thread Starter

    Joined:
    2006/07/04
    Messages:
    3
    Likes Received:
    0
    Please advise what could be the problem and the possible solution to avoid this happen again. thanks
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: 000044a5, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000001, value 0 = read operation, 1 = write operation
    Arg4: 8006550a, address which referenced memory

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.


    MODULE_NAME: nt

    FAULTING_MODULE: 80400000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 4344ec59

    WRITE_ADDRESS: unable to get nt!MmPoolCodeEnd
    unable to get nt!MmSpecialPoolEnd
    unable to get nt!MmPagedPoolEnd
    unable to get nt!MmNonPagedPoolEnd
    unable to get nt!MmNonPagedPoolStart
    unable to get nt!MmSpecialPoolStart
    unable to get nt!MmPagedPoolStart
    unable to get nt!MmNonPagedPoolExpansionStart
    unable to get nt!MmPoolCodeStart
    000044a5

    CURRENT_IRQL: 2

    FAULTING_IP:
    hal!KfAcquireSpinLock+1a
    8006550a f00fba2900 lock bts dword ptr [ecx],0x0

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xA

    LAST_CONTROL_TRANSFER: from 00000000 to 8046b1ac

    STACK_TEXT:
    f5c539a0 00000000 e48c73e8 88593838 86ec7508 nt!Kei386EoiHelper+0x275c


    STACK_COMMAND: .bugcheck ; kb

    FOLLOWUP_NAME: MachineOwner

    BUCKET_ID: WRONG_SYMBOLS
     
  2. 2006/07/04
    gabydiaz

    gabydiaz Inactive Thread Starter

    Joined:
    2006/07/04
    Messages:
    3
    Likes Received:
    0
    Another Bugcheck Analysis

    :cool: Please help to identify root cause and possible solution. thanks.

    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 41, {1000, c843, 5be, 38e}

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *** ERROR: Module load completed but symbols could not be loaded for atapi.sys
    Probably caused by : atapi.sys ( atapi+6bab )

    Followup: MachineOwner
    ---------

    2: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    MUST_SUCCEED_POOL_EMPTY (41)
    No component should ever ask for must-succeed pool as if there is none left,
    the system crashes. Instead, components should ask for normal pool and
    gracefully handle the scenario where the pool is temporarily empty. This
    bugcheck definitely reveals a bug in the caller (use kb to identify the caller).
    In addition, the fact that the pool is empty may be either a transient condition
    or possibly a leak in another component (distinguish between the 2 cases by
    following the directions below).
    Type kb to show the calling stack.
    Type !vm 1 to display total pool usage.
    Then type !poolused 2 to display per-tag nonpaged pool usage.
    Then type !poolused 4 to display per-tag paged pool usage.
    The crash should be looked at by the tag owner that is consuming the most pool.
    Arguments:
    Arg1: 00001000, size of the request that could not be satisfied
    Arg2: 0000c843, number of pages used of nonpaged pool
    Arg3: 000005be, number of > PAGE_SIZE requests from nonpaged pool
    Arg4: 0000038e, number of pages available

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.


    MODULE_NAME: atapi

    FAULTING_MODULE: 80400000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 3e89d599

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x41

    LAST_CONTROL_TRANSFER: from 8046dfe8 to 8046e70e

    STACK_TEXT:
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f202fc30 8046dfe8 00000002 00001000 00000000 nt!ExFreePoolWithTag+0x4be
    f202fc68 f7567bab 00000002 00000000 50656449 nt!ExAllocatePoolWithTag+0x428
    f202fc90 f7568a44 85dbae08 85d24c28 85dbd1c0 atapi+0x6bab
    f202fccc f75674bd 85dbd0e8 85dbd1c0 f202fd3b atapi+0x7a44
    f202fd3c 80467739 85dbd0a4 85dbd030 00000000 atapi+0x64bd
    f202fd54 80467690 0000000e 00000000 00000000 nt!Exi386InterlockedExchangeUlong+0xe1
    f202fd58 00000000 00000000 00000000 00000000 nt!Exi386InterlockedExchangeUlong+0x38


    FOLLOWUP_IP:
    atapi+6bab
    f7567bab 8bf0 mov esi,eax

    SYMBOL_STACK_INDEX: 2

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: atapi+6bab

    IMAGE_NAME: atapi.sys

    STACK_COMMAND: kb

    BUCKET_ID: WRONG_SYMBOLS

    Followup: MachineOwner
    ---------


    2: kd> kb
    ChildEBP RetAddr Args to Child
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f202fc30 8046dfe8 00000002 00001000 00000000 nt!ExFreePoolWithTag+0x4be
    f202fc68 f7567bab 00000002 00000000 50656449 nt!ExAllocatePoolWithTag+0x428
    f202fc90 f7568a44 85dbae08 85d24c28 85dbd1c0 atapi+0x6bab
    f202fccc f75674bd 85dbd0e8 85dbd1c0 f202fd3b atapi+0x7a44
    f202fd3c 80467739 85dbd0a4 85dbd030 00000000 atapi+0x64bd
    f202fd54 80467690 0000000e 00000000 00000000 nt!Exi386InterlockedExchangeUlong+0xe1
    f202fd58 00000000 00000000 00000000 00000000 nt!Exi386InterlockedExchangeUlong+0x38
     

  3. to hide this advert.

  4. 2006/07/05
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Please fix your symbols
     
    Arie,
    #3

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.