ben1116
驱动牛犊
驱动牛犊
  • 注册日期2004-11-21
  • 最后登录2010-11-03
  • 粉丝0
  • 关注0
  • 积分5分
  • 威望1点
  • 贡献值0点
  • 好评度0点
  • 原创分0分
  • 专家分0分
阅读:1397回复:3

系统蓝屏,哪位大虾帮我看看

楼主#
更多 发布于:2005-07-19 17:42
  *******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {e12e2000, 0, 804dbb9e, 1}

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntoskrnl.exe -
Probably caused by : ntoskrnl.exe ( nt!RtlCompareMemory+14 )

Followup: MachineOwner
---------

nt!DbgBreakPointWithStatus+0x4:
804e4592 cc               int     3
kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: e12e2000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 804dbb9e, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 00000001, (reserved)

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.


READ_ADDRESS: unable to get nt!MmPoolCodeEnd
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSpecialPoolStart
unable to get nt!MmPagedPoolStart
unable to get nt!MiSessionPoolStart
unable to get nt!MiSessionPoolEnd
unable to get nt!MmNonPagedPoolExpansionStart
unable to get nt!MmPoolCodeStart
e12e2000

FAULTING_IP:
nt!RtlCompareMemory+14
804dbb9e f3a7             rep     cmpsd

MM_INTERNAL_CODE:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x50

LAST_CONTROL_TRANSFER:  from 80533d2e to 804e4592

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
f80f3508 80533d2e 00000003 806ee298 c0384b88 nt!DbgBreakPointWithStatus+0x4
f80f38e8 8053431e 00000050 e12e2000 00000000 nt!KeDeregisterBugCheckReasonCallback+0x6c7
f80f3908 80524f44 00000050 e12e2000 00000000 nt!KeBugCheckEx+0x1b
f80f3954 804e2718 00000000 e12e2000 00000000 nt!IoSetFileOrigin+0xc050
f80f396c 804dbb9e badb0d00 e12e1ffe 00000000 nt!Kei386EoiHelper+0x26bc
f80f3b1c 804df7ec 800009c4 00000000 00000000 nt!RtlCompareMemory+0x14
f80f3b50 804de221 badb0d00 f80f3bc8 f80f3bcc nt!ZwYieldExecution+0xb78
f80f3c34 80596200 00000000 00000029 00000000 nt!ZwQueryDirectoryFile+0x11
f80f3c5c 80595635 0000000b d6fb289e 00000002 nt!MmPrefetchPages+0xcd1
f80f3c88 805954bf e12d8000 00080000 81b1cc00 nt!MmPrefetchPages+0x106
f80f3d04 805821af 81b1cc00 e1c210b8 00000000 nt!ExSystemExceptionFilter+0xf9c
f80f3d50 804fb4da 00000000 7c810867 00000001 nt!PsSetProcessWindowStation+0x2b1
00000000 00000000 00000000 00000000 00000000 nt!KeInitializeTimer+0x107


FOLLOWUP_IP:
nt!RtlCompareMemory+14
804dbb9e f3a7             rep     cmpsd

FOLLOWUP_NAME:  MachineOwner

SYMBOL_NAME:  nt!RtlCompareMemory+14

IMAGE_NAME:  Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP:  0

STACK_COMMAND:  kb

BUCKET_ID:  WRONG_SYMBOLS

MODULE_NAME:  Unknown_Module

Followup: MachineOwner
---------
zhaock
驱动太牛
驱动太牛
  • 注册日期2002-01-26
  • 最后登录2018-06-02
  • 粉丝3
  • 关注2
  • 积分73328分
  • 威望362317点
  • 贡献值1点
  • 好评度226点
  • 原创分0分
  • 专家分0分
  • 社区居民
沙发#
发布于:2005-07-19 18:01
符号表不对,看者很困难,先加载上正确的ntoskrnl的符号表再看看.  最常见的原因就是非法的指针
bmyyyud
驱动老牛
驱动老牛
  • 注册日期2002-02-22
  • 最后登录2010-01-21
  • 粉丝0
  • 关注0
  • 积分1000分
  • 威望130点
  • 贡献值0点
  • 好评度106点
  • 原创分0分
  • 专家分0分
板凳#
发布于:2005-07-20 08:57
你用pte看一下那个地址
滚滚长江东逝水 浪花淘尽英雄 是非成败转头空 青山依旧在 几度夕阳红 白发渔樵江渚上 惯看秋月春风 一壶浊酒喜相逢 古今多少事 尽付笑谈中
xiaorain
驱动牛犊
驱动牛犊
  • 注册日期2003-04-21
  • 最后登录2005-11-05
  • 粉丝0
  • 关注0
  • 积分7分
  • 威望1点
  • 贡献值0点
  • 好评度0点
  • 原创分0分
  • 专家分0分
地板#
发布于:2005-07-24 12:33
弱弱的问,什么是pte??
游客

返回顶部