连续运行6天后出现蓝屏

用户报告连续运行6天后出现蓝屏，dump记录如下：
dump记录我看不懂，是不是我调用NDISMSendComplete出现非法地址访问了？

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000008, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: f724a055, address which referenced memory

Debugging Details:
------------------







READ_ADDRESS:  00000008

CURRENT_IRQL:  2

FAULTING_IP:
NDIS!ndisMSendCompleteX+55
f724a055 8b7808          mov     edi,dword ptr [eax+8]

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  Idle

TRAP_FRAME:  f78b2bb8 -- (.trap 0xfffffffff78b2bb8)
ErrCode = 00000000
eax=00000000 ebx=8a533ad0 ecx=00000002 edx=fffffffe esi=88b86c20 edi=8a71eb98
eip=f724a055 esp=f78b2c2c ebp=f78b2c40 iopl=0         nv up ei ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010282
NDIS!ndisMSendCompleteX+0x55:
f724a055 8b7808          mov     edi,dword ptr [eax+8] ds:0023:00000008=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 80505133 to 80536da0

STACK_TEXT:  
f78b2b9c 80505133 0000000a 00000008 00000002 nt!KeBugCheckEx+0x19
f78b2b9c f724a055 0000000a 00000008 00000002 nt!KiTrap0E+0x224
f78b2c40 ba58f7d2 8a533ad0 88b86c20 00000000 NDIS!ndisMSendCompleteX+0x55
WARNING: Stack unwind information not available. Following frames may be wrong.
f78b2c5c ba58e2c6 8a16f1c0 8a71eb98 00000000 capture+0x27d2
f78b2c74 f724a06e 8a16f1c0 8a71eb98 00000000 capture+0x12c6
f78b2c98 ba32a202 8a53aa38 8a71eb98 00000000 NDIS!ndisMSendCompleteX+0x6e
f78b2cc0 ba329483 00000005 f78b2ce3 8a53aa38 e1000325+0x2202
f78b2ce4 f724f025 00509218 f7737980 8a509670 e1000325+0x1483
f78b2cf8 8050cae8 8a509670 8a50965c 00000000 NDIS!ndisMDpcX+0x1d
f78b2d50 8050647a 00000000 0000000e 00000000 nt!KiRetireDpcList+0xc8
f78b2d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x37



STACK_COMMAND:  kb

FOLLOWUP_IP:
capture+27d2
ba58f7d2 eb14            jmp     capture+0x27e8 (ba58f7e8)

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  capture+27d2

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: capture

IMAGE_NAME:  capture.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  46e10ad0

FAILURE_BUCKET_ID:  0xD1_capture+27d2

BUCKET_ID:  0xD1_capture+27d2

Followup: MachineOwner
---------

老问题了.自定义包不要通知上层处理
最好加上LOOPBACK标志