*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8800121b039, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
fltmgr!GetContextFromStreamList+99
fffff880`0121b039 488b4820 mov rcx,qword ptr [rax+20h]
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f12100
ffffffffffffffff
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1E
PROCESS_NAME: ccsvchst.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002d2dd88 to fffff80002ce31c0
STACK_TEXT:
fffff880`07680498 fffff800`02d2dd88 : 00000000`0000001e ffffffff`c0000005 fffff880`0121b039 00000000`00000000 : nt!KeBugCheckEx
fffff880`076804a0 fffff800`02ce2842 : fffff880`07680c78 00000000`00000000 fffff880`07680d20 fffffa80`04112f10 : nt! ?? ::FNODOBFM::`string'+0x48d3d
fffff880`07680b40 fffff800`02ce114a : fffff6fc`c00f1a00 00000000`00000000 00000000`00000000 fffff8a0`0d1111b2 : nt!KiExceptionDispatch+0xc2
fffff880`07680d20 fffff880`0121b039 : fffffa80`08637be0 00000000`00000000 fffff880`07680f60 fffff880`0121aaae : nt!KiGeneralProtectionFault+0x10a
fffff880`07680eb0 fffff880`01225dbe : fffffa80`04112ec0 fffff880`07680fe8 00000000`00000001 fffffa80`08637be0 : fltmgr!GetContextFromStreamList+0x99
fffff880`07680f30 fffff880`0126b052 : fffffa80`04112ec0 fffffa80`044e5a60 fffff8a0`04963c70 00000000`00000000 : fltmgr!FltGetStreamContext+0x3e
fffff880`07680f60 fffff880`012631fd : fffffa80`044e5a60 fffff880`07680fd8 fffff880`076810d0 00000000`00000000 : fileinfo!FIStreamGet+0x52
fffff880`07680fd0 fffff880`01218067 : fffffa80`08637c80 00000000`00000000 fffffa80`08793b30 00000000`00000000 : fileinfo!FIPreReadWriteCallback+0x185
fffff880`07681080 fffff880`0121a82d : fffffa80`044e5a00 fffff880`07681603 fffff880`07681600 fffffa80`044e5a00 : fltmgr!FltpPerformPreCallbacks+0x2f7
fffff880`07681180 fffff880`01238630 : fffffa80`04c0f410 00000000`00000000 fffff880`07681330 00000000`00000018 : fltmgr!FltpPassThroughFastIo+0x4d
fffff880`076811c0 fffff880`0127c784 : 00000000`00000000 fffff880`0304dfb8 fffff880`0304dd98 fffffa80`044e5a60 : fltmgr!FltpFastIoRead+0x1d0
fffff880`07681260 00000000`00000000 : fffff880`0304dfb8 fffff880`0304dd98 fffffa80`044e5a60 fffff8a0`00000000 : AsDsm+0x6784
STACK_COMMAND: kb
FOLLOWUP_IP:
fileinfo!FIStreamGet+52
fffff880`0126b052 8bd8 mov ebx,eax
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: fileinfo!FIStreamGet+52
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: fileinfo
IMAGE_NAME: fileinfo.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc481
FAILURE_BUCKET_ID: X64_0x1E_fileinfo!FIStreamGet+52
BUCKET_ID: X64_0x1E_fileinfo!FIStreamGet+52
Followup: MachineOwner
---------