Kernel base = 0x82a50000 PsLoadedModuleList = 0x82b98810
Debug session time: Sat Oct 2 11:05:00.360 2010 (GMT-4)
System Uptime: 1 days 8:36:51.562
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
......
2: kd> !Analyze
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, 1097, 70f18, fd60c4c0}
GetPointerFromAddress: unable to read from 82bb8718
Unable to read MiSystemVaType memory at 82b98160
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00001097, (reserved)
Arg3: 00070f18, Memory contents of the pool block
Arg4: fd60c4c0, Address of the block of pool being deallocated
Debugging Details:
------------------
GetPointerFromAddress: unable to read from 82bb8718
Unable to read MiSystemVaType memory at 82b98160
POOL_ADDRESS: GetPointerFromAddress: unable to read from 82bb8718
Unable to read MiSystemVaType memory at 82b98160
fd60c4c0
BUGCHECK_STR: 0xc2_7
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: firefox.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 97b5d603 to 82b6f1b6
STACK_TEXT:
a3afb72c 97b5d603 fd60c4c0 00000000 a3afb75c nt!ExFreePoolWithTag+0x1b1
a3afb73c 97b5db10 fd60c4c0 00000004 97b5d6f3 win32k!FreeObject+0x2e
a3afb748 97b5d6f3 fd9019f4 97ba7675 fd901970 win32k!REGION::vDeleteREGION+0x14
a3afb750 97ba7675 fd901970 a3afbba0 97b0e259 win32k!RGNOBJ::vDeleteRGNOBJ+0xc
a3afb75c 97b0e259 fd60c4c0 feae4ca0 ffb8f748 win32k!vSpFreeClipResources+0x1c
a3afbba0 97b307c7 ffb8f748 00000001 feae4ca0 win32k!vSpUpdateSpriteVisRgn+0x283
a3afbbbc 97b2d8aa ffb8f748 00000004 feae4c00 win32k!GdiUpdateSpriteVisRgn+0x48
a3afbbe0 97b3cd52 ffb8f748 00000004 97cbe460 win32k!GreUpdateSpriteVisRgn+0x103
a3afbc08 97b3b9dc feae4ca0 0000000c 00000000 win32k!zzzLockDisplayAreaAndInvalidateDCCache+0x142
a3afbc88 97b0d933 97cbe460 db042ca3 00000000 win32k!zzzBltValidBits+0x1ce
a3afbce0 97ae2635 feae4ca0 00000000 00661522 win32k!xxxEndDeferWindowPosEx+0x14e
a3afbcfc 97ae2c41 feae8958 700429fd 00000001 win32k!xxxSetWindowRgn+0x68
a3afbd20 82a9344a 00661522 700429fd 00000001 win32k!NtUserSetWindowRgn+0x5c
a3afbd20 76f564f4 00661522 700429fd 00000001 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0019f754 00000000 00000000 00000000 00000000 0x76f564f4
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!FreeObject+2e
97b5d603 5d pop ebp
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: win32k!FreeObject+2e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c425a
FAILURE_BUCKET_ID: 0xc2_7_win32k!FreeObject+2e
BUCKET_ID: 0xc2_7_win32k!FreeObject+2e
Followup: MachineOwner
---------