*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
[COLOR=Red]BugCheck 19[/COLOR], {20, fffff8800c701c40, fffff8800c702bc0, 5f88361}
GetPointerFromAddress: unable to read from fffff8000330c0e0
GetUlongFromAddress: unable to read from fffff8000330c198
GetUlongFromAddress: unable to read from fffff8000327a1b0
Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+1a64 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
[COLOR=Red]BAD_POOL_HEADER (19)[/COLOR]
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and [COLOR=Red]then special pool applied to the suspect tags or the driver
verifier to a suspect driver.[/COLOR]
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffff8800c701c40, The pool entry we were looking for within the page.
Arg3: fffff8800c702bc0, The next pool entry.
Arg4: 0000000005f88361, (reserved)
Debugging Details:
------------------
GetUlongFromAddress: unable to read from fffff8000327a1b0
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: fffff8800c701c40 Nonpaged pool
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: sidebar.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff800032076d3 to fffff800030d55c0
STACK_TEXT:
fffff880`063ad8c8 fffff800`032076d3 : 00000000`00000019 00000000`00000020 fffff880`0c701c40 fffff880`0c702bc0 : nt!KeBugCheckEx
fffff880`063ad8d0 fffff800`03486536 : fffff8a0`00b545f0 fffff880`063adca0 fffff880`69634d43 00000000`000004ef : nt!ExAllocatePoolWithTag+0x1a64
fffff880`063ad980 fffff800`033adf4e : 00000000`00000016 fffff880`063adb48 fffffa80`09d32300 fffff800`00000016 : nt!CmpCallCallBacks+0x4f6
fffff880`063ada50 fffff800`030d4813 : fffffa80`0b603060 fffff800`00000007 00000000`028466d8 00000000`02e554f0 : nt!NtQueryKey+0x44c
fffff880`063adbb0 00000000`772cf81a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`028466b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x772cf81a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExAllocatePoolWithTag+1a64
fffff800`032076d3 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!ExAllocatePoolWithTag+1a64
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 503f857d
FAILURE_BUCKET_ID: X64_0x19_20_nt!ExAllocatePoolWithTag+1a64
BUCKET_ID: X64_0x19_20_nt!ExAllocatePoolWithTag+1a64
Followup: MachineOwner
---------