New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 639672 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Nov 2016
Cc:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Chrome dev causes Windows kernel to crash

Reported by bced...@gmail.com, Aug 21 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2832.2 Safari/537.36

Steps to reproduce the problem:
Completely random, in my case it occured when playing back part of a video on YouTube using Chrome dev 54.0.2832.2

What is the expected behavior?

What went wrong?
I got a BSOD and after analysing the minidump it turns out Chrome has caused it through memory_corruption on system service level.

The contents from minidump: (as can be seen, process_name is chrome.exe)

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff803edf4c5d2, Address of the instruction which caused the bugcheck
Arg3: ffff82820242cfa0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP: 
nt!KxWaitForLockOwnerShipWithIrql+12
fffff803`edf4c5d2 48890a          mov     qword ptr [rdx],rcx

CONTEXT:  ffff82820242cfa0 -- (.cxr 0xffff82820242cfa0)
rax=0000000000000000 rbx=ffffb7827c289dd0 rcx=ffff82820242da00
rdx=8a06000000000000 rsi=0000000000000000 rdi=ffff82820242da00
rip=fffff803edf4c5d2 rsp=ffff82820242d9b0 rbp=ffffb7827c7d03c0
 r8=ffff82820242da60  r9=0000000000000000 r10=fffffb49388a1a04
r11=000000ec86d22000 r12=0000000000000000 r13=00007ffc869b4cd8
r14=0000000000000001 r15=0000000000010001
iopl=0         nv up di ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010082
nt!KxWaitForLockOwnerShipWithIrql+0x12:
fffff803`edf4c5d2 48890a          mov     qword ptr [rdx],rcx ds:002b:8a060000`00000000=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  chrome.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff803edebd167 to fffff803edf4c5d2

STACK_TEXT:  
ffff8282`0242d9b0 fffff803`edebd167 : ffffb782`7c289dd0 00000000`00000000 000000ec`86b4f080 fffffb49`393ed48c : nt!KxWaitForLockOwnerShipWithIrql+0x12
ffff8282`0242d9e0 fffff803`edebce4b : 00000000`00000002 000001cb`001f60d6 00000000`00000000 ffff8282`0242db80 : nt!ExAcquireResourceExclusiveLite+0x2a7
ffff8282`0242da60 fffffb49`38a6e80c : ffffb782`74ec6a90 00000000`004096f7 ffff8282`0242daa8 000000ec`86b4f4e0 : nt!ExEnterCriticalRegionAndAcquireResourceExclusive+0x1b
ffff8282`0242da90 fffffb49`393ebe7f : 00000000`00000036 00000000`00000000 00000000`00041cff 00000000`00000000 : win32kbase!EnterCrit+0x3c
ffff8282`0242dad0 fffff803`edfcbc93 : ffffb782`7c7d03c0 ffffb782`7c7d03c0 ffff8282`0242db80 0000022b`b6f9c840 : win32kfull!NtUserCallOneParam+0x1f
ffff8282`0242db00 00007ffc`a6c610e4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
000000ec`86b4f0b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffc`a6c610e4

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE_32

STACK_COMMAND:  .cxr 0xffff82820242cfa0 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_32

BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_32

Followup: memory_corruption

Crashed report ID: 

How much crashed? Whole browser

Is it a problem with a plugin? No 

Did this work before? N/A 

Chrome version: 54.0.2832.2  Channel: dev
OS Version: 10.0
Flash Version: Shockwave Flash 23.0 r0

It is certainly not a PC, environment or hardware issue. I have not made changes to my system recently, and this specific bugcheck/exception class is known to be nonhardware/software fault in other cases: f.e, https://www.osronline.com/showthread.cfm?link=190116

It is likely something broke in last dev release.

Apparently a Chrome bug is now able to bluescreen a PC.
I determine this through the specified source process in provided minidump (also attached as file)

The WER report: (less valuable than minidump)
Version=1
EventType=BlueScreen
EventTime=131162715766008229
ReportType=4
Consent=1
UploadTime=131162715766685622
ReportIdentifier=c47adc13-67be-11e6-826f-10feed10c432
IntegratorReportIdentifier=c314fba7-87d1-46f4-b004-d53c0af316bf
NsAppName=BlueScreen
AppSessionGuid=00000000-0000-0000-0000-000000000000
BootId=46
Response.BucketId=0x3B_win32kbase!gpresUser
Response.type=4
Response.CabId=c8ccf7ad-14b6-4567-99da-eefee56ee0e6
Sig[0].Name=Code
Sig[0].Value=3b
Sig[1].Name=Parameter 1
Sig[1].Value=c0000005
Sig[2].Name=Parameter 2
Sig[2].Value=fffff803edf4c5d2
Sig[3].Name=Parameter 3
Sig[3].Value=ffff82820242cfa0
Sig[4].Name=Parameter 4
Sig[4].Value=0
Sig[5].Name=Versie besturingssysteem
Sig[5].Value=10_0_14393
Sig[6].Name=Servicepack
Sig[6].Value=0_0
Sig[7].Name=Product
Sig[7].Value=768_1
DynamicSig[1].Name=Versie van besturingssysteem
DynamicSig[1].Value=10.0.14393.2.0.0.768.101
DynamicSig[2].Name=Landinstelling-id
DynamicSig[2].Value=1043
State[0].Key=Transport.DoneStage1
State[0].Value=1
File[0].CabName=082116-7765-01.dmp
File[0].Path=082116-7765-01.dmp
File[0].Flags=589826
File[0].Type=2
File[0].Original.Path=\\?\C:\WINDOWS\Minidump\082116-7765-01.dmp
File[1].CabName=sysdata.xml
File[1].Path=WER-8656-0.sysdata.xml
File[1].Flags=589826
File[1].Type=5
File[1].Original.Path=\\?\C:\Windows\Temp\WER-8656-0.sysdata.xml
File[2].CabName=WERInternalMetadata.xml
File[2].Path=WER3028.tmp.WERInternalMetadata.xml
File[2].Flags=851970
File[2].Type=5
File[2].Original.Path=\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3028.tmp.WERInternalMetadata.xml
File[3].CabName=Report.cab
File[3].Path=Report.cab
File[3].Flags=196608
File[3].Type=11
File[3].Original.Path=\\?\C:\WINDOWS\system32\Report.cab
Ns[0].Name=stopcode
Ns[0].Value=0000003B
Ns[1].Name=p1
Ns[1].Value=00000000C0000005
Ns[2].Name=p2
Ns[2].Value=FFFFF803EDF4C5D2
Ns[3].Name=p3
Ns[3].Value=FFFF82820242CFA0
Ns[4].Name=p4
Ns[4].Value=0000000000000000
FriendlyEventName=Onverwacht afgesloten
ConsentKey=BlueScreen
AppName=Windows
AppPath=C:\Windows\System32\WerFault.exe
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=00000000000000000000000000000000
MetadataHash=1455403535
 
082116-7765-01.dmp
402 KB Download

Comment 1 by bced...@gmail.com, Aug 22 2016

It happened again. Note that it only occured when Chrome was running, and Chrome is the bugcheck app as source. No BSOD's like this happen with other apps or when chrome is not running, no system issues, never BSODs before and not even before the latest Chrome Dev update.
Cc: ranjitkan@chromium.org
Labels: Needs-Feedback
Thanks for filing the issue. Request you to please update chrome to the latest dev version and try again. Unable to reproduce on Windows 7 and Win 10, played some youtube videos.

Also can you please help us with a crash ID generated from chrome://crashes.

Thanks.!
Components: OS>Kernel>Video

Comment 4 by bced...@gmail.com, Aug 24 2016

@ ranjitkan, a crashreport from chrome://crashes didn't generate (although I got it and auto-sending enabled and it does work for other crashes, so likely kernel crashed so fast Chrome didnt recognize/crashhandle it)

Also ive just updated to dev 54.0.2837.0, if it happens again I will post here.
@ brajkumar it was totally out of the blue, I could watch videos the whole day in the exact same circumstances, until it happened.
Later it happened without even watching Youtube/videos.

So I don't think it's reproducable, but directly caused by an unknown factor.
Components: -OS>Kernel>Video
Sorry, OS>Kernel>Video is a Chrome OS component.
Project Member

Comment 6 by sheriffbot@chromium.org, Sep 1 2016

Labels: -Needs-Feedback Needs-Review
Owner: ranjitkan@chromium.org
Thank you for providing more feedback. Adding requester "ranjitkan@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: -Needs-Review Needs-Feedback
Owner: ----
@ bced991: Can you please update us the current behavior which you are observing on the  latest stable version 54.0.2840.99. We just tried again and unable to reproduce it.

Thanks.!

Comment 8 by bced...@gmail.com, Nov 15 2016

The crash hasn't happened again after the instance I reported, so its either very rare or fixed by some later commit.
Status: WontFix (was: Unconfirmed)
Thanks for the update, closing the issue as per above comment.!

Sign in to add a comment