里面有windbg错误信息，请路过的指点一下。（已经解决）

MODULE_NAME: DirCtrl

FAULTING_MODULE: 804d8000 nt

DEBUG_FLR_IMAGE_TIMESTAMP:  47cfde60

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
 e13a7000

FAULTING_IP:
nt!IoCheckFunctionAccess+1b554
805fc47b 0fb70a          movzx   ecx,word ptr [edx]

MM_INTERNAL_CODE:  1

DEFAULT_BUCKET_ID:  WRONG_SYMBOLS

BUGCHECK_STR:  0x50

LAST_CONTROL_TRANSFER:  from 80533d2e to 804e4592

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
f9e82764 80533d2e 00000003 806ee298 c0384e9c nt!DbgBreakPointWithStatus+0x4
f9e82b44 8053431e 00000050 e13a7000 00000000 nt!KeDeregisterBugCheckReasonCallback+0x6c7
f9e82b64 80524f44 00000050 e13a7000 00000000 nt!KeBugCheckEx+0x1b
f9e82bb0 804e2718 00000000 e13a7000 00000000 nt!IoSetFileOrigin+0xc050
f9e82bd8 8054bf35 00000000 816dbe30 81515030 nt!Kei386EoiHelper+0x26bc
f9e82c44 f82504f3 f9e82c8c e13a6d00 000007ff nt!ExAllocatePoolWithTag+0x5f1
f9e82cac 804e47f7 816d6378 815ef008 816d6378 DirCtrl!SpySetInformation+0x133 [d:\filespy\filter\majorfunction.c @ 1030]
f9e82cf0 804ee3c3 816dbe30 f9e82d18 80557610 nt!IofCallDriver+0x32
f9e82d2c 804e5f1d 817b91e0 80562440 817bcb30 nt!KeQueryTickCount+0x3d9
f9e82d74 804e526b 817b91e0 00000000 817bcb30 nt!KeReadStateTimer+0x124
f9e82dac 8057ce15 817b91e0 00000000 00000000 nt!ExQueueWorkItem+0x104
f9e82ddc 804fb4da 804e5196 00000000 00000000 nt!PsCreateSystemThread+0x70
00000000 00000000 00000000 00000000 00000000 nt!KeInitializeTimer+0x107


STACK_COMMAND:  kb

FOLLOWUP_IP:
DirCtrl!SpySetInformation+133 [d:\filespy\filter\majorfunction.c @ 1030]
f82504f3 8945ec          mov     dword ptr [ebp-14h],eax

FAULTING_SOURCE_CODE:  
  1026:             fullPathName = (PCHAR)ExAllocatePoolWithTag(NonPagedPoolCacheAligned,2047,'iN8');
  1027:             RtlZeroMemory(fullPathName,2047);
  1028:             //RtlSecureZeroMemory(fullPathName,2047);
  1029:            
> 1030:             Status = RtlUnicodeToMultiByteSize(&w,FileName,2047);
  1031:             if(STATUS_SUCCESS != Status)
  1032:             {
  1033:                 KdPrint(("RtlUnicodeToMultiByteSize ¨º¡ì¡ã¨¹"));
  1034:                 break;
  1035:             }


SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  DirCtrl!SpySetInformation+133

FOLLOWUP_NAME:  MachineOwner

IMAGE_NAME:  DirCtrl.sys

BUCKET_ID:  WRONG_SYMBOLS

Followup: MachineOwner

我驱动文件名DirCtrl.sys

你生成的是minidump吧？另外pdb看起来不对，reseach kernel source?

FileName 的长度有2047吗?仔细看下函数说明吧.