1: kd> g
|
|
*** Fatal System Error: 0x000000d5
|
(0xFC066F68,0x00000000,0x9481D39B,0x00000000)
|
|
Driver at fault:
|
*** win32k.sys - Address 9481D39B base at 94750000, DateStamp 55e65292
|
.
|
Break instruction exception - code 80000003 (first chance)
|
|
A fatal system error has occurred.
|
Debugger entered on first try; Bugcheck callbacks have not been invoked.
|
|
A fatal system error has occurred.
|
|
Connected to Windows 7 7601 x86 compatible target at (Wed Sep 16 12:43:55.076 2015 (UTC + 2:00)), ptr64 FALSE
|
Loading Kernel Symbols
|
...............................................................
|
................................................................
|
........................
|
Loading User Symbols
|
........................
|
Loading unloaded module list
|
....
|
*******************************************************************************
|
* *
|
* Bugcheck Analysis *
|
* *
|
*******************************************************************************
|
|
Use !analyze -v to get detailed debugging information.
|
|
BugCheck D5, {fc066f68, 0, 9481d39b, 0}
|
|
*** WARNING: Unable to verify checksum for a32.exe
|
*** ERROR: Module load completed but symbols could not be loaded for a32.exe
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MM_DRIVER_VERIFIER_DATA ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
Probably caused by : win32k.sys ( win32k!XEPALOBJ::vUnrefPalette+16 )
|
|
Followup: MachineOwner
|
---------
|
|
Assertion failure - code c0000420 (first chance)
|
nt!KeAccumulateTicks+0x3c5:
|
82ab5dec cd2c int 2Ch
|
0: kd> !analyze -v
|
*******************************************************************************
|
* *
|
* Bugcheck Analysis *
|
* *
|
*******************************************************************************
|
|
DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL (d5)
|
Memory was referenced after it was freed.
|
This cannot be protected by try-except.
|
When possible, the guilty driver's name (Unicode string) is printed on
|
the bugcheck screen and saved in KiBugCheckDriver.
|
Arguments:
|
Arg1: fc066f68, memory referenced
|
Arg2: 00000000, value 0 = read operation, 1 = write operation
|
Arg3: 9481d39b, if non-zero, the address which referenced memory.
|
Arg4: 00000000, (reserved)
|
|
Debugging Details:
|
------------------
|
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MM_DRIVER_VERIFIER_DATA ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
*************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_KPRCB ***
|
*** ***
|
*************************************************************************
|
|
READ_ADDRESS: *************************************************************************
|
*** ***
|
*** ***
|
*** Either you specified an unqualified symbol, or your debugger ***
|
*** doesn't have full symbol information. Unqualified symbol ***
|
*** resolution is turned off by default. Please either specify a ***
|
*** fully qualified symbol module!symbolname, or enable resolution ***
|
*** of unqualified symbols by typing ".symopt- 100". Note that ***
|
*** enabling unqualified symbol resolution with network symbol ***
|
*** server shares in the symbol path may cause the debugger to ***
|
*** appear to hang for long periods of time when an incorrect ***
|
*** symbol name is typed or the network symbol server is down. ***
|
*** ***
|
*** For some commands to work properly, your symbol path ***
|
*** must point to .pdb files that have full type information. ***
|
*** ***
|
*** Certain .pdb files (such as the public OS symbols) do not ***
|
*** contain the required information. Contact the group that ***
|
*** provided you with these symbols if you need this command to ***
|
*** work. ***
|
*** ***
|
*** Type referenced: nt!_MMPTE ***
|
*** ***
|
*************************************************************************
|
fc066f68
|
|
FAULTING_IP:
|
win32k!XEPALOBJ::vUnrefPalette+16
|
9481d39b 8b00 mov eax,dword ptr [eax]
|
|
MM_INTERNAL_CODE: 0
|
|
IMAGE_NAME: win32k.sys
|
|
DEBUG_FLR_IMAGE_TIMESTAMP: 55e65292
|
|
MODULE_NAME: win32k
|
|
FAULTING_MODULE: 94750000 win32k
|
|
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
|
|
BUGCHECK_STR: 0xD5
|
|
CURRENT_IRQL: 0
|
|
TRAP_FRAME: 9bf8783c -- (.trap 0xffffffff9bf8783c)
|
ErrCode = 00000000
|
eax=fc066f68 ebx=faf4cda8 ecx=9bf87954 edx=00000100 esi=9bf87954 edi=00000000
|
eip=9481d39b esp=9bf878b0 ebp=9bf878bc iopl=0 nv up ei ng nz na po nc
|
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
|
win32k!XEPALOBJ::vUnrefPalette+0x16:
|
9481d39b 8b00 mov eax,dword ptr [eax] ds:0023:fc066f68=????????
|
Resetting default scope
|
|
LAST_CONTROL_TRANSFER: from 82ab52b3 to 82ab5dec
|
|
STACK_TEXT:
|
9bf87260 82ab52b3 0002625a 00000000 00004500 nt!KeAccumulateTicks+0x3c5
|
9bf872a0 82ab5160 82a1c0a8 ec769229 00000000 nt!KeUpdateRunTime+0x145
|
9bf872f8 82ab4963 00000002 00000002 000000d1 nt!KeUpdateSystemTime+0x613
|
9bf872f8 82a1c0a8 00000002 00000002 000000d1 nt!KeUpdateSystemTimeAssist+0x13
|
9bf8737c 82a0ab8c 00001000 00000000 9bf873dc hal!READ_PORT_USHORT+0x8
|
9bf8738c 82a0acf5 82b19d3e 4d1746b4 00000065 hal!HalpCheckPowerButton+0x2e
|
9bf87390 82b19d3e 4d1746b4 00000065 00000000 hal!HaliHaltSystem+0x7
|
9bf873dc 82b1a7e5 00000003 00000000 000fe44e nt!KiBugCheckDebugBreak+0x73
|
9bf877a0 82ac83c1 00000050 fc066f68 00000000 nt!KeBugCheck2+0x68b
|
9bf87824 82a7abe8 00000000 fc066f68 00000000 nt!MmAccessFault+0x104
|
9bf87824 9481d39b 00000000 fc066f68 00000000 nt!KiTrap0E+0xdc
|
9bf878bc 9481d35e 87a8bf18 9bf87970 00000002 win32k!XEPALOBJ::vUnrefPalette+0x16
|
9bf8794c 9481d000 fc066f68 00000000 420501fe win32k!SURFACE::bDeleteSurface+0x34d
|
9bf87960 94807446 00000000 420501fe faf4cda8 win32k!SURFREF::bDeleteSurface+0x14
|
9bf87974 94823331 420501fe 9bf87990 94846d1f win32k!bDeleteSurface+0x20
|
9bf87980 94846d1f 420501fe fb22cfc0 9bf87bb4 win32k!GreDeleteObject+0x60
|
9bf87990 9484643a fb22cfc0 00000002 370507c0 win32k!UT_FreeCBFormat+0x4b
|
9bf87bb4 948463c5 87a8bf18 00000002 370507c0 win32k!InternalSetClipboardData+0x45
|
9bf87bd8 94844e56 00000002 370507c0 00000000 win32k!_SetClipboardData+0x36
|
9bf87c20 82a77a06 00000002 370507c0 002cfdc8 win32k!NtUserSetClipboardData+0x7f
|
9bf87c20 779671b4 00000002 370507c0 002cfdc8 nt!KiSystemServicePostCall
|
002cfda4 7723288d 7723299f 00000002 370507c0 ntdll!KiFastSystemCallRet
|
002cfda8 7723299f 00000002 370507c0 002cfdc8 USER32!NtUserSetClipboardData+0xc
|
002cfdd4 00af1161 00000002 370507c0 0000003e USER32!SetClipboardData+0xd1
|
WARNING: Stack unwind information not available. Following frames may be wrong.
|
002cfdf4 00af1329 00000001 00088aa0 00089d80 a32+0x1161
|
002cfe3c 75caee6c 7ffde000 002cfe88 77983ab3 a32+0x1329
|
002cfe48 77983ab3 7ffde000 77b08682 00000000 kernel32!BaseThreadInitThunk+0xe
|
002cfe88 77983a86 00af13a6 7ffde000 00000000 ntdll!__RtlUserThreadStart+0x70
|
002cfea0 00000000 00af13a6 7ffde000 00000000 ntdll!_RtlUserThreadStart+0x1b
|
|
|
STACK_COMMAND: kb
|
|
FOLLOWUP_IP:
|
win32k!XEPALOBJ::vUnrefPalette+16
|
9481d39b 8b00 mov eax,dword ptr [eax]
|
|
SYMBOL_STACK_INDEX: b
|
|
SYMBOL_NAME: win32k!XEPALOBJ::vUnrefPalette+16
|
|
FOLLOWUP_NAME: MachineOwner
|
|
FAILURE_BUCKET_ID: 0xD5_VRF_win32k!XEPALOBJ::vUnrefPalette+16
|
|
BUCKET_ID: 0xD5_VRF_win32k!XEPALOBJ::vUnrefPalette+16
|
|
Followup: MachineOwner
|
---------
|