2013年9月16日星期一

FLT_PREOP_SUCCESS_WITH_CALLBACK蓝屏

If the minifilter driver's preoperation callback routine returns FLT_PREOP_SUCCESS_WITH_CALLBACK but the minifilter driver has not registered a postoperation callback routine for the operation, the system asserts on a checked build.

描述:
在 Windows xp 32上发生,在 Windows 7 64上没有发生.
代码是两个消息的前操作共用一个处理函数,一个有后操作,一个没有后操作,但是前操作里面返回了FLT_PREOP_SUCCESS_WITH_CALLBACK.
看样子是主动蓝屏,不是异常蓝屏.

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

FLTMGR_FILE_SYSTEM (f5)
An unrecoverable failure occured inside the filter manager.
Arguments:
Arg1: 00000066, The reason for the failure
Arg2: 82419064
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xF5

PROCESS_NAME:  explorer.exe

LAST_CONTROL_TRANSFER:  from 804f9e55 to 8052c65c

STACK_TEXT:  
b20cd4d4 804f9e55 00000003 b20cd830 00000000 nt!RtlpBreakWithStatusInstruction
b20cd520 804faa40 00000003 00000000 82280a78 nt!KiBugCheckDebugBreak+0x19
b20cd900 804faf8f 000000f5 00000066 82419064 nt!KeBugCheck2+0x574
b20cd920 f849bd28 000000f5 00000066 82419064 nt!KeBugCheckEx+0x1b
b20cd94c f849c8ec 82419008 00000000 b20cd9a8 fltMgr!FltpHandlePreCallbackReturnStatus+0x12e
b20cd9bc f849e1a7 000cd9f8 b20cdc00 824c3b48 fltMgr!FltpPerformPreCallbacks+0x338
b20cd9d4 f84aac7a 000cd9f8 b20cdc38 824c3b48 fltMgr!FltpPassThroughFastIo+0x3b
b20cda18 80584136 824c3b48 b20cdc00 824ca288 fltMgr!FltpFastIoQueryOpen+0xf4
b20cdb04 805c0490 82582030 00000000 821afee0 nt!IopParseDevice+0x916
b20cdb7c 805bca1c 00000000 b20cdbbc 00000040 nt!ObpLookupObjectName+0x53c
b20cdbd0 80577fe5 00000000 00000000 80623701 nt!ObOpenObjectByName+0xea
b20cdd54 8054272c 0191ecec 0191ecc4 0191ed18 nt!NtQueryAttributesFile+0xf1
b20cdd54 7c92e514 0191ecec 0191ecc4 0191ed18 nt!KiFastCallEntry+0xfc
0191eca4 7c92d71a 7c936665 0191ecec 0191ecc4 ntdll!KiFastSystemCallRet
0191eca8 7c936665 0191ecec 0191ecc4 0191f0ac ntdll!ZwQueryAttributesFile+0xc
0191ed18 7c9366d6 0191ed28 00000001 0040003e ntdll!RtlDoesFileExists_UstrEx+0x6b
0191ed30 7c971cb6 0191f0ac 00000001 0191f09c ntdll!RtlDoesFileExists_UEx+0x27
0191ed58 7c935fad 00131470 0191f0ac 00000000 ntdll!RtlDosSearchPath_UEx+0x1f
0191f024 7c9361a5 00131470 0191f09c 00000000 ntdll!LdrpCheckForLoadedDll+0x192
0191f2e0 7c93643d 00000000 00131470 0191f5d4 ntdll!LdrpLoadDll+0x1ba
0191f588 7c801bbd 00131470 0191f5d4 0191f5b4 ntdll!LdrLoadDll+0x230
0191f5f0 77f489ee 0191f844 00000000 00000000 kernel32!LoadLibraryExW+0x18e
0191f820 77f48aab 0191f844 00000000 00000000 SHLWAPI!LoadLibraryExWrapW+0x7e
0191fab8 7d5c21db 0191faf8 00000000 000e55d4 SHLWAPI!SHPinDllOfCLSID+0xab
0191fb0c 7d5bbcac 000e55c0 00000000 7d597034 SHELL32!CRegFolder::_CreateAndInit+0x1cc
0191fb34 7d5bb89f 000e55c0 00000000 7d597034 SHELL32!CRegFolder::_BindToItem+0x55
0191fb58 7d5c05b2 0009f710 000e55c0 00000000 SHELL32!CRegFolder::BindToObject+0x45
0191fb80 7d5c010c 0009f710 000c8fe0 000e55c0 SHELL32!ILCompareRelIDs+0x5b
0191fba4 7d5c14e4 00000000 10000000 00128c48 SHELL32!CRegFolder::CompareIDs+0xb7
0191fbc8 7d5c151e 00128c48 02691e20 0009f710 SHELL32!ILIsParent+0xb2
0191fbe4 7d5c7257 00128c48 02691e20 0191fc90 SHELL32!ILFindChild+0x16
0191fc0c 7d5c729c 00000000 00000000 02691e20 SHELL32!_ReparentAliases+0x58
0191fc28 7d6a2dbd 02691e20 0191fc90 00000002 SHELL32!SHILAliasTranslate+0x17
0191fc48 7d68b58e 000c8db8 0191fc80 02691e20 SHELL32!CDesktopFolder::TranslateIDs+0x34
0191fc94 7d5f942d ffffffff 00000001 7d68b1aa SHELL32!CAnyAlias::_SendNotification+0x66
0191fcc0 7d5c9642 00133c90 000c9dc4 000c9db0 SHELL32!CCollapsingClient::_Flush+0xa8
0191fcd4 7d5c972d 00000001 00000000 0191fd70 SHELL32!CCollapsingClient::Flush+0x2f
0191fcf8 7d5c9765 00000000 7d5c4416 0191fd34 SHELL32!CChangeNotify::_Flush+0x4b
0191fd08 77d18734 0001007a 00000113 00000001 SHELL32!CChangeNotify::WndProc+0xef
0191fd34 77d18816 7d5c4416 0001007a 00000113 USER32!InternalCallWinProc+0x28
0191fd9c 77d189cd 000a1330 7d5c4416 0001007a USER32!UserCallWinProcCheckWow+0x150
0191fdfc 77d18a10 0191fe20 00000000 0191fe3c USER32!DispatchMessageWorker+0x306
0191fe0c 7d5c4495 0191fe20 000c9db0 00000008 USER32!DispatchMessageW+0xf
0191fe3c 7d5c431f 00000000 00000000 00000000 SHELL32!CChangeNotify::_HandleMessages+0x2d
0191ff4c 7d5e1fe4 77f56f82 00000000 7c8099fa SHELL32!CChangeNotify::_MessagePump+0x52
0191ff50 77f56f82 00000000 7c8099fa 00090000 SHELL32!CChangeNotify::ThreadProc+0x1e
0191ffb4 7c80b729 00000000 7c8099fa 00090000 SHLWAPI!WrapperThreadProc+0x94
0191ffec 00000000 77f56f13 016df4d4 00000000 kernel32!BaseThreadStart+0x37


STACK_COMMAND:  kb

FOLLOWUP_IP: 
fltMgr!FltpHandlePreCallbackReturnStatus+12e
f849bd28 cc              int     3

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  fltMgr!FltpHandlePreCallbackReturnStatus+12e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: fltMgr

IMAGE_NAME:  fltMgr.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  480251da

FAILURE_BUCKET_ID:  0xF5_fltMgr!FltpHandlePreCallbackReturnStatus+12e

BUCKET_ID:  0xF5_fltMgr!FltpHandlePreCallbackReturnStatus+12e

Followup: MachineOwner
---------

没有评论:

发表评论