*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88001091afc, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 000000003c000020, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
fltmgr!TreeInsert+40
fffff880`01091afc 498b4220 mov rax,qword ptr [r10+20h]
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 000000003c000020
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002eb60e0
000000003c000020
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1E
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
TRAP_FRAME: fffff880076d0810 -- (.trap 0xfffff880076d0810)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000003c000000 rbx=0000000000000000 rcx=fffffa8003c02de8
rdx=fffffa8005db5178 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001091afc rsp=fffff880076d09a8 rbp=fffff880076d0b00
r8=fffffa80060d7070 r9=fffffa8004775a30 r10=000000003c000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
fltmgr!TreeInsert+0x40:
fffff880`01091afc 498b4220 mov rax,qword ptr [r10+20h] ds:0a58:00000000`3c000020=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002cbfa17 to fffff80002c7ff00
STACK_TEXT:
fffff880`076cff88 fffff800`02cbfa17 : 00000000`0000001e ffffffff`c0000005 fffff880`01091afc 00000000`00000000 : nt!KeBugCheckEx
fffff880`076cff90 fffff800`02c7f542 : fffff880`076d0768 00000000`00000000 fffff880`076d0810 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x460da
fffff880`076d0630 fffff800`02c7e0ba : 00000000`00000000 00000000`00000000 fffffa80`04340b00 00000000`00000164 : nt!KiExceptionDispatch+0xc2
fffff880`076d0810 fffff880`01091afc : fffff880`0109ae7a fffffa80`0469d800 fffffa80`03c02d90 fffffa80`043857a0 : nt!KiPageFault+0x23a
fffff880`076d09a8 fffff880`0109ae7a : fffffa80`0469d800 fffffa80`03c02d90 fffffa80`043857a0 00000000`00000000 : fltmgr!TreeInsert+0x40
fffff880`076d09b0 fffff880`0109b3df : fffffa80`04775a30 fffff880`01968110 00000000`00000001 fffffa80`03c02d90 : fltmgr!SetContextIntoStreamList+0x10a
fffff880`076d0a40 fffff880`019299ec : fffffa80`043857a0 fffff880`076d0b00 00000000`00000000 fffffa80`05f715d0 : fltmgr!FltSetStreamHandleContext+0x2f
fffff880`076d0a90 fffffa80`043857a0 : fffff880`076d0b00 00000000`00000000 fffffa80`05f715d0 00000000`00000000 : klif+0x39ec
fffff880`076d0a98 fffff880`076d0b00 : 00000000`00000000 fffffa80`05f715d0 00000000`00000000 00000000`00000000 : 0xfffffa80`043857a0
fffff880`076d0aa0 00000000`00000000 : fffffa80`05f715d0 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`076d0b00
STACK_COMMAND: kb
FOLLOWUP_IP:
klif+39ec
fffff880`019299ec ?? ???
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: klif+39ec
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: klif
IMAGE_NAME: klif.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4afabce0
FAILURE_BUCKET_ID: X64_0x1E_klif+39ec
BUCKET_ID: X64_0x1E_klif+39ec
Followup: MachineOwner
---------
