KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 000000000000001d, Type of memory safety violation
Arg2: fffff983b99d5160, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff983b99d50b8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 7
Key : Analysis.Elapsed.Sec
Value: 29
Key : Analysis.Memory.CommitPeak.Mb
Value: 68
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
DUMP_TYPE: 2
BUGCHECK_P1: 1d
BUGCHECK_P2: fffff983b99d5160
BUGCHECK_P3: fffff983b99d50b8
BUGCHECK_P4: 0
TRAP_FRAME: fffff983b99d5160 -- (.trap 0xfffff983b99d5160)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=000000000000001d
rdx=ffffab0db3cf05e8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80729e2c3af rsp=fffff983b99d52f0 rbp=ffff810d3e0edf20
r8=0000000000000001 r9=0000000000000000 r10=ffffab0db3cf05f0
r11=fffff8072a261478 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe cy
nt!RtlAvlInsertNodeEx+0x1ff:
fffff807`29e2c3af cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: fffff983b99d50b8 -- (.exr 0xfffff983b99d50b8)
ExceptionAddress: fffff80729e2c3af (nt!RtlAvlInsertNodeEx+0x00000000000001ff)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 000000000000001d
Subcode: 0x1d FAST_FAIL_INVALID_BALANCED_TREE
CPU_COUNT: c
CPU_MHZ: d48
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_INVALID_BALANCED_TREE
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 000000000000001d
ANALYSIS_SESSION_HOST: DESKTOP-I8FA0KP
ANALYSIS_SESSION_TIME: 07-13-2019 00:54:54.0573
ANALYSIS_VERSION: 10.0.18914.1001 amd64fre
LAST_CONTROL_TRANSFER: from fffff80729fce6e9 to fffff80729fbc900
STACK_TEXT:
fffff983`b99d4e38 fffff807`29fce6e9 : 00000000`00000139 00000000`0000001d fffff983`b99d5160 fffff983`b99d50b8 : nt!KeBugCheckEx
fffff983`b99d4e40 fffff807`29fceb10 : ffffab0d`b2a90b30 ffffab0d`afd56180 ffffab0d`afd3c090 00000000`00012890 : nt!KiBugCheckDispatch+0x69
fffff983`b99d4f80 fffff807`29fccea5 : 00000000`00000000 fffff807`29e41b93 00000010`b99d52a8 ffff810d`39000280 : nt!KiFastFailDispatch+0xd0
fffff983`b99d5160 fffff807`29e2c3af : ffff810d`3e495800 00001000`00000400 00000000`00010400 ffffab0d`b57a7324 : nt!KiRaiseSecurityCheckFailure+0x325
fffff983`b99d52f0 fffff807`29e55313 : 00000000`00000000 ffffab0d`b5706ef0 ffff810d`3e0edf20 80000000`00000000 : nt!RtlAvlInsertNodeEx+0x1ff
fffff983`b99d5330 fffff807`2a48201b : 00000000`00000015 00000000`00000000 ffffab0d`b5706d30 ffff810d`3e0edf20 : nt!MiUpdateSystemProtoPtesTree+0xc3
fffff983`b99d5360 fffff807`2a48177e : 00000000`00000402 ffffab0d`b57a71f8 fffff983`00000014 fffff983`00000001 : nt!MiBuildImageControlArea+0x427
fffff983`b99d53f0 fffff807`2a3fc3c6 : fffff983`b99d5840 00000004`00000002 00000000`00000000 00000000`00000000 : nt!MiCreateImageFileMap+0x346
fffff983`b99d5570 fffff807`2a3dca20 : ffffab0d`b5798e50 fffff983`b99d5840 fffff983`b99d5840 ffffab0d`b5798e20 : nt!MiCreateNewSection+0x112
fffff983`b99d56d0 fffff807`2a3dcd24 : fffff983`b99d5700 00000000`00000000 ffffab0d`b5798e50 00000000`00000000 : nt!MiCreateImageOrDataSection+0x2d0
fffff983`b99d57c0 fffff807`2a3dc37f : 00000000`01000000 fffff983`b99d5b80 00000000`00000001 00000000`00000010 : nt!MiCreateSection+0xf4
fffff983`b99d5940 fffff807`2a3dc110 : 000000f3`5897eb38 00000000`0000000d 00000000`00000000 00000000`00000001 : nt!MiCreateSectionCommon+0x1ff
fffff983`b99d5a20 fffff807`29fce118 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtCreateSection+0x60
fffff983`b99d5a90 00007ffa`6691c9a4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000f3`5897eae8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffa`6691c9a4
THREAD_SHA1_HASH_MOD_FUNC: ef8aa96204c080faece091aecac951a0ce930446
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 258d1a6ac499859ea6842bce6197fc11032b84c2
THREAD_SHA1_HASH_MOD: 7f608ac2fbce9034a3386b1d51652e4911d30234
FOLLOWUP_IP:
nt!KiFastFailDispatch+d0
fffff807`29fceb10 c644242000 mov byte ptr [rsp+20h],0
FAULT_INSTR_CODE: 202444c6
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiFastFailDispatch+d0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 3ed0f42
IMAGE_VERSION: 10.0.18362.239
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_1d_INVALID_BALANCED_TREE_nt!KiFastFailDispatch
BUCKET_ID: 0x139_1d_INVALID_BALANCED_TREE_nt!KiFastFailDispatch
PRIMARY_PROBLEM_CLASS: 0x139_1d_INVALID_BALANCED_TREE_nt!KiFastFailDispatch
TARGET_TIME: 2019-07-11T22:50:58.000Z
OSBUILD: 18362
OSSERVICEPACK: 239
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1972-02-02 11:33:06
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 7240
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_1d_invalid_balanced_tree_nt!kifastfaildispatch
FAILURE_ID_HASH: {67ec97ad-ad0b-071e-ab87-6dc661e22d1b}
Followup: MachineOwner
