Kukhonjiswa imibuzo ethegiwe: Veza yonke imibuzo

the windows 10 crashed after watch video with firefox a long time(>20min)

As i watch this video this video for a long time, the windows 10 crashed and raise a blue screen with error KERNEL_SECURITY_CHECK_FAILURE。 after the system restart, i an… (funda kabanzi)

As i watch this video this video for a long time, the windows 10 crashed and raise a blue screen with error KERNEL_SECURITY_CHECK_FAILURE。

after the system restart, i analysis the dmp file and found something maybe help you debug the bug.

KERNEL_SECURITY_CHECK_FAILURE (139) A kernel component has corrupted a critical data structure. The corruption could potentially allow a malicious user to gain control of this machine. Arguments: Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove). Arg2: fffffd8e4b4c79f0, Address of the trap frame for the exception that caused the bugcheck Arg3: fffffd8e4b4c7948, Address of the exception record for the exception that caused the bugcheck Arg4: 0000000000000000, Reserved

Debugging Details:



KEY_VALUES_STRING: 1

   Key  : Analysis.CPU.Sec
   Value: 3
   Key  : Analysis.DebugAnalysisProvider.CPP
   Value: Create: 8007007e on xxxxxxx
   Key  : Analysis.DebugData
   Value: CreateObject
   Key  : Analysis.DebugModel
   Value: CreateObject
   Key  : Analysis.Elapsed.Sec
   Value: 82
   Key  : Analysis.Memory.CommitPeak.Mb
   Value: 89
   Key  : Analysis.System
   Value: CreateObject


BUGCHECK_CODE: 139

BUGCHECK_P1: 3

BUGCHECK_P2: fffffd8e4b4c79f0

BUGCHECK_P3: fffffd8e4b4c7948

BUGCHECK_P4: 0

TRAP_FRAME: fffffd8e4b4c79f0 -- (.trap 0xfffffd8e4b4c79f0) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=ffffdb01deb9f198 rbx=0000000000000000 rcx=0000000000000003 rdx=ffffdb02051e9158 rsi=0000000000000000 rdi=0000000000000000 rip=fffff806825de511 rsp=fffffd8e4b4c7b80 rbp=ffffb401e129e180

r8=0000000000000102  r9=0000000000000000 r10=fffff8067eb38800

r11=0000000000000007 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz ac pe cy nt!KiTryUnwaitThread+0x12b7c1: fffff806`825de511 cd29 int 29h Resetting default scope

EXCEPTION_RECORD: fffffd8e4b4c7948 -- (.exr 0xfffffd8e4b4c7948) ExceptionAddress: fffff806825de511 (nt!KiTryUnwaitThread+0x000000000012b7c1)

  ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
 ExceptionFlags: 00000001

NumberParameters: 1

  Parameter[0]: 0000000000000003

Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: firefox.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>

EXCEPTION_CODE_STR: c0000409

EXCEPTION_PARAMETER1: 0000000000000003

DPC_STACK_BASE: FFFFFD8E4B4C7FB0

EXCEPTION_STR: 0xc0000409

STACK_TEXT: fffffd8e`4b4c76c8 fffff806`825d41e9 : 00000000`00000139 00000000`00000003 fffffd8e`4b4c79f0 fffffd8e`4b4c7948 : nt!KeBugCheckEx fffffd8e`4b4c76d0 fffff806`825d4610 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69 fffffd8e`4b4c7810 fffff806`825d29a3 : 00000000`1a74bf66 fffff806`87889437 00000000`00000000 fffff806`8235dd04 : nt!KiFastFailDispatch+0xd0 fffffd8e`4b4c79f0 fffff806`825de511 : ffff2dcd`203293aa ffffdb01`e0258080 00000000`00000206 fffff806`824b1084 : nt!KiRaiseSecurityCheckFailure+0x323 fffffd8e`4b4c7b80 fffff806`82451666 : ffffdb01`deb9f1c8 00000000`00000000 ffffdb01`deb9f290 ffffdb01`deb9f1c0 : nt!KiTryUnwaitThread+0x12b7c1 fffffd8e`4b4c7be0 fffff806`82451242 : ffffdb01`deb9f1c0 ffffdb01`e02581f0 cd3f400f`00000003 00000409`00000002 : nt!KiTimerWaitTest+0x1b6 fffffd8e`4b4c7c90 fffff806`82450039 : 00000000`0000001e 00000000`00989680 00000000`01025c1d 00000000`00000035 : nt!KiProcessExpiredTimerList+0xd2 fffffd8e`4b4c7d80 fffff806`825c93a5 : 00000000`00000000 ffffb401`e129e180 ffffdb01`cd0c6e00 00000000`00000000 : nt!KiRetireDpcList+0x4e9 fffffd8e`4b4c7fb0 fffff806`825c9190 : ffffdb01`cd0c6e00 fffff806`8235f37b 0000024f`5f5168d0 00007fff`ccf97fc0 : nt!KxRetireDpcList+0x5 fffffd8e`520d79c0 fffff806`825c8a45 : 00000000`00000000 fffff806`825c4411 00000000`00000460 fffffd8e`520d7a80 : nt!KiDispatchInterruptContinue fffffd8e`520d79f0 fffff806`825c4411 : 00000000`00000460 fffffd8e`520d7a80 ffffdb01`cd0c6e00 fffffd8e`520d7a80 : nt!KiDpcInterruptBypass+0x25 fffffd8e`520d7a00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInterruptDispatchNoLockNoEtw+0xb1


SYMBOL_NAME: nt!KiTimerWaitTest+1b6

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

IMAGE_VERSION: 10.0.18362.900

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 1b6

FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiTimerWaitTest

OS_VERSION: 10.0.18362.1

BUILDLAB_STR: 19h1_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {efb56395-a173-53f8-073d-d3c8cfd50e2b}

Asked by chao 14 amahora adlule