New
#31
Code:BugCheck C4, {91, 2, fffffa8013704060, 0} *** WARNING: Unable to verify timestamp for kltdi.sys *** ERROR: Module load completed but symbols could not be loaded for kltdi.sys Probably caused by : tdx.sys ( tdx!TdxSendConnection+252 )Your Kaspersky Network filtering component driver seems to be causing problems, please remove the associated program using the Kaspersky Removal Tool.Code:2: kd> lmvm kltdi start end module name fffff880`00c00000 fffff880`00c10000 kltdi T (no symbols) Loaded symbol image file: kltdi.sys Image path: \SystemRoot\system32\DRIVERS\kltdi.sys Image name: kltdi.sys Timestamp: Fri Sep 14 10:09:06 2012 (5052F432) CheckSum: 00014FCD ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Specifically, the bugcheck indicates that the driver has attempted to expand the stack in a unsupported manner, even though KeExpandKernelStackAndCalloutEx was called, maybe the Wait parameter wasn't set to false, and the function was then called. This routine may only be called at IRQL Level 2, if the Wait parameter is false.
Code:2: kd> !irql Debugger saved IRQL for processor 0x2 -- 2 (DISPATCH_LEVEL)
Code:2: kd> k Child-SP RetAddr Call Site fffff8a0`0e30a758 fffff800`032d6193 nt!KeBugCheckEx fffff8a0`0e30a760 fffff880`0223e90f nt! ?? ::FNODOBFM::`string'+0x1e163 fffff8a0`0e30a840 fffff880`0225d4aa tcpip!IppLoopbackEnqueue+0x22f fffff8a0`0e30a8f0 fffff880`0225ebd5 tcpip!IppDispatchSendPacketHelper+0x38a fffff8a0`0e30a9b0 fffff880`0225de5e tcpip!IppPacketizeDatagrams+0x2d5 fffff8a0`0e30aad0 fffff880`0226077e tcpip!IppSendDatagramsCommon+0x87e fffff8a0`0e30ac70 fffff880`02268a8d tcpip!IpNlpSendDatagrams+0x3e fffff8a0`0e30acb0 fffff880`02269430 tcpip!TcpTcbSend+0x6ad fffff8a0`0e30af30 fffff880`02268188 tcpip!TcpEnqueueTcbSendOlmNotifySendComplete+0xa0 fffff8a0`0e30af60 fffff880`0226834b tcpip!TcpEnqueueTcbSend+0x258 fffff8a0`0e30b010 fffff800`03283878 tcpip!TcpTlConnectionSendCalloutRoutine+0x1b fffff8a0`0e30b040 fffff880`0226920a nt!KeExpandKernelStackAndCalloutEx+0xd8 fffff8a0`0e30b120 fffff880`00dcee72 tcpip!TcpTlConnectionSend+0x7a fffff8a0`0e30b190 fffff880`00dcdbf9 tdx!TdxSendConnection+0x252 fffff8a0`0e30b280 fffff880`00c045ac tdx!TdxTdiDispatchInternalDeviceControl+0x389 fffff8a0`0e30b300 fffffa80`136381a0 kltdi+0x45ac fffff8a0`0e30b308 00000000`00000000 0xfffffa80`136381a0