*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880079c5b88
Arg3: fffff880079c53f0
Arg4: fffff88001302d07
Debugging Details:
------------------
EXCEPTION_RECORD: fffff880079c5b88 -- (.exr 0xfffff880079c5b88)
ExceptionAddress: fffff88001302d07 (Ntfs!NtfsFindPrefixHashEntry+0x00000000000001fe)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 000000000000c410
Attempt to read from address 000000000000c410
CONTEXT: fffff880079c53f0 -- (.cxr 0xfffff880079c53f0)
rax=fffff8a00af8d000 rbx=000000000000c400 rcx=00000000000000b8
rdx=0000000000000002 rsi=fffff8a000219140 rdi=fffffa80047b7358
rip=fffff88001302d07 rsp=fffff880079c5dc0 rbp=0000000000000000
r8=000000003366f85c r9=0000000000000000 r10=000000000000000e
r11=fffff880079c5e08 r12=fffff880079c60d0 r13=fffff880079c6370
r14=000000000000005c r15=000000000000385c
iopl=0 nv up ei pl nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202
Ntfs!NtfsFindPrefixHashEntry+0x1fe:
fffff880`01302d07 44394310 cmp dword ptr [rbx+10h],r8d ds:002b:00000000`0000c410=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: OUTLOOK.EXE
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 000000000000c410
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d060e0
000000000000c410
FOLLOWUP_IP:
Ntfs!NtfsFindPrefixHashEntry+1fe
fffff880`01302d07 44394310 cmp dword ptr [rbx+10h],r8d
FAULTING_IP:
Ntfs!NtfsFindPrefixHashEntry+1fe
fffff880`01302d07 44394310 cmp dword ptr [rbx+10h],r8d
BUGCHECK_STR: 0x24
LAST_CONTROL_TRANSFER: from fffff88001303dc2 to fffff88001302d07
STACK_TEXT:
fffff880`079c5dc0 fffff880`01303dc2 : fffffa80`042c7cd0 fffffa80`047b7358 fffff8a0`00219140 00000000`00000701 : Ntfs!NtfsFindPrefixHashEntry+0x1fe
fffff880`079c5ef0 fffff880`012fe36d : fffffa80`042c7cd0 fffffa80`0469b010 fffff880`079c60d0 fffff880`079c6118 : Ntfs!NtfsFindStartingNode+0x452
fffff880`079c5fc0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsCommonCreate+0x3dd
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: Ntfs!NtfsFindPrefixHashEntry+1fe
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4d79996d
STACK_COMMAND: .cxr 0xfffff880079c53f0 ; kb
FAILURE_BUCKET_ID: X64_0x24_Ntfs!NtfsFindPrefixHashEntry+1fe
BUCKET_ID: X64_0x24_Ntfs!NtfsFindPrefixHashEntry+1fe
Followup: MachineOwner
---------