*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80050031, 406f8, fffff80002e9fd18}
Probably caused by : NETIO.SYS ( NETIO!CompareSecurityContexts+6a )
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000406f8
Arg4: fffff80002e9fd18
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80002ed6ca9 to fffff80002ed7740
STACK_TEXT:
fffff800`043f6d28 fffff800`02ed6ca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000406f8 : nt!KeBugCheckEx
fffff800`043f6d30 fffff800`02ed5172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff800`043f6e70 fffff800`02e9fd18 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`0e465fe0 fffff800`02e9fef7 : fffffa80`07d5b7c8 00000000`00000001 00000000`00000000 00000000`00000000 : nt!SepTokenFromAccessInformation+0x20
fffff880`0e466010 fffff880`01795c5a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000001 : nt!SeAccessCheckFromState+0x9f
fffff880`0e466700 fffff880`0179394f : 00000000`00000000 00000000`00000000 ffffffff`00000000 00000000`00000001 : NETIO!CompareSecurityContexts+0x6a
fffff880`0e466770 fffff880`017959b5 : fffff880`019b0bcc fffffa80`06cf53d0 0000ffff`00000000 00000000`03020100 : NETIO!MatchValues+0xef
fffff880`0e4667c0 fffff880`01795845 : fffffa80`0a45b810 fffffa80`0a513260 fffff880`0e4669e8 fffff880`0e467120 : NETIO!FilterMatch+0x95
fffff880`0e466810 fffff880`01796ccb : 00000000`00000000 00000000`00000000 fffff880`0e467120 fffff880`0e4669d0 : NETIO!IndexListClassify+0x69
fffff880`0e466890 fffff880`01840417 : fffff880`0e466d68 fffff880`0e466d68 fffff880`0e467aa0 fffffa80`07027030 : NETIO!KfdClassify+0xa4e
fffff880`0e466c00 fffff880`0183983e : fffff880`01948690 00000000`00000000 fffffa80`0a28c220 00000000`00000000 : tcpip!WfpAleClassify+0x57
fffff880`0e466c40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeSend+0x94e
STACK_COMMAND: kb
FOLLOWUP_IP:
NETIO!CompareSecurityContexts+6a
fffff880`01795c5a 448b442470 mov r8d,dword ptr [rsp+70h]
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: NETIO!CompareSecurityContexts+6a
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETIO
IMAGE_NAME: NETIO.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc18a
FAILURE_BUCKET_ID: X64_0x7f_8_NETIO!CompareSecurityContexts+6a
BUCKET_ID: X64_0x7f_8_NETIO!CompareSecurityContexts+6a
Followup: MachineOwner
---------
