Chris G
December 26th 03, 09:14 PM
Hi,
I have Windows XP Pro SP1 and keep getting NTOSKRNL crash dumps as per
below. As the http://oca.microsoft.com is now closed does anyone have any
ideas how I can find out what driver is causing my system to crash?
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at
an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804df06c, address which referenced memory
Debugging Details:
------------------
Database SolnDb not connected
WRITE_ADDRESS: 00000000
CURRENT_IRQL: ff
FAULTING_IP:
nt!CcSetActiveVacb+56
804df06c 893e mov [esi],edi
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xA
TRAP_FRAME: f3d18a38 -- (.trap fffffffff3d18a38)
ErrCode = 00000002
eax=814f3d18 ebx=0000ea60 ecx=814f3d7c edx=f3d18b24 esi=00000000
edi=00000000
eip=804df06c esp=f3d18aac ebp=f3d18ab8 iopl=0 nv up di pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010046
nt!CcSetActiveVacb+56:
804df06c 893e mov [esi],edi ds:0023:00000000=????????
Resetting default context
LAST_CONTROL_TRANSFER: from 804dba42 to 804df06c
STACK_TEXT:
f3d18ab8 804dba42 814f3d18 f3d18b24 0000ea60 nt!CcSetActiveVacb+0x56
f3d18b4c 804d9941 814f3d18 02190660 f3f08b78 nt!CcMapAndCopy+0x296
f3968bbc 00000000 00000000 00000000 00000000 nt!CcFastCopyWrite+0x205
FOLLOWUP_IP:
nt!CcSetActiveVacb+56
804df06c 893e mov [esi],edi
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: nt!CcSetActiveVacb+56
MODULE_NAME: nt
IMAGE_NAME: ntoskrnl.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 3df92c04
STACK_COMMAND: .trap fffffffff3d18a38 ; kb
BUCKET_ID: 0xA_W_nt!CcSetActiveVacb+56
Followup: MachineOwner
---------
I have Windows XP Pro SP1 and keep getting NTOSKRNL crash dumps as per
below. As the http://oca.microsoft.com is now closed does anyone have any
ideas how I can find out what driver is causing my system to crash?
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at
an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804df06c, address which referenced memory
Debugging Details:
------------------
Database SolnDb not connected
WRITE_ADDRESS: 00000000
CURRENT_IRQL: ff
FAULTING_IP:
nt!CcSetActiveVacb+56
804df06c 893e mov [esi],edi
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xA
TRAP_FRAME: f3d18a38 -- (.trap fffffffff3d18a38)
ErrCode = 00000002
eax=814f3d18 ebx=0000ea60 ecx=814f3d7c edx=f3d18b24 esi=00000000
edi=00000000
eip=804df06c esp=f3d18aac ebp=f3d18ab8 iopl=0 nv up di pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010046
nt!CcSetActiveVacb+56:
804df06c 893e mov [esi],edi ds:0023:00000000=????????
Resetting default context
LAST_CONTROL_TRANSFER: from 804dba42 to 804df06c
STACK_TEXT:
f3d18ab8 804dba42 814f3d18 f3d18b24 0000ea60 nt!CcSetActiveVacb+0x56
f3d18b4c 804d9941 814f3d18 02190660 f3f08b78 nt!CcMapAndCopy+0x296
f3968bbc 00000000 00000000 00000000 00000000 nt!CcFastCopyWrite+0x205
FOLLOWUP_IP:
nt!CcSetActiveVacb+56
804df06c 893e mov [esi],edi
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: nt!CcSetActiveVacb+56
MODULE_NAME: nt
IMAGE_NAME: ntoskrnl.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 3df92c04
STACK_COMMAND: .trap fffffffff3d18a38 ; kb
BUCKET_ID: 0xA_W_nt!CcSetActiveVacb+56
Followup: MachineOwner
---------