Page 3 of 4 FirstFirst 1234 LastLast
  1.    03 Jun 2016 #20
    Join Date : Jun 2015
    Italy
    Posts : 149
    Windows 10 x64 Pro Build 15063.540

    Done, used zip compression.
      My ComputerSystem Spec
  2.    14 Jun 2016 #21
    Join Date : Oct 2015
    Chandigarh,India
    Posts : 306
    Windows 10

    Hello,
    My WinDBG module list shows some drivers with a date of January 1970,someone told that there is an issue with a configuration or something.Generally the drivers with the date of January 1970 are drivers from MS itself AFAIK.Can someone help with this issue ?
      My ComputerSystem Spec
  3.    14 Jun 2016 #22
    Join Date : Jun 2015
    Posts : 12,682
    Windows 10 Pro

    It is the same for me and my Windbg is certainly properly configured, IMO I wouldn't call it something to be worried about.
      My ComputersSystem Spec
  4.    14 Jun 2016 #23
    Join Date : Oct 2015
    Chandigarh,India
    Posts : 306
    Windows 10

    Quote Originally Posted by axe0 View Post
    It is the same for me and my Windbg is certainly properly configured, IMO I wouldn't call it something to be worried about.
    Thank you axe0,much appreciated.
      My ComputerSystem Spec
  5.    14 Jun 2016 #24
    Join Date : Jun 2015
    Posts : 12,682
    Windows 10 Pro

    You're welcome
      My ComputersSystem Spec
  6.    23 Jul 2017 #25
    Join Date : Jul 2017
    Posts : 33
    Windows 10 x64 - Windows 7 SP1 x86

    I would be careful in assuming that because a third-party driver is present in a call stack, that it may be a cause of the issue. The drivers which appear in the call stack are simply drivers which were present at the time of the crash.

    The same principle applies to checking the PROCESS_NAME variable in the dump file, it simply indicates the last running process and does not mean that the process was the cause of the crash.

    I would also like to mention that the line "memory_corruption" within a dump line, does not necessarily mean that there are issue with the RAM; it is more commonly a driver issue than a hardware issue. Typically, a poorly written driver has been performing operations on memory addresses which are invalid for some reason or another. For example, writing onto pool locations which have been reserved for another process.
      My ComputerSystem Spec
  7.    24 Jul 2017 #26
    Join Date : Jun 2015
    Posts : 12,682
    Windows 10 Pro

    I'm not sure what you reference with 'that', but Windows catches crashes at times a violation occurs. Often this is because the driver in the stack makes a violation, may it be a due to a write violation on the pool of a thread from another process like you say or because a driver reads from memory which it already deallocated.
      My ComputersSystem Spec
  8.    24 Jul 2017 #27
    Join Date : Jul 2017
    Posts : 33
    Windows 10 x64 - Windows 7 SP1 x86

    I'll put the calls on the stack in consideration first, and then evaluate if the third-party driver may be a cause. I've seen call stacks which were full of third-party drivers, and none of which, were the exact cause of the crash.
      My ComputerSystem Spec
  9.    24 Jul 2017 #28
    Join Date : Jun 2015
    Posts : 12,682
    Windows 10 Pro

    Most I've seen are like this, not much to investigate on.
    Code:
    0: kd> knL
     # Child-SP          RetAddr           Call Site
    00 fffff802`fc383848 fffff802`fa7ded29 nt!KeBugCheckEx
    02 fffff802`fc383990 fffff802`fa6bbb89 nt!KiPageFault+0x247
    03 fffffa80`0c0891a0 fffff880`03bd2670 ZTEusbnet+0x35dd
    (Created this from different dumps)
      My ComputersSystem Spec
  10.    24 Jul 2017 #29
    Join Date : Jul 2017
    Posts : 33
    Windows 10 x64 - Windows 7 SP1 x86

    Do you use any custom debugger extensions to do call stack unwinds? The !dpx debugger extension is quite good:

    Code:
    0: kd> !load ProcDumpExt
    =========================================================================================
     ProcDumpExt v6.4 - Copyright 2013 Andrew Richards
    =========================================================================================
    Here's the output from a NotMyFault dump:

    Code:
    0: kd> !dpx
    Start memory scan  : 0xa4847b24 ($csp)
    End memory scan    : 0xa4848000 (Stack Base)
    
    ReadVirtual: 83168d20 not properly sign extended
    ReadVirtual: 83168d20 not properly sign extended
    ReadVirtual: 83175f84 not properly sign extended
    ReadVirtual: 83175f84 not properly sign extended
    ReadVirtual: a4847b3c not properly sign extended
    ReadVirtual: a4847b3c not properly sign extended
    ReadVirtual: 8307eb7f not properly sign extended
    ReadVirtual: 8307eb7f not properly sign extended
    ReadVirtual: a4847b24 not properly sign extended
    ReadVirtual: a4847b24 not properly sign extended
    ReadVirtual: ffff0ff0 not properly sign extended
    ReadVirtual: ffff0ff0 not properly sign extended
    ReadVirtual: 8001003b not properly sign extended
    ReadVirtual: 8001003b not properly sign extended
    ReadVirtual: c31b4008 not properly sign extended
    ReadVirtual: c31b4008 not properly sign extended
    ReadVirtual: de4e9780 not properly sign extended
    ReadVirtual: de4e9780 not properly sign extended
    ReadVirtual: 80b95000 not properly sign extended
    ReadVirtual: 80b95000 not properly sign extended
    ReadVirtual: 80b95400 not properly sign extended
    ReadVirtual: 80b95400 not properly sign extended
    *** ERROR: Module load completed but symbols could not be loaded for myfault.sys
    0xa4847b34 : 0xa719a5ab : myfault+0x5ab
    0xa4847b3c : 0xa4847bb8 :  Trap @ a4847b3c
    0xa4847b40 : 0xa719a5ab : myfault+0x5ab
    0xa4847ba4 : 0xa719a5ab : myfault+0x5ab
    0xa4847bbc : 0xa719a9db : myfault+0x9db
    0xa4847bc8 : 0xa719ab26 : myfault+0xb26
    0xa4847be4 : 0x83360018 : nt!PopSleepDeviceList+0x13b
    0xa4847c00 : 0x83074c1e : nt!IofCallDriver+0x63
    0xa4847c18 : 0x83268bf9 : nt!IopSynchronousServiceTail+0x1f8
    0xa4847c38 : 0x8326bde2 : nt!IopXxxControlFile+0x6aa
    0xa4847c54 : 0x82364eb5 : ndiswan!DeactivateRoute+0x161
    0xa4847c60 : 0x832b274f : nt!NtDeviceIoControlFile
    0xa4847c78 : 0x831229b7 : nt!MiCheckUserVirtualAddress+0xb3
    0xa4847cb8 : 0xa4847c54 : 0x82364eb5 : ndiswan!DeactivateRoute+0x161
    0xa4847cc4 : 0x830fe6f0 : nt!_except_handler4
    0xa4847cd4 : 0x832b2779 : nt!NtDeviceIoControlFile+0x2a
    0xa4847cec : 0x83360018 : nt!PopSleepDeviceList+0x13b
    0xa4847d08 : 0x8307b8c6 : nt!KiSystemServicePostCall
    0xa4847d20 : 0x83360018 : nt!PopSleepDeviceList+0x13b
      My ComputerSystem Spec

 
Page 3 of 4 FirstFirst 1234 LastLast


Similar Threads
Tutorial Category
Solved Need Help with setting up Windbg
I seem to be suffering from a severe lack of knowledge and experience in this area. I am trying to read dump file created by Windows 10 but keep seeing errors about ntoskrnl.exe and symbol errors. I have gone through the tutorial by Golden. I...
BSOD Crashes and Debugging
Solved Hyper-V 101 - The Basics, a TenForums.com Online Meeting
OK geeks, let's have some fun with Hyper-V! An open Hyper-V Online Meeting and Q&A session this Saturday at 17:30 (5:30 PM) UTC. See the meeting starting time in your local timezone here: Event Time Announcer - Hyper-V 101 - The Basics @...
Virtualization
Solved Debugging Tools for Windows 10 Question
Shouldn't Windbg work with any dump file, even if its for 10? OR is this Windbg only going to work with 10. What am I doing wrong? (BTW, this is a dump from a Windows 7 machine I'm trying to open) I get this error:
BSOD Crashes and Debugging
Hardware & Drivers GPU - The Core Basics for Choosing One
Choosing a GPU - The Core Basics There are many factors to take into consideration these days when choosing a GPU. With the myriad of hardware combinations and multiple versions of numerous cards available itís become somewhat of a minefield ...
Tutorials
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 03:49.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums