Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Documents and Settings\Administrator\桌面\Minidump\Mini050615-17.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_qfe.130704-0421
Machine Name:
Kernel base = 0x804d8000 PsLoadedModuleList = 0x8055e720
Debug session time: Wed May 6 14:32:21.890 2015 (UTC + 8:00)
System Uptime: 0 days 0:00:51.593
Loading Kernel Symbols
...............................................................
..........................................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, cd4, e253e008, e256c1d4}
Probably caused by : win32k.sys ( win32k!HeavyFreePool+bb )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: e253e008, Memory contents of the pool block
Arg4: e256c1d4, Address of the block of pool being deallocated
Debugging Details:
------------------
BUGCHECK_STR: 0xc2_7
CUSTOMER_CRASH_COUNT: 17
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
PROCESS_NAME: winlogon.exe
LAST_CONTROL_TRANSFER: from 8054c583 to 804fafa3
STACK_TEXT:
ad180b80 8054c583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
ad180bd0 bf802ae5 e256c1d4 00000000 ad180c2c nt!ExFreePoolWithTag+0x2a3
ad180be0 bf810e92 e256c1d4 00004000 ad180c5c win32k!HeavyFreePool+0xbb
ad180c2c bf8052cc e1d39008 ad180c68 bf806945 win32k!RFONTOBJ::vMakeInactive+0x93
ad180c38 bf806945 e25508a0 e1799340 e1733f08 win32k!RFONTOBJ::RFONTOBJ+0x16
ad180c68 bf8065d0 ad180c88 bf803d0c e1df69c8 win32k!XDCOBJ::bCleanDC+0x22e
ad180c70 bf803d0c e1df69c8 00000039 0006f238 win32k!GreCleanDC+0x1e
ad180c88 bf803d95 0101005e 00000000 ad180cac win32k!ReleaseCacheDC+0x72
ad180c98 bf80116d 0101005e ad180d64 0006f238 win32k!_ReleaseDC+0xf
ad180cac 8a34d0c9 0101005e 00000039 00eb00ea win32k!NtUserCallOneParam+0x23
WARNING: Frame IP not in any known module. Following frames may be wrong.
ad180d54 805427e8 0101005e 00000039 0006f238 0x8a34d0c9
ad180d54 7c92e514 0101005e 00000039 0006f238 nt!KiSystemServicePostCall
0006f238 00000000 00000000 00000000 00000000 0x7c92e514
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!HeavyFreePool+bb
bf802ae5 5d pop ebp
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: win32k!HeavyFreePool+bb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 52f43e77
FAILURE_BUCKET_ID: 0xc2_7_win32k!HeavyFreePool+bb
BUCKET_ID: 0xc2_7_win32k!HeavyFreePool+bb
Followup: MachineOwner
---------