MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041201, The subtype of the bugcheck.
Arg2: ffffac3ffd70c000
Arg3: 87840fdb85e85ddd
Arg4: ffffac8d08c47220
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for klif.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: Gigabyte Technology Co., Ltd.
SYSTEM_PRODUCT_NAME: B450M S2H
SYSTEM_SKU: Default string
SYSTEM_VERSION: Default string
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: F50
BIOS_DATE: 11/27/2019
BASEBOARD_MANUFACTURER: Gigabyte Technology Co., Ltd.
BASEBOARD_PRODUCT: B450M S2H
BASEBOARD_VERSION: x.x
DUMP_TYPE: 2
BUGCHECK_P1: 41201
BUGCHECK_P2: ffffac3ffd70c000
BUGCHECK_P3: 87840fdb85e85ddd
BUGCHECK_P4: ffffac8d08c47220
BUGCHECK_STR: 0x1a_41201
CPU_COUNT: c
CPU_MHZ: d42
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: steamwebhelper.exe
CURRENT_IRQL: 2
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-16-2020 13:44:47.0255
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff8016da0ab7c to fffff8016d9c14e0
STACK_TEXT:
fffffc86`deffda18 fffff801`6da0ab7c : 00000000`0000001a 00000000`00041201 ffffac3f`fd70c000 87840fdb`85e85ddd : nt!KeBugCheckEx
fffffc86`deffda20 fffff801`6d86ef41 : ffffac3f`fd70c008 87840fdb`85e85ddd 00000000`00000002 ffffac56`1ffeb860 : nt!MiGetPageProtection+0x19c6fc
fffffc86`deffda90 fffff801`6d900e84 : ffffac8d`08df2580 00007ffa`e1800000 00007ffa`e190e000 00000000`00001400 : nt!MiQueryAddressState+0x5c1
fffffc86`deffdcb0 fffff801`6de59787 : fffffc86`00000000 00007ffa`00000001 fffffc86`00000001 fffffc86`00000001 : nt!MiQueryAddressSpan+0x1d4
fffffc86`deffdd70 fffff801`6de59225 : 00000000`00000000 fffff801`6de1dfc9 fffffc86`deffdfa0 00000000`00000200 : nt!MmQueryVirtualMemory+0x557
fffffc86`deffdf10 fffff801`6d9d2d18 : 00000000`00000000 00000000`00000000 fffffc86`deffe220 ffffc65f`8d24180f : nt!NtQueryVirtualMemory+0x25
fffffc86`deffdf60 fffff801`6d9c5320 : fffff801`795e2944 00000000`00000400 fffff801`795b86cb 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
fffffc86`deffe168 fffff801`795e2944 : 00000000`00000400 fffff801`795b86cb 00000000`00000000 fffffc86`deffe220 : nt!KiServiceLinkage
fffffc86`deffe170 00000000`00000400 : fffff801`795b86cb 00000000`00000000 fffffc86`deffe220 00000000`00000030 : klif+0xc2944
fffffc86`deffe178 fffff801`795b86cb : 00000000`00000000 fffffc86`deffe220 00000000`00000030 00000000`00000000 : 0x400
fffffc86`deffe180 00000000`00000000 : fffffc86`deffe220 00000000`00000030 00000000`00000000 ffffac8c`f88adbc0 : klif+0x986cb
THREAD_SHA1_HASH_MOD_FUNC: 7f6ee8ed32dc35931d9eab3e42be5adb66720e58
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 73c02d0175fd48edcb1c1c9247f86071e44179e2
THREAD_SHA1_HASH_MOD: e7fe91cdbb3cf256c302d555184eb86bc1549ed6
FOLLOWUP_IP:
klif+c2944
fffff801`795e2944 85c0 test eax,eax
FAULT_INSTR_CODE: 3c78c085
SYMBOL_STACK_INDEX: 8
SYMBOL_NAME: klif+c2944
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: klif
IMAGE_NAME: klif.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5ddf7b20
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: c2944
FAILURE_BUCKET_ID: 0x1a_41201_klif!unknown_function
BUCKET_ID: 0x1a_41201_klif!unknown_function
PRIMARY_PROBLEM_CLASS: 0x1a_41201_klif!unknown_function
TARGET_TIME: 2020-02-14T14:28:32.000Z
OSBUILD: 18362
OSSERVICEPACK: 628
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1991-11-30 08:21:39
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 789c
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x1a_41201_klif!unknown_function
FAILURE_ID_HASH: {cf4b1aa6-9604-defe-e576-257df8898ec3}
Followup: MachineOwner
---------
CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:
1) A driver has inadvertently or deliberately modified critical kernel code
or data. See http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx
2) A developer attempted to set a normal kernel breakpoint using a kernel
debugger that was not attached when the system was booted. Normal breakpoints,
"bp", can only be set if the debugger is attached at boot time. Hardware
breakpoints, "ba", can be set at any time.
3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
Arguments:
Arg1: a39ff6db5cd2baf0, Reserved
Arg2: 0000000000000000, Reserved
Arg3: 7a8ea0b3dc2201ba, Failure type dependent information
Arg4: 0000000000000101, Type of corrupted region, can be
0 : A generic data region
1 : Modification of a function or .pdata
2 : A processor IDT
3 : A processor GDT
4 : Type 1 process list corruption
5 : Type 2 process list corruption
6 : Debug routine modification
7 : Critical MSR modification
8 : Object type
9 : A processor IVT
a : Modification of a system service function
b : A generic session data region
c : Modification of a session function or .pdata
d : Modification of an import table
e : Modification of a session import table
f : Ps Win32 callout modification
10 : Debug switch routine modification
11 : IRP allocator modification
12 : Driver call dispatcher modification
13 : IRP completion dispatcher modification
14 : IRP deallocator modification
15 : A processor control register
16 : Critical floating point control register modification
17 : Local APIC modification
18 : Kernel notification callout modification
19 : Loaded module list modification
1a : Type 3 process list corruption
1b : Type 4 process list corruption
1c : Driver object corruption
1d : Executive callback object modification
1e : Modification of module padding
1f : Modification of a protected process
20 : A generic data region
21 : A page hash mismatch
22 : A session page hash mismatch
23 : Load config directory modification
24 : Inverted function table modification
25 : Session configuration modification
26 : An extended processor control register
27 : Type 1 pool corruption
28 : Type 2 pool corruption
29 : Type 3 pool corruption
2a : Type 4 pool corruption
2b : Modification of a function or .pdata
2c : Image integrity corruption
2d : Processor misconfiguration
2e : Type 5 process list corruption
2f : Process shadow corruption
30 : Retpoline code page corruption
101 : General pool corruption
102 : Modification of win32k.sys
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: Gigabyte Technology Co., Ltd.
SYSTEM_PRODUCT_NAME: B450M S2H
SYSTEM_SKU: Default string
SYSTEM_VERSION: Default string
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: F50
BIOS_DATE: 11/27/2019
BASEBOARD_MANUFACTURER: Gigabyte Technology Co., Ltd.
BASEBOARD_PRODUCT: B450M S2H
BASEBOARD_VERSION: x.x
DUMP_TYPE: 2
BUGCHECK_P1: a39ff6db5cd2baf0
BUGCHECK_P2: 0
BUGCHECK_P3: 7a8ea0b3dc2201ba
BUGCHECK_P4: 101
PG_MISMATCH: 400000
MEMORY_CORRUPTOR: ONE_BIT
CPU_COUNT: c
CPU_MHZ: d42
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0x109
PROCESS_NAME: csrss.exe
CURRENT_IRQL: 2
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-16-2020 13:44:44.0337
ANALYSIS_VERSION: 10.0.18362.1 x86fre
STACK_TEXT:
ffffb587`af6bbe98 00000000`00000000 : 00000000`00000109 a39ff6db`5cd2baf0 00000000`00000000 7a8ea0b3`dc2201ba : nt!KeBugCheckEx
THREAD_SHA1_HASH_MOD_FUNC: 81a83ae0317433a47fcc36991983df3b6e638b71
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 6e16edd8c7dd677734fdbcd2397a2e35e9fae964
THREAD_SHA1_HASH_MOD: 76cd06466d098060a9eb26e5fd2a25cb1f3fe0a3
SYMBOL_NAME: ANALYSIS_INCONCLUSIVE
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_ONE_BIT
TARGET_TIME: 2020-02-14T16:47:35.000Z
OSBUILD: 18362
OSSERVICEPACK: 628
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1991-11-30 08:21:39
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 28ef
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:memory_corruption_one_bit
FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
Followup: MachineOwner
---------
.
