BSOD BAD_POOL_HEADER

Hi,

I am writing a usb bus driver (wdm driver) , once I install my driver I
am getting blue screens at very random times, sometime in the middle of
transactions and sometime even after my driver got unloaded. But all
the BSODs shows the same bug check code (0x19). I have installed the
driver in Windows XP sp2.

Any suggestions will be appreciated.

Thanks.

===============================================================

BugCheck 19, {20, fb286cd0, fb286ce0, a0202e0}

Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )

Debugging Details:
------------------


BUGCHECK_STR: 0x19_20

POOL_ADDRESS: 81bf3100 Nonpaged pool

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 805360bf to 804e2a52

STACK_TEXT:
aa7bb79c 805360bf 00000003 aa7bbaf8 00000000
nt!RtlpBreakWithStatusInstruction
aa7bb7e8 80536b96 00000003 813c2214 81bf3100
nt!KiBugCheckDebugBreak+0x19
aa7bbbc8 805371aa 00000019 00000020 81bf3100 nt!KeBugCheck2+0x574
aa7bbbe8 80550fc5 00000019 00000020 81bf3100 nt!KeBugCheckEx+0x1b
aa7bbc38 8058c38c 81bf3108 00000000 00000000 nt!ExFreePoolWithTag+0x2c1
aa7bbc6c 8056c78f 813c2020 00000000 813c2008 nt!PspProcessDelete+0x7a
aa7bbc88 804e1957 813c2020 00000000 813c208c
nt!ObpRemoveObjectRoutine+0xdf
aa7bbca0 80573b43 00000000 8140fa68 aa7bbccc
nt!ObfDereferenceObject+0x4c
aa7bbcb0 8056c78f 813c2020 00000000 8140fa68 nt!PspThreadDelete+0xd2
aa7bbccc 804e1957 8140fa80 00000000 000000d4
nt!ObpRemoveObjectRoutine+0xdf
aa7bbce4 8056ea9e fd235ba0 e230a310 fd235580
nt!ObfDereferenceObject+0x4c
aa7bbcfc 8056e9bc e230a310 8140fa80 000000d4
nt!ObpCloseHandleTableEntry+0x155
aa7bbd44 8056ea06 000000d4 00000001 00000000 nt!ObpCloseHandle+0x87
aa7bbd58 804dd99f 000000d4 0012f80c 7c90eb94 nt!NtClose+0x1d
aa7bbd58 7c90eb94 000000d4 0012f80c 7c90eb94 nt!KiFastCallEntry+0xfc
0012f7fc 7c90d592 7c809bbb 000000d4 0012fb44 ntdll!KiFastSystemCallRet
0012f800 7c809bbb 000000d4 0012fb44 0041385d ntdll!ZwClose+0xc
0012f80c 0041385d 000000d4 004115a5 00143d78 kernel32!CloseHandle+0x51

Why not a KMDF driver, this close to Vista?

--
The personal opinion of
Gary G. Little

<vcsrave@yahoo.com> wrote in message
news:1166555574.069166.46700@f1g2000cwa.googlegroups.com...
> Hi,
>
> I am writing a usb bus driver (wdm driver) , once I install my driver I
> am getting blue screens at very random times, sometime in the middle of
> transactions and sometime even after my driver got unloaded. But all
> the BSODs shows the same bug check code (0x19). I have installed the
> driver in Windows XP sp2.
>
> Any suggestions will be appreciated.
>
> Thanks.
>
> ===============================================================
>
> BugCheck 19, {20, fb286cd0, fb286ce0, a0202e0}
>
> Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )
>
> Debugging Details:
> ------------------
>
>
> BUGCHECK_STR: 0x19_20
>
> POOL_ADDRESS: 81bf3100 Nonpaged pool
>
> DEFAULT_BUCKET_ID: DRIVER_FAULT
>
> LAST_CONTROL_TRANSFER: from 805360bf to 804e2a52
>
> STACK_TEXT:
> aa7bb79c 805360bf 00000003 aa7bbaf8 00000000
> nt!RtlpBreakWithStatusInstruction
> aa7bb7e8 80536b96 00000003 813c2214 81bf3100
> nt!KiBugCheckDebugBreak+0x19
> aa7bbbc8 805371aa 00000019 00000020 81bf3100 nt!KeBugCheck2+0x574
> aa7bbbe8 80550fc5 00000019 00000020 81bf3100 nt!KeBugCheckEx+0x1b
> aa7bbc38 8058c38c 81bf3108 00000000 00000000 nt!ExFreePoolWithTag+0x2c1
> aa7bbc6c 8056c78f 813c2020 00000000 813c2008 nt!PspProcessDelete+0x7a
> aa7bbc88 804e1957 813c2020 00000000 813c208c
> nt!ObpRemoveObjectRoutine+0xdf
> aa7bbca0 80573b43 00000000 8140fa68 aa7bbccc
> nt!ObfDereferenceObject+0x4c
> aa7bbcb0 8056c78f 813c2020 00000000 8140fa68 nt!PspThreadDelete+0xd2
> aa7bbccc 804e1957 8140fa80 00000000 000000d4
> nt!ObpRemoveObjectRoutine+0xdf
> aa7bbce4 8056ea9e fd235ba0 e230a310 fd235580
> nt!ObfDereferenceObject+0x4c
> aa7bbcfc 8056e9bc e230a310 8140fa80 000000d4
> nt!ObpCloseHandleTableEntry+0x155
> aa7bbd44 8056ea06 000000d4 00000001 00000000 nt!ObpCloseHandle+0x87
> aa7bbd58 804dd99f 000000d4 0012f80c 7c90eb94 nt!NtClose+0x1d
> aa7bbd58 7c90eb94 000000d4 0012f80c 7c90eb94 nt!KiFastCallEntry+0xfc
> 0012f7fc 7c90d592 7c809bbb 000000d4 0012fb44 ntdll!KiFastSystemCallRet
> 0012f800 7c809bbb 000000d4 0012fb44 0041385d ntdll!ZwClose+0xc
> 0012f80c 0041385d 000000d4 004115a5 00143d78 kernel32!CloseHandle+0x51
>

Does this bugcheck (0x19) happens to you always with the same stack?

<vcsrave@yahoo.com> wrote in message
news:1166555574.069166.46700@f1g2000cwa.googlegroups.com...
> Hi,
>
> I am writing a usb bus driver (wdm driver) , once I install my driver I
> am getting blue screens at very random times, sometime in the middle of
> transactions and sometime even after my driver got unloaded. But all
> the BSODs shows the same bug check code (0x19). I have installed the
> driver in Windows XP sp2.
>
> Any suggestions will be appreciated.
>
> Thanks.
>
> ===============================================================
>
> BugCheck 19, {20, fb286cd0, fb286ce0, a0202e0}
>
> Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )
>
> Debugging Details:
> ------------------
>
>
> BUGCHECK_STR: 0x19_20
>
> POOL_ADDRESS: 81bf3100 Nonpaged pool
>
> DEFAULT_BUCKET_ID: DRIVER_FAULT
>
> LAST_CONTROL_TRANSFER: from 805360bf to 804e2a52
>
> STACK_TEXT:
> aa7bb79c 805360bf 00000003 aa7bbaf8 00000000
> nt!RtlpBreakWithStatusInstruction
> aa7bb7e8 80536b96 00000003 813c2214 81bf3100
> nt!KiBugCheckDebugBreak+0x19
> aa7bbbc8 805371aa 00000019 00000020 81bf3100 nt!KeBugCheck2+0x574
> aa7bbbe8 80550fc5 00000019 00000020 81bf3100 nt!KeBugCheckEx+0x1b
> aa7bbc38 8058c38c 81bf3108 00000000 00000000 nt!ExFreePoolWithTag+0x2c1
> aa7bbc6c 8056c78f 813c2020 00000000 813c2008 nt!PspProcessDelete+0x7a
> aa7bbc88 804e1957 813c2020 00000000 813c208c
> nt!ObpRemoveObjectRoutine+0xdf
> aa7bbca0 80573b43 00000000 8140fa68 aa7bbccc
> nt!ObfDereferenceObject+0x4c
> aa7bbcb0 8056c78f 813c2020 00000000 8140fa68 nt!PspThreadDelete+0xd2
> aa7bbccc 804e1957 8140fa80 00000000 000000d4
> nt!ObpRemoveObjectRoutine+0xdf
> aa7bbce4 8056ea9e fd235ba0 e230a310 fd235580
> nt!ObfDereferenceObject+0x4c
> aa7bbcfc 8056e9bc e230a310 8140fa80 000000d4
> nt!ObpCloseHandleTableEntry+0x155
> aa7bbd44 8056ea06 000000d4 00000001 00000000 nt!ObpCloseHandle+0x87
> aa7bbd58 804dd99f 000000d4 0012f80c 7c90eb94 nt!NtClose+0x1d
> aa7bbd58 7c90eb94 000000d4 0012f80c 7c90eb94 nt!KiFastCallEntry+0xfc
> 0012f7fc 7c90d592 7c809bbb 000000d4 0012fb44 ntdll!KiFastSystemCallRet
> 0012f800 7c809bbb 000000d4 0012fb44 0041385d ntdll!ZwClose+0xc
> 0012f80c 0041385d 000000d4 004115a5 00143d78 kernel32!CloseHandle+0x51
>

I don't know whether KMDF is friendly for writting bus drivers


Gary G. Little wrote:
> Why not a KMDF driver, this close to Vista?
>
> --
> The personal opinion of
> Gary G. Little
>
> <vcsrave@yahoo.com> wrote in message
> news:1166555574.069166.46700@f1g2000cwa.googlegroups.com...
> > Hi,
> >
> > I am writing a usb bus driver (wdm driver) , once I install my driver I
> > am getting blue screens at very random times, sometime in the middle of
> > transactions and sometime even after my driver got unloaded. But all
> > the BSODs shows the same bug check code (0x19). I have installed the
> > driver in Windows XP sp2.
> >
> > Any suggestions will be appreciated.
> >
> > Thanks.
> >
> > ===============================================================
> >
> > BugCheck 19, {20, fb286cd0, fb286ce0, a0202e0}
> >
> > Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )
> >
> > Debugging Details:
> > ------------------
> >
> >
> > BUGCHECK_STR: 0x19_20
> >
> > POOL_ADDRESS: 81bf3100 Nonpaged pool
> >
> > DEFAULT_BUCKET_ID: DRIVER_FAULT
> >
> > LAST_CONTROL_TRANSFER: from 805360bf to 804e2a52
> >
> > STACK_TEXT:
> > aa7bb79c 805360bf 00000003 aa7bbaf8 00000000
> > nt!RtlpBreakWithStatusInstruction
> > aa7bb7e8 80536b96 00000003 813c2214 81bf3100
> > nt!KiBugCheckDebugBreak+0x19
> > aa7bbbc8 805371aa 00000019 00000020 81bf3100 nt!KeBugCheck2+0x574
> > aa7bbbe8 80550fc5 00000019 00000020 81bf3100 nt!KeBugCheckEx+0x1b
> > aa7bbc38 8058c38c 81bf3108 00000000 00000000 nt!ExFreePoolWithTag+0x2c1
> > aa7bbc6c 8056c78f 813c2020 00000000 813c2008 nt!PspProcessDelete+0x7a
> > aa7bbc88 804e1957 813c2020 00000000 813c208c
> > nt!ObpRemoveObjectRoutine+0xdf
> > aa7bbca0 80573b43 00000000 8140fa68 aa7bbccc
> > nt!ObfDereferenceObject+0x4c
> > aa7bbcb0 8056c78f 813c2020 00000000 8140fa68 nt!PspThreadDelete+0xd2
> > aa7bbccc 804e1957 8140fa80 00000000 000000d4
> > nt!ObpRemoveObjectRoutine+0xdf
> > aa7bbce4 8056ea9e fd235ba0 e230a310 fd235580
> > nt!ObfDereferenceObject+0x4c
> > aa7bbcfc 8056e9bc e230a310 8140fa80 000000d4
> > nt!ObpCloseHandleTableEntry+0x155
> > aa7bbd44 8056ea06 000000d4 00000001 00000000 nt!ObpCloseHandle+0x87
> > aa7bbd58 804dd99f 000000d4 0012f80c 7c90eb94 nt!NtClose+0x1d
> > aa7bbd58 7c90eb94 000000d4 0012f80c 7c90eb94 nt!KiFastCallEntry+0xfc
> > 0012f7fc 7c90d592 7c809bbb 000000d4 0012fb44 ntdll!KiFastSystemCallRet
> > 0012f800 7c809bbb 000000d4 0012fb44 0041385d ntdll!ZwClose+0xc
> > 0012f80c 0041385d 000000d4 004115a5 00143d78 kernel32!CloseHandle+0x51
> >

Yes, I always appears with the same stack


MajorTom wrote:
> Does this bugcheck (0x19) happens to you always with the same stack?
>
> <vcsrave@yahoo.com> wrote in message
> news:1166555574.069166.46700@f1g2000cwa.googlegroups.com...
> > Hi,
> >
> > I am writing a usb bus driver (wdm driver) , once I install my driver I
> > am getting blue screens at very random times, sometime in the middle of
> > transactions and sometime even after my driver got unloaded. But all
> > the BSODs shows the same bug check code (0x19). I have installed the
> > driver in Windows XP sp2.
> >
> > Any suggestions will be appreciated.
> >
> > Thanks.
> >
> > ===============================================================
> >
> > BugCheck 19, {20, fb286cd0, fb286ce0, a0202e0}
> >
> > Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )
> >
> > Debugging Details:
> > ------------------
> >
> >
> > BUGCHECK_STR: 0x19_20
> >
> > POOL_ADDRESS: 81bf3100 Nonpaged pool
> >
> > DEFAULT_BUCKET_ID: DRIVER_FAULT
> >
> > LAST_CONTROL_TRANSFER: from 805360bf to 804e2a52
> >
> > STACK_TEXT:
> > aa7bb79c 805360bf 00000003 aa7bbaf8 00000000
> > nt!RtlpBreakWithStatusInstruction
> > aa7bb7e8 80536b96 00000003 813c2214 81bf3100
> > nt!KiBugCheckDebugBreak+0x19
> > aa7bbbc8 805371aa 00000019 00000020 81bf3100 nt!KeBugCheck2+0x574
> > aa7bbbe8 80550fc5 00000019 00000020 81bf3100 nt!KeBugCheckEx+0x1b
> > aa7bbc38 8058c38c 81bf3108 00000000 00000000 nt!ExFreePoolWithTag+0x2c1
> > aa7bbc6c 8056c78f 813c2020 00000000 813c2008 nt!PspProcessDelete+0x7a
> > aa7bbc88 804e1957 813c2020 00000000 813c208c
> > nt!ObpRemoveObjectRoutine+0xdf
> > aa7bbca0 80573b43 00000000 8140fa68 aa7bbccc
> > nt!ObfDereferenceObject+0x4c
> > aa7bbcb0 8056c78f 813c2020 00000000 8140fa68 nt!PspThreadDelete+0xd2
> > aa7bbccc 804e1957 8140fa80 00000000 000000d4
> > nt!ObpRemoveObjectRoutine+0xdf
> > aa7bbce4 8056ea9e fd235ba0 e230a310 fd235580
> > nt!ObfDereferenceObject+0x4c
> > aa7bbcfc 8056e9bc e230a310 8140fa80 000000d4
> > nt!ObpCloseHandleTableEntry+0x155
> > aa7bbd44 8056ea06 000000d4 00000001 00000000 nt!ObpCloseHandle+0x87
> > aa7bbd58 804dd99f 000000d4 0012f80c 7c90eb94 nt!NtClose+0x1d
> > aa7bbd58 7c90eb94 000000d4 0012f80c 7c90eb94 nt!KiFastCallEntry+0xfc
> > 0012f7fc 7c90d592 7c809bbb 000000d4 0012fb44 ntdll!KiFastSystemCallRet
> > 0012f800 7c809bbb 000000d4 0012fb44 0041385d ntdll!ZwClose+0xc
> > 0012f80c 0041385d 000000d4 004115a5 00143d78 kernel32!CloseHandle+0x51
> >

absolutely it is. it is one of the things that it makes super easy to
implement.

d

--
Please do not send e-mail directly to this alias. this alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.


<vcsrave@yahoo.com> wrote in message
news:1166664517.003319.307900@t46g2000cwa.googlegroups.com...
>I don't know whether KMDF is friendly for writting bus drivers
>
>
> Gary G. Little wrote:
>> Why not a KMDF driver, this close to Vista?
>>
>> --
>> The personal opinion of
>> Gary G. Little
>>
>> <vcsrave@yahoo.com> wrote in message
>> news:1166555574.069166.46700@f1g2000cwa.googlegroups.com...
>> > Hi,
>> >
>> > I am writing a usb bus driver (wdm driver) , once I install my driver I
>> > am getting blue screens at very random times, sometime in the middle of
>> > transactions and sometime even after my driver got unloaded. But all
>> > the BSODs shows the same bug check code (0x19). I have installed the
>> > driver in Windows XP sp2.
>> >
>> > Any suggestions will be appreciated.
>> >
>> > Thanks.
>> >
>> > ===============================================================
>> >
>> > BugCheck 19, {20, fb286cd0, fb286ce0, a0202e0}
>> >
>> > Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )
>> >
>> > Debugging Details:
>> > ------------------
>> >
>> >
>> > BUGCHECK_STR: 0x19_20
>> >
>> > POOL_ADDRESS: 81bf3100 Nonpaged pool
>> >
>> > DEFAULT_BUCKET_ID: DRIVER_FAULT
>> >
>> > LAST_CONTROL_TRANSFER: from 805360bf to 804e2a52
>> >
>> > STACK_TEXT:
>> > aa7bb79c 805360bf 00000003 aa7bbaf8 00000000
>> > nt!RtlpBreakWithStatusInstruction
>> > aa7bb7e8 80536b96 00000003 813c2214 81bf3100
>> > nt!KiBugCheckDebugBreak+0x19
>> > aa7bbbc8 805371aa 00000019 00000020 81bf3100 nt!KeBugCheck2+0x574
>> > aa7bbbe8 80550fc5 00000019 00000020 81bf3100 nt!KeBugCheckEx+0x1b
>> > aa7bbc38 8058c38c 81bf3108 00000000 00000000 nt!ExFreePoolWithTag+0x2c1
>> > aa7bbc6c 8056c78f 813c2020 00000000 813c2008 nt!PspProcessDelete+0x7a
>> > aa7bbc88 804e1957 813c2020 00000000 813c208c
>> > nt!ObpRemoveObjectRoutine+0xdf
>> > aa7bbca0 80573b43 00000000 8140fa68 aa7bbccc
>> > nt!ObfDereferenceObject+0x4c
>> > aa7bbcb0 8056c78f 813c2020 00000000 8140fa68 nt!PspThreadDelete+0xd2
>> > aa7bbccc 804e1957 8140fa80 00000000 000000d4
>> > nt!ObpRemoveObjectRoutine+0xdf
>> > aa7bbce4 8056ea9e fd235ba0 e230a310 fd235580
>> > nt!ObfDereferenceObject+0x4c
>> > aa7bbcfc 8056e9bc e230a310 8140fa80 000000d4
>> > nt!ObpCloseHandleTableEntry+0x155
>> > aa7bbd44 8056ea06 000000d4 00000001 00000000 nt!ObpCloseHandle+0x87
>> > aa7bbd58 804dd99f 000000d4 0012f80c 7c90eb94 nt!NtClose+0x1d
>> > aa7bbd58 7c90eb94 000000d4 0012f80c 7c90eb94 nt!KiFastCallEntry+0xfc
>> > 0012f7fc 7c90d592 7c809bbb 000000d4 0012fb44 ntdll!KiFastSystemCallRet
>> > 0012f800 7c809bbb 000000d4 0012fb44 0041385d ntdll!ZwClose+0xc
>> > 0012f80c 0041385d 000000d4 004115a5 00143d78 kernel32!CloseHandle+0x51
>> >
>