Kod: Zaznacz cały
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000f, EXCEPTION_RESERVED_TRAP
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_f
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: csrss.exe
LAST_CONTROL_TRANSFER: from 806f12e7 to 804e2005
STACK_TEXT:
f6e75928 806f12e7 badb0d00 7a760003 f6e75984 nt!KiSystemFatalException+0xf
f6e75998 804f171c 00000100 806f12d0 862ae5a0 hal!KfLowerIrql+0x17
f6e759d4 804ecaf9 00000000 00000000 00000000 nt!KiDeliverApc+0x118
f6e759ec 804e3b8d 804e3a1d e1aa5240 00000000 nt!KiSwapThread+0x64
f6e75a24 bf80a4c6 00000003 8677d490 00000001 nt!KeWaitForMultipleObjects+0x284
f6e75a5c bf897d8c 00000002 8677d490 bf89acf1 win32k!xxxMsgWaitForMultipleObjects+0xb0
f6e75d30 bf87e5f4 bf9afec0 00000001 f6e75d54 win32k!xxxDesktopThread+0x339
f6e75d40 bf8010dd bf9afec0 f6e75d64 0077fff4 win32k!xxxCreateSystemThreads+0x6a
f6e75d54 804de7ec 00000000 00000022 00000000 win32k!NtUserCallOneParam+0x23
f6e75d54 7c90e514 00000000 00000022 00000000 nt!KiFastCallEntry+0xf8
0077ffe0 75b3ba1a 75b37cf3 00000000 00000022 ntdll!KiFastSystemCallRet
00000000 f000e819 f000e2c3 f000e819 f000e819 winsrv!NtUserCallOneParam+0xc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00000000 00000000 f000e2c3 f000e819 f000e819 0xf000e819
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!xxxMsgWaitForMultipleObjects+b0
bf80a4c6 8945fc mov dword ptr [ebp-4],eax
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: win32k!xxxMsgWaitForMultipleObjects+b0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4d6f9740
FAILURE_BUCKET_ID: 0x7f_f_win32k!xxxMsgWaitForMultipleObjects+b0
BUCKET_ID: 0x7f_f_win32k!xxxMsgWaitForMultipleObjects+b0
Followup: MachineOwner
---------