*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 000065e8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 82d6c795, address which referenced memory
Debugging Details:
------------------
BUGCHECK_STR: 0xC5_2
CURRENT_IRQL: 2
FAULTING_IP:
nt!ExDeferredFreePool+135
82d6c795 8b10 mov edx,dword ptr [eax]
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
TRAP_FRAME: 8078614c -- (.trap 0xffffffff8078614c)
ErrCode = 00000000
eax=000065e8 ebx=000001ff ecx=000001ff edx=82d81a20 esi=85ca3b90 edi=82d818c0
eip=82d6c795 esp=807861c0 ebp=807861f8 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!ExDeferredFreePool+0x135:
82d6c795 8b10 mov edx,dword ptr [eax] ds:0023:000065e8=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82d6c795 to 82c9282b
STACK_TEXT:
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExDeferredFreePool+135
82d6c795 8b10 mov edx,dword ptr [eax]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!ExDeferredFreePool+135
FOLLOWUP_NAME: Pool_corruption
IMAGE_NAME: Pool_Corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: Pool_Corruption
FAILURE_BUCKET_ID: 0xC5_2_nt!ExDeferredFreePool+135
BUCKET_ID: 0xC5_2_nt!ExDeferredFreePool+135
Followup: Pool_corruption
---------