*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C4, {83, 99bc018, 2c, 99bc}
*** WARNING: Unable to verify timestamp for kerneld.x64
*** ERROR: Module load completed but symbols could not be loaded for kerneld.x64
Probably caused by : kerneld.x64 ( kerneld+218d )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000000083, MmMapIoSpace called to map, but the caller hasn't locked down the MDL pages.
Arg2: 00000000099bc018, Starting physical address to map.
Arg3: 000000000000002c, Number of bytes to map.
Arg4: 00000000000099bc, The first page frame number that isn't locked down.
Debugging Details:
------------------
BUGCHECK_STR: 0xc4_83
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME: aida64.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff8000356d3dc to fffff800030e6fc0
STACK_TEXT:
fffff880`04a2c3b8 fffff800`0356d3dc : 00000000`000000c4 00000000`00000083 00000000`099bc018 00000000`0000002c : nt!KeBugCheckEx
fffff880`04a2c3c0 fffff800`0356dc53 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`04a2c400 fffff800`0357e9a6 : 00000000`099bc018 00000000`00000000 00000000`00000002 00000000`00000000 : nt!MmCheckMapIoSpace+0xe3
fffff880`04a2c450 fffff880`0848418d : 00000000`099bc018 00000000`00000000 00000000`00000000 00000000`00000000 : nt!VerifierMmMapIoSpace+0x46
fffff880`04a2c490 00000000`099bc018 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kerneld+0x218d
fffff880`04a2c498 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x99bc018
STACK_COMMAND: kb
FOLLOWUP_IP:
kerneld+218d
fffff880`0848418d ?? ???
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: kerneld+218d
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: kerneld
IMAGE_NAME: kerneld.x64
DEBUG_FLR_IMAGE_TIMESTAMP: 508d112b
FAILURE_BUCKET_ID: X64_0xc4_83_VRF_kerneld+218d
BUCKET_ID: X64_0xc4_83_VRF_kerneld+218d
Followup: MachineOwner
---------
1: kd> lmvm kerneld
start end module name
fffff880`08482000 fffff880`0848d000 kerneld T (no symbols)
Loaded symbol image file: kerneld.x64
Image path: \??\C:\Program Files (x86)\AIDA64 Extreme\kerneld.x64
Image name: kerneld.x64
Timestamp: Sun Oct 28 16:34:11 2012 (508D112B)
CheckSum: 0000AF16
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4