KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff8c81f5084750, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffff8c81f50846a8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 8
Key : Analysis.Elapsed.Sec
Value: 29
Key : Analysis.Memory.CommitPeak.Mb
Value: 70
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: ffff8c81f5084750
BUGCHECK_P3: ffff8c81f50846a8
BUGCHECK_P4: 0
TRAP_FRAME: ffff8c81f5084750 -- (.trap 0xffff8c81f5084750)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff958fc336ed80 rbx=0000000000000000 rcx=0000000000000003
rdx=ffff958fc50f5630 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8020d704483 rsp=ffff8c81f50848e0 rbp=0000000000000004
r8=ffff958fc3291010 r9=0000000000000029 r10=0000000000000429
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!ExDeferredFreePool+0x2473:
fffff802`0d704483 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffff8c81f50846a8 -- (.exr 0xffff8c81f50846a8)
ExceptionAddress: fffff8020d704483 (nt!ExDeferredFreePool+0x0000000000002473)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: 4
CPU_MHZ: e10
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: 9
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-I8FA0KP
ANALYSIS_SESSION_TIME: 08-06-2019 18:49:27.0266
ANALYSIS_VERSION: 10.0.18914.1001 amd64fre
LAST_CONTROL_TRANSFER: from fffff8020d5d3669 to fffff8020d5c2ab0
STACK_TEXT:
ffff8c81`f5084428 fffff802`0d5d3669 : 00000000`00000139 00000000`00000003 ffff8c81`f5084750 ffff8c81`f50846a8 : nt!KeBugCheckEx
ffff8c81`f5084430 fffff802`0d5d3a10 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff8c81`f5084570 fffff802`0d5d2025 : ffff958f`c59a2078 00000000`0000e105 00000000`00000001 ffff958f`c59a2010 : nt!KiFastFailDispatch+0xd0
ffff8c81`f5084750 fffff802`0d704483 : ffff958f`bde46950 ffff958f`bde128c0 ffff958f`bde54940 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x2e5
ffff8c81`f50848e0 fffff802`0d702bf7 : 00000000`00000000 ffff958f`c37ff4d0 ffff958f`c187ccc0 00000000`00000300 : nt!ExDeferredFreePool+0x2473
ffff8c81`f5084970 fffff802`0d41a44b : ffff958f`be1e0440 ffff8c81`f5084a58 ffff8c81`00000af2 ffff8c81`45646641 : nt!ExFreePoolWithTag+0x807
ffff8c81`f5084a50 fffff802`5a3b381d : 00000000`00000000 ffff958f`c37ff4e0 00000000`0000000d fffff802`5a3d95e0 : nt!SmFreeWrapper+0xb
ffff8c81`f5084a80 fffff802`5a3ee60c : ffff958f`be1e0240 fffff802`5a3e8e10 fffff802`0d880240 ffff958f`c50f5828 : afd!PplGenericFreeFunction+0x4d
ffff8c81`f5084ab0 fffff802`5a3b3f92 : ffff958f`c37ff610 00000000`00000300 fffff802`5a3b3f10 ffff958f`bcabda70 : afd!AfdFreeEndpointTditl+0x7c
ffff8c81`f5084ae0 fffff802`0d45a68c : ffff958f`bdf0fb60 ffff958f`be1e1e40 ffff958f`c3678080 fffff802`5a3b3f10 : afd!AfdDoWork+0x82
ffff8c81`f5084b10 fffff802`0d4ca155 : 00000000`00000300 ffff958f`c2270480 fffff802`0d45a560 00700079`0000000c : nt!IopProcessWorkItem+0x12c
ffff8c81`f5084b80 fffff802`0d43ce27 : ffff958f`c2270480 00000000`00000080 ffff958f`bca89440 ffff958f`c2270480 : nt!ExpWorkerThread+0xf5
ffff8c81`f5084c10 fffff802`0d5c9f66 : fffff802`0c1a7180 ffff958f`c2270480 fffff802`0d43cde0 00550065`00730061 : nt!PspSystemThreadStartup+0x47
ffff8c81`f5084c60 00000000`00000000 : ffff8c81`f5085000 ffff8c81`f507f000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
THREAD_SHA1_HASH_MOD_FUNC: a2ce837436418753dcee8f1d02f541df3333d362
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 349986e61390abdcbb4725f709fc2afdc66bbfc6
THREAD_SHA1_HASH_MOD: b2ea54a5801d9b87d5e0a5eb326d482fbf23295f
FOLLOWUP_IP:
nt!ExDeferredFreePool+2473
fffff802`0d704483 cd29 int 29h
FAULT_INSTR_CODE: dba29cd
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!ExDeferredFreePool+2473
FOLLOWUP_NAME: Pool_corruption
IMAGE_NAME: Pool_Corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION: 10.0.17134.885
MODULE_NAME: Pool_Corruption
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 2473
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!ExDeferredFreePool
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!ExDeferredFreePool
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_nt!ExDeferredFreePool
TARGET_TIME: 2019-08-05T21:17:16.000Z
OSBUILD: 17134
OSSERVICEPACK: 885
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2019-07-04 07:24:12
BUILDDATESTAMP_STR: 180410-1804
BUILDLAB_STR: rs4_release
BUILDOSVER_STR: 10.0.17134.1.amd64fre.rs4_release.180410-1804
ANALYSIS_SESSION_ELAPSED_TIME: 7364
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_nt!exdeferredfreepool
FAILURE_ID_HASH: {7ef5a43a-ed8f-4a4a-f936-b37f9eaa1b29}
Followup: Pool_corruption
