求助windbg的出错信息

windbg报的错误不是我的代码 我把崩溃信息贴出来请大侠指导
Probably caused by : memory_corruption ( nt!MiBadRefCount+26 )

Followup: MachineOwner
---------

nt!RtlpBreakWithStatusInstruction:
83c5abc0 cc              int     3
kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000009a,
Arg2: 0003ff6c
Arg3: 00000006
Arg4: 00000003

Debugging Details:
------------------


BUGCHECK_STR:  0x4E_9a

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from 83cd36d5 to 83c5abc0

STACK_TEXT:  
8f1ef6dc 83cd36d5 00000003 d6c61ebf 00000065 nt!RtlpBreakWithStatusInstruction
8f1ef72c 83cd41d1 00000003 00000001 00000001 nt!KiBugCheckDebugBreak+0x1c
8f1efaf0 83cd3574 0000004e 0000009a 0003ff6c nt!KeBugCheck2+0x68b
8f1efb10 83ce45d9 0000004e 0000009a 0003ff6c nt!KeBugCheckEx+0x1e
8f1efb28 83d1871b 00000000 00001000 00000000 nt!MiBadRefCount+0x26
8f1efbec 83d19ed5 8576c000 11563f11 8576c000 nt!MiFreePoolPages+0xdb
8f1efc50 83ca0887 8576c000 00000000 00000002 nt!ExFreePoolWithTag+0x438
8f1efc64 83e57cbe 00000000 c000009a 83d2df80 nt!MmFreeAccessPfnBuffer+0x2f
8f1efcc0 83e1ce7a 00000000 8712a5c8 00000000 nt!PfpFlushBuffers+0x2ba
8f1efd50 83de9d16 83d2df80 d6c61403 00000000 nt!PfTLoggingWorker+0xaa
8f1efd90 83c8b159 83e1cdca 83d2df80 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP:
nt!MiBadRefCount+26
83ce45d9 cc              int     3

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!MiBadRefCount+26

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4a67fd75

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  0x4E_9a_nt!MiBadRefCount+26

BUCKET_ID:  0x4E_9a_nt!MiBadRefCount+26

Followup: MachineOwner
谢谢！

哪位老大给个解释啊 谢谢了 这是在win7下的测试结果

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000009a,
Arg2: 0003ff6c
Arg3: 00000006
Arg4: 00000003


你先检查下使用了MDL的地方，这个描述说的就是你传递了一个错误的MDL（内存描述表），或者是用MmUnlockPages释放同一个MDL地址2次。等等，你自己检查下，只是帮你翻译下。

谢谢您 我再去检查一下

我查了 可是没有mdl重复释放的问题啊 是成对的。。。。。