KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffc7020212c3b0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffc7020212c308, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for BEDaisy.sys
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: ffffc7020212c3b0
BUGCHECK_P3: ffffc7020212c308
BUGCHECK_P4: 0
TRAP_FRAME: ffffc7020212c3b0 -- (.trap 0xffffc7020212c3b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffb50a08ee93f0 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8023a648b10 rsp=ffffc7020212c540 rbp=ffffb50a08eaa040
r8=0000000000000001 r9=0000000000000002 r10=ffffb509fdee9e00
r11=fffff80236da2180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe cy
nt!KiExitDispatcher+0x160:
fffff802`3a648b10 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffc7020212c308 -- (.exr 0xffffc7020212c308)
ExceptionAddress: fffff8023a648b10 (nt!KiExitDispatcher+0x0000000000000160)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: 8
CPU_MHZ: fa0
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 15
CPU_MODEL: 2
CPU_STEPPING: 0
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-BKJR0DQ
ANALYSIS_SESSION_TIME: 03-03-2020 13:57:39.0907
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
LAST_CONTROL_TRANSFER: from fffff8023a7d32e9 to fffff8023a7c14e0
STACK_TEXT:
ffffc702`0212c088 fffff802`3a7d32e9 : 00000000`00000139 00000000`00000003 ffffc702`0212c3b0 ffffc702`0212c308 : nt!KeBugCheckEx
ffffc702`0212c090 fffff802`3a7d3710 : 00000000`00000001 00000000`00000000 00000000`00000000 ffffb509`fdbc2000 : nt!KiBugCheckDispatch+0x69
ffffc702`0212c1d0 fffff802`3a7d1aa5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`000000ff : nt!KiFastFailDispatch+0xd0
ffffc702`0212c3b0 fffff802`3a648b10 : 00000000`00000000 ffffc702`0212c5e1 fffff802`36da2180 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x325
ffffc702`0212c540 fffff802`3a6a555d : ffffb50a`08ee93e8 00000000`00000200 fffff802`36da2101 fffff802`3a96f06d : nt!KiExitDispatcher+0x160
ffffc702`0212c5a0 fffff802`7cf1ad9e : 00000000`00003000 ffffb50a`095d8068 00000000`0000011e 00000000`00000002 : nt!KeInsertQueueApc+0x14d
ffffc702`0212c640 00000000`00003000 : ffffb50a`095d8068 00000000`0000011e 00000000`00000002 00000000`00000000 : BEDaisy+0x2bad9e
ffffc702`0212c648 ffffb50a`095d8068 : 00000000`0000011e 00000000`00000002 00000000`00000000 00000000`00000000 : 0x3000
ffffc702`0212c650 00000000`0000011e : 00000000`00000002 00000000`00000000 00000000`00000000 ffff9db1`6fd7b100 : 0xffffb50a`095d8068
ffffc702`0212c658 00000000`00000002 : 00000000`00000000 00000000`00000000 ffff9db1`6fd7b100 00000000`00000000 : 0x11e
ffffc702`0212c660 00000000`00000000 : 00000000`00000000 ffff9db1`6fd7b100 00000000`00000000 00000000`c0000000 : 0x2
THREAD_SHA1_HASH_MOD_FUNC: b61d566806c3900e9d82f26f996154d545d8a932
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: fca4a2c9edc5b93556e4b2fb148f6720c6f965b3
THREAD_SHA1_HASH_MOD: 0079172978a7673b45090780b1c9d2221d299a5f
FOLLOWUP_IP:
BEDaisy+2bad9e
fffff802`7cf1ad9e 84c0 test al,al
FAULT_INSTR_CODE: e9c084
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: BEDaisy+2bad9e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: BEDaisy
IMAGE_NAME: BEDaisy.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5e2fde15
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 2bad9e
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function
TARGET_TIME: 2020-02-06T02:43:48.000Z
OSBUILD: 18362
OSSERVICEPACK: 592
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1972-08-22 03:24:00
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 5f0f
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_bedaisy!unknown_function
FAILURE_ID_HASH: {59d8eb10-b2e4-7df6-f6a5-49968226dbb8}
Followup: MachineOwner
---------
