Windows 10: Announcing Windows 10 Insider Fast+Skip Ahead Build 17040 for PC Insider

Page 27 of 30 FirstFirst ... 172526272829 ... LastLast

  1. Posts : 194
    Windows 10 Insider Build 17035 / Ubuntu 17.10
       21 Nov 2017 #260

    Can anybody read into this?

    Code:
    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 0000000000000004, Pool header has been corrupted
    Arg2: 0000000000000000, Pointer to pool header
    Arg3: 0000000000000000, First part of pool header contents
    Arg4: ffffd70c73298018, 0
    
    0: kd> k
     # Child-SP          RetAddr           Call Site
    00 ffffee81`acf95278 fffff803`54762d7e nt!KeBugCheckEx
    01 ffffee81`acf95280 fffff803`54b02213 nt!ExFreePoolWithTag+0x1d4e
    02 ffffee81`acf95360 fffff803`549ac8cd nt!MiBuildImageControlArea+0x15565b
    03 ffffee81`acf953f0 fffff803`549aad78 nt!MiCreateImageFileMap+0x3d5
    04 ffffee81`acf955c0 fffff803`549d782e nt!MiCreateNewSection+0x228
    05 ffffee81`acf95730 fffff803`549d6eed nt!MiCreateImageOrDataSection+0x2ce
    06 ffffee81`acf95820 fffff803`549d6dc4 nt!MiCreateSection+0xdd
    07 ffffee81`acf95980 fffff803`549d6be5 nt!MmCreateSection+0xe4
    08 ffffee81`acf95a00 fffff803`5463c253 nt!NtCreateSection+0x155
    09 ffffee81`acf95a90 00007ff9`a01fc704 nt!KiSystemServiceCopyEnd+0x13
    0a 00000069`f177e9d8 00000000`00000000 0x00007ff9`a01fc704
      My ComputerSystem Spec


  2. Posts : 32,320
    Triple boot - Win 10 Pro, Win 10 Pro Insider (2) - (and a sprinkling of VMs)
       21 Nov 2017 #261

    doriandiaconu said: View Post
    Can anybody read into this?

    Code:
    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 0000000000000004, Pool header has been corrupted
    Arg2: 0000000000000000, Pointer to pool header
    Arg3: 0000000000000000, First part of pool header contents
    Arg4: ffffd70c73298018, 0
    
    0: kd> k
     # Child-SP          RetAddr           Call Site
    00 ffffee81`acf95278 fffff803`54762d7e nt!KeBugCheckEx
    01 ffffee81`acf95280 fffff803`54b02213 nt!ExFreePoolWithTag+0x1d4e
    02 ffffee81`acf95360 fffff803`549ac8cd nt!MiBuildImageControlArea+0x15565b
    03 ffffee81`acf953f0 fffff803`549aad78 nt!MiCreateImageFileMap+0x3d5
    04 ffffee81`acf955c0 fffff803`549d782e nt!MiCreateNewSection+0x228
    05 ffffee81`acf95730 fffff803`549d6eed nt!MiCreateImageOrDataSection+0x2ce
    06 ffffee81`acf95820 fffff803`549d6dc4 nt!MiCreateSection+0xdd
    07 ffffee81`acf95980 fffff803`549d6be5 nt!MmCreateSection+0xe4
    08 ffffee81`acf95a00 fffff803`5463c253 nt!NtCreateSection+0x155
    09 ffffee81`acf95a90 00007ff9`a01fc704 nt!KiSystemServiceCopyEnd+0x13
    0a 00000069`f177e9d8 00000000`00000000 0x00007ff9`a01fc704
    Maybe one of the BSOD Gurus. Looks like a memory thing.
      My ComputersSystem Spec


  3. Posts : 32,320
    Triple boot - Win 10 Pro, Win 10 Pro Insider (2) - (and a sprinkling of VMs)
       21 Nov 2017 #262

    Not a direct "No", but sure implies no build today. Maybe Shawn has other sources.



    Click image for larger version. 

Name:	2017-11-21_16h05_53.png 
Views:	5 
Size:	36.1 KB 
ID:	164999
      My ComputersSystem Spec

  4.    21 Nov 2017 #263

    Anybody realize there's a secret Library called 'Slideshow' in: ?

    C:\Users\{your name}\AppData\Local\Microsoft\Windows\BackgroundSlideshow

    Click image for larger version. 

Name:	000359.png 
Views:	6 
Size:	56.3 KB 
ID:	165005
      My ComputerSystem Spec


  5. Posts : 1,364
    Triple Boot Windows 10 IP Build 17643/Windows Server IP Build 17623/Debian Unstable Ker
       21 Nov 2017 #264

    Let's hope we get a build tomorrow. 10.0.17046.1000 (rs_prerelease.171118-1403)
    Thanks for the info Dona. So what Edwin is experiencing is a blocker you must resolve?
      My ComputersSystem Spec


  6. Posts : 32,320
    Triple boot - Win 10 Pro, Win 10 Pro Insider (2) - (and a sprinkling of VMs)
       21 Nov 2017 #265

    Edwin said: View Post
    Anybody realize there's a secret Library called 'Slideshow' in: ?

    C:\Users\{your name}\AppData\Local\Microsoft\Windows\BackgroundSlideshow

    Click image for larger version. 

Name:	000359.png 
Views:	6 
Size:	56.3 KB 
ID:	165005
    Yep! It's a junction to the folder in my USER folder called Wallpaper! In earlier versions (pre-14393), you could go there and check off/on individual pics for background slideshow. They, of course, deprecated that function.

    Click image for larger version. 

Name:	2017-11-21_17h19_06.png 
Views:	4 
Size:	121.7 KB 
ID:	165010Click image for larger version. 

Name:	2017-11-21_17h17_26.png 
Views:	3 
Size:	23.0 KB 
ID:	165011
      My ComputersSystem Spec

  7.    21 Nov 2017 #266

    doriandiaconu said: View Post
    Can anybody read into this?
    Looks like the memory manager was initially mapping a file into memory (NT calls this a section object), it does this by allocating memory from pools of kernel memory. After that, it attempted to deallocate a block of pool memory with some specific tag (ExFreePoolWithTag). The evidence points towards a double free, in other words the memory manager is trying to free something that is no longer there, which leads to undefined behavior and often a crash.

    We see that the pool header and the first parts of the pool header contents are zeroed out. Combine this with the fact that the function that called ExBugCheck (which is the function that creates the blue screen among other things) was an attempt to free a pool allocation, so I think it was likely an attempt to free something that was already freed.

    For reference, a pool header is the metadata Windows kernel adds to requests when allocating/deallocating memory from a pool. You can view this data structure in windbg from a live kernel session:

    Code:
    dt nt!_pool_header
       +0x000 PreviousSize     : Pos 0, 8 Bits
       +0x000 PoolIndex        : Pos 8, 8 Bits
       +0x002 BlockSize        : Pos 0, 8 Bits
       +0x002 PoolType         : Pos 8, 8 Bits
       +0x000 Ulong1           : Uint4B
       +0x004 PoolTag          : Uint4B
       +0x008 ProcessBilled    : Ptr64 _EPROCESS
       +0x008 AllocatorBackTraceIndex : Uint2B
       +0x00a PoolTagHash      : Uint2B
      My ComputerSystem Spec


  8. Posts : 194
    Windows 10 Insider Build 17035 / Ubuntu 17.10
       22 Nov 2017 #267

    Spectrum said: View Post
    Looks like the memory manager was initially mapping a file into memory (NT calls this a section object), it does this by allocating memory from pools of kernel memory. After that, it attempted to deallocate a block of pool memory with some specific tag (ExFreePoolWithTag). The evidence points towards a double free, in other words the memory manager is trying to free something that is no longer there, which leads to undefined behavior and often a crash.

    We see that the pool header and the first parts of the pool header contents are zeroed out. Combine this with the fact that the function that called ExBugCheck (which is the function that creates the blue screen among other things) was an attempt to free a pool allocation, so I think it was likely an attempt to free something that was already freed.

    For reference, a pool header is the metadata Windows kernel adds to requests when allocating/deallocating memory from a pool. You can view this data structure in windbg from a live kernel session:

    Code:
    dt nt!_pool_header
       +0x000 PreviousSize     : Pos 0, 8 Bits
       +0x000 PoolIndex        : Pos 8, 8 Bits
       +0x002 BlockSize        : Pos 0, 8 Bits
       +0x002 PoolType         : Pos 8, 8 Bits
       +0x000 Ulong1           : Uint4B
       +0x004 PoolTag          : Uint4B
       +0x008 ProcessBilled    : Ptr64 _EPROCESS
       +0x008 AllocatorBackTraceIndex : Uint2B
       +0x00a PoolTagHash      : Uint2B
    Thank you for the comment. Any idea on how to fix this, though?
      My ComputerSystem Spec

  •    22 Nov 2017 #268

    If that crash is only occurring on a specific insider build, it is likely a fault of that build and not something that can be fixed by someone outside of Microsoft.

    Otherwise, I'd suggest you create a post in the BSOD subforum after running the log collection tool. We'd need to see if there is more information about the cause of the bugcheck before we can give much of an answer.
      My ComputerSystem Spec


  • Posts : 1,483
    Windows 10 and windows insider
       22 Nov 2017 #269

    If we actually get a new build today, pre-Thanksgiving activities preclude me from installing it until Friday. Hope all of my fellow Americans enjoy a happy Thanksgiving.
      My ComputerSystem Spec


  •  
    Page 27 of 30 FirstFirst ... 172526272829 ... LastLast

    Related Threads
    UPDATE 11/16: Announcing Windows 10 Insider Fast+Skip Ahead Build 17040 for PC Insider - Windows 10 Forums 928321775498170368 Source: Announcing Windows 10 Insider Preview Build 17035 for PC - Windows Experience Blog
    900402809685721088 900405174786695168 Source: Announcing Windows 10 Insider Preview Build 16273 for PC - Windows Experience Blog How to Start or Stop Receiving Insider Builds in Windows 10
    913162233252892672 Source: Announcing Windows 10 Insider Preview Build 17004 for PC (Skip Ahead) - Windows Experience Blog How to Start or Stop Receiving Insider Builds in Windows 10
    UPDATE: 9/27: Announcing Windows 10 Insider Preview Skip Ahead Build 17004 for PC Insider - Windows 10 Forums 908013519697616896 Source: Announcing Windows 10 Insider Preview Build 16362 for PC (Skip Ahead) - Windows Experience Blog
    903302171319427076 Source: Announcing Windows 10 Insider Preview Build 16353 for PC (Skip Ahead) - Windows Experience Blog How to Start or Stop Receiving Insider Builds in Windows 10 How to Choose Your Insider Ring Level on your...
    Our Sites
    Site Links
    About Us
    Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

    © Designer Media Ltd
    All times are GMT -5. The time now is 11:42.
    Find Us