Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Mike\AppData\Local\Temp\Rar$DI14.888\041311-99669-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02c67000 PsLoadedModuleList = 0xfffff800`02eace90
Debug session time: Wed Apr 13 15:17:17.973 2011 (UTC - 4:00)
System Uptime: 0 days 0:02:34.533
Loading Kernel Symbols
...............................................................
................................................................
...................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C1, {fffff98026754ee0, fffff9802675448f, b14128, 32}
Probably caused by : fileinfo.sys ( fileinfo!FIStreamGetInfo+11f )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION (c1)
Special pool has detected memory corruption. Typically the current thread's
stack backtrace will reveal the guilty party.
Arguments:
Arg1: fffff98026754ee0, address trying to free
Arg2: fffff9802675448f, address where one bit is corrupted
Arg3: 0000000000b14128, (reserved)
Arg4: 0000000000000032, caller is freeing an address where nearby bytes within the same page have a single bit error
Debugging Details:
------------------
BUGCHECK_STR: 0xC1_32
SPECIAL_POOL_CORRUPTION_TYPE: 32
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002d6d1c3 to fffff80002ce7640
STACK_TEXT:
fffff880`054eee38 fffff800`02d6d1c3 : 00000000`000000c1 fffff980`26754ee0 fffff980`2675448f 00000000`00b14128 : nt!KeBugCheckEx
fffff880`054eee40 fffff800`02de5c73 : fffff880`054eee00 fffff6fc`c0243a40 fffff980`3b284fc0 fffff980`06422e58 : nt!MiCheckSpecialPoolSlop+0x83
fffff880`054eee80 fffff800`02e1193b : fffff800`02c67000 00000000`6e664d46 00000000`00002500 00000000`00000000 : nt!MmFreeSpecialPool+0x1d3
fffff880`054eefc0 fffff800`03188924 : fffff980`3b284fb0 00000000`00000000 fffff980`26754ee0 00000000`00000000 : nt!ExDeferredFreePool+0xf33
fffff880`054ef070 fffff880`010d10bb : fffff980`3bc56f10 fffff980`3bc56f10 00000000`00000000 00000000`00000000 : nt!VerifierExFreePool+0x14
fffff880`054ef0a0 fffff880`010ac4fb : fffffa80`04fe8000 00000000`00000000 fffff980`3b284f50 fffff880`054f0000 : fltmgr! ?? ::NNGAKEGL::`string'+0x20be
fffff880`054ef100 fffff880`010b7b44 : 00000000`00008000 fffff980`3b284f50 00000000`00000000 00000000`00000401 : fltmgr!FltpGetFileNameInformation+0x26b
fffff880`054ef180 fffff880`010e81f7 : fffff980`3bc56f10 00000000`00000401 fffff980`3880cce0 fffff880`054ef260 : fltmgr!FltGetFileNameInformation+0x184
fffff880`054ef210 fffff880`010fb36b : fffff980`480b6fb0 00000000`00000001 fffff880`054ef2e0 fffff980`3b58cfb0 : fltmgr!FltvGetFileNameInformation+0x47
fffff880`054ef240 fffff880`010f9bdb : fffff300`90e69e06 fffff800`00000001 00000000`00000000 00000000`00000e0a : fileinfo!FIStreamGetInfo+0x11f
fffff880`054ef2c0 fffff880`010e59cb : 00000000`00000000 fffff980`480b6fb0 00000000`00000008 fffff980`00000000 : fileinfo!FIPostCreateCallback+0x1c7
fffff880`054ef350 fffff880`010aa288 : fffff980`040ccbc0 fffff980`24754fb8 fffff300`90e69e06 00000000`00000000 : fltmgr!FltvPostOperation+0x9b
fffff880`054ef3d0 fffff880`010a8d1b : fffff980`24754fb8 fffff980`3880cd80 fffff980`08c00bb0 fffff980`08c00dd0 : fltmgr!FltpPerformPostCallbacks+0x368
fffff880`054ef4a0 fffff880`010c82b9 : fffff980`24754a20 fffff980`06422800 fffff980`24754a00 fffff980`063c4de0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x39b
fffff880`054ef530 fffff800`0318ac16 : fffff980`24754a20 00000000`00000002 00000000`00000040 00000000`00000000 : fltmgr!FltpCreate+0x2a9
fffff880`054ef5e0 fffff800`02fe5495 : 00000000`00000045 fffff980`3cfaccc8 fffff880`054ef9e0 fffff980`07f8ef40 : nt!IovCallDriver+0x566
fffff880`054ef640 fffff800`02fe1d38 : fffff980`057b6cd0 fffff800`00000000 fffff980`3cfacb10 fffff980`00000101 : nt!IopParseDevice+0x5a5
fffff880`054ef7d0 fffff800`02fe2f56 : 00000000`00000000 fffff980`3cfacb10 00000580`00000000 fffff980`00714f30 : nt!ObpLookupObjectName+0x588
fffff880`054ef8c0 fffff800`02fc2f66 : 00000000`00000000 00000000`01abf010 fffff680`0000d601 fffff800`02d04ac3 : nt!ObOpenObjectByName+0x306
fffff880`054ef990 fffff800`02ce68d3 : 00000000`01abecf1 fffff880`054efca0 fffff980`2da7eb60 00000000`000000fc : nt!NtQueryAttributesFile+0x145
fffff880`054efc20 00000000`775416ea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01abefd8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x775416ea
STACK_COMMAND: kb
FOLLOWUP_IP:
fileinfo!FIStreamGetInfo+11f
fffff880`010fb36b 85c0 test eax,eax
SYMBOL_STACK_INDEX: 9
SYMBOL_NAME: fileinfo!FIStreamGetInfo+11f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: fileinfo
IMAGE_NAME: fileinfo.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc481
FAILURE_BUCKET_ID: X64_0xC1_32_VRFK_fileinfo!FIStreamGetInfo+11f
BUCKET_ID: X64_0xC1_32_VRFK_fileinfo!FIStreamGetInfo+11f
Followup: MachineOwner
---------