KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000004, The thread's stack pointer was outside the legal stack
extents for the thread.
Arg2: fffff8006f84eff0, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff8006f84ef48, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 19603.1000.amd64fre.rs_prerelease.200403-1523
SYSTEM_MANUFACTURER: LENOVO
SYSTEM_PRODUCT_NAME: 80SR
SYSTEM_SKU: LENOVO_MT_80SR_BU_idea_FM_Lenovo ideapad 510-15ISK
SYSTEM_VERSION: Lenovo ideapad 510-15ISK
BIOS_VENDOR: LENOVO
BIOS_VERSION: 0XCN45WW
BIOS_DATE: 08/09/2018
BASEBOARD_MANUFACTURER: LENOVO
BASEBOARD_PRODUCT: Toronto 5A1
BASEBOARD_VERSION: NO DPK
DUMP_TYPE: 2
BUGCHECK_P1: 4
BUGCHECK_P2: fffff8006f84eff0
BUGCHECK_P3: fffff8006f84ef48
BUGCHECK_P4: 0
TRAP_FRAME: fffff8006f84eff0 -- (.trap 0xfffff8006f84eff0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff87843d131000 rbx=0000000000000000 rcx=0000000000000004
rdx=ffff87843d138000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8006c479441 rsp=fffff8006f84f180 rbp=fffff8006f84f700
r8=ffff87843d138000 r9=fffff8006f84f720 r10=fffff8006c0ac688
r11=00007ffffffeffff r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!RtlpGetStackLimitsEx+0x1c6931:
fffff800`6c479441 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: fffff8006f84ef48 -- (.exr 0xfffff8006f84ef48)
ExceptionAddress: fffff8006c479441 (nt!RtlpGetStackLimitsEx+0x00000000001c6931)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000004
Subcode: 0x4 FAST_FAIL_INCORRECT_STACK
CPU_COUNT: 4
CPU_MHZ: 960
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 4e
CPU_STEPPING: 3
CPU_MICROCODE: 6,4e,3,0 (F,M,S,R) SIG: D6'00000000 (cache) D6'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_INCORRECT_STACK
WATSON_BKT_EVENT: BEX
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000004
ANALYSIS_SESSION_HOST: DESKTOP-ME9UFOB
ANALYSIS_SESSION_TIME: 04-15-2020 13:27:57.0583
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
BAD_STACK_POINTER: fffff8006f84ecc8
LAST_CONTROL_TRANSFER: from fffff8006c422ee9 to fffff8006c410f30
STACK_TEXT:
fffff800`6f84ecc8 fffff800`6c422ee9 : 00000000`00000139 00000000`00000004 fffff800`6f84eff0 fffff800`6f84ef48 : nt!KeBugCheckEx
fffff800`6f84ecd0 fffff800`6c423310 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff800`6f84ee10 fffff800`6c4216a3 : fffff800`6f84f7c0 00000000`00000000 fffff800`6f84ea40 00000000`00000000 : nt!KiFastFailDispatch+0xd0
fffff800`6f84eff0 fffff800`6c479441 : ffff8784`3d74ef50 fffff800`6c4147cc fffff800`6f84f700 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323
fffff800`6f84f180 fffff800`6c478391 : fffff800`6c0de8b8 fffff800`6c000000 fffff800`6c41480e fffff800`00000002 : nt!RtlpGetStackLimitsEx+0x1c6931
fffff800`6f84f1b0 fffff800`6c2eff56 : ffff8784`3d137038 fffff800`6f84fe20 ffff8784`3d137038 ffffae00`4d780118 : nt!RtlDispatchException+0x1c89b1
fffff800`6f84f8f0 fffff800`6c411dc2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x186
fffff800`6f84ffb0 fffff800`6c411d90 : fffff800`6c423025 ffff9708`00001040 ffff8784`3d137000 00000073`027fb279 : nt!KxExceptionDispatchOnExceptionStack+0x12
ffff8784`3d136ef8 fffff800`6c423025 : ffff9708`00001040 ffff8784`3d137000 00000073`027fb279 ffff9708`2b6acb20 : nt!KiExceptionDispatchOnExceptionStackContinue
ffff8784`3d136f00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0x125
THREAD_SHA1_HASH_MOD_FUNC: 09b074b9676986433f72e704969b9957abe9f807
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 1406d294fd93f741fc37cc4ead9a85ab0e7d7190
THREAD_SHA1_HASH_MOD: bc100a5647b828107ac4e18055e00abcbe1ec406
FOLLOWUP_IP:
nt!KiFastFailDispatch+d0
fffff800`6c423310 c644242000 mov byte ptr [rsp+20h],0
FAULT_INSTR_CODE: 202444c6
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiFastFailDispatch+d0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 1bd63b2d
IMAGE_VERSION: 10.0.19603.1000
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_MISSING_GSFRAME_STACKPTR_ERROR_nt!KiFastFailDispatch
BUCKET_ID: 0x139_MISSING_GSFRAME_STACKPTR_ERROR_nt!KiFastFailDispatch
PRIMARY_PROBLEM_CLASS: 0x139_MISSING_GSFRAME_STACKPTR_ERROR_nt!KiFastFailDispatch
TARGET_TIME: 2020-04-15T07:50:43.000Z
OSBUILD: 19603
OSSERVICEPACK: 1000
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1984-10-19 12:04:45
BUILDDATESTAMP_STR: 200403-1523
BUILDLAB_STR: rs_prerelease
BUILDOSVER_STR: 10.0.19603.1000.amd64fre.rs_prerelease.200403-1523
ANALYSIS_SESSION_ELAPSED_TIME: 9de3
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_missing_gsframe_stackptr_error_nt!kifastfaildispatch
FAILURE_ID_HASH: {7b0febb5-6007-4f2b-3d38-57fef278d8d5}
Followup: MachineOwner
---------