KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff9800e93a73b0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffff9800e93a7308, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 10.0.17134.706 (WinBuild.160101.0800)
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: ffff9800e93a73b0
BUGCHECK_P3: ffff9800e93a7308
BUGCHECK_P4: 0
TRAP_FRAME: ffff9800e93a73b0 -- (.trap 0xffff9800e93a73b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffb207d69ca368 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffb207d69ca370 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8036827fc2c rsp=ffff9800e93a7540 rbp=ffffb207e19c7040
r8=0000000000000001 r9=0000000000000002 r10=0000000000000000
r11=ffffc5003ef23180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
nt!KiExitDispatcher+0x14a0ac:
fffff803`6827fc2c cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffff9800e93a7308 -- (.exr 0xffff9800e93a7308)
ExceptionAddress: fffff8036827fc2c (nt!KiExitDispatcher+0x000000000014a0ac)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: 8
CPU_MHZ: af8
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: 9
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-K01TCKK
ANALYSIS_SESSION_TIME: 04-20-2019 22:18:06.0047
ANALYSIS_VERSION: 10.0.18317.1001 amd64fre
LAST_CONTROL_TRANSFER: from fffff80368253c69 to fffff803682430a0
STACK_TEXT:
ffff9800`e93a7088 fffff803`68253c69 : 00000000`00000139 00000000`00000003 ffff9800`e93a73b0 ffff9800`e93a7308 : nt!KeBugCheckEx
ffff9800`e93a7090 fffff803`68254010 : f0ffffff`ffffffff fffff803`68465d50 ffff9a00`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff9800`e93a71d0 fffff803`6825261f : 00000000`00000000 ffffb207`e05bc500 00000000`00000000 fffff803`681303f8 : nt!KiFastFailDispatch+0xd0
ffff9800`e93a73b0 fffff803`6827fc2c : ffffc500`3f040000 00000000`00000000 fffff803`6847b9c8 fffff803`68132e00 : nt!KiRaiseSecurityCheckFailure+0x2df
ffff9800`e93a7540 fffff803`6818c9b5 : ffffb207`e31ce010 00000000`00000000 ffffb207`e31ce010 ffff8681`47b7b000 : nt!KiExitDispatcher+0x14a0ac
ffff9800`e93a75b0 fffff808`a6277fd7 : 00000000`00000000 ffffb207`e31ce010 ffffb207`e31ce068 00000000`656e6f4e : nt!KeInsertQueueApc+0xb5
ffff9800`e93a7620 00000000`00000000 : ffffb207`e31ce010 ffffb207`e31ce068 00000000`656e6f4e 00000000`00000000 : BEDaisy+0x2a7fd7
THREAD_SHA1_HASH_MOD_FUNC: b61d566806c3900e9d82f26f996154d545d8a932
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 96f745638ed2eb9d2a7202e77500ac6a010a610e
THREAD_SHA1_HASH_MOD: 0079172978a7673b45090780b1c9d2221d299a5f
FOLLOWUP_IP:
BEDaisy+2a7fd7
fffff808`a6277fd7 ?? ???
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: BEDaisy+2a7fd7
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: BEDaisy
IMAGE_NAME: BEDaisy.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5c936027
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 2a7fd7
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function
TARGET_TIME: 2019-04-20T13:23:31.000Z
OSBUILD: 17134
OSSERVICEPACK: 706
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2019-04-02 10:50:10
BUILDDATESTAMP_STR: 160101.0800
BUILDLAB_STR: WinBuild
BUILDOSVER_STR: 10.0.17134.706
ANALYSIS_SESSION_ELAPSED_TIME: 980
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_bedaisy!unknown_function
FAILURE_ID_HASH: {59d8eb10-b2e4-7df6-f6a5-49968226dbb8}
Followup: MachineOwner
---------