PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
[COLOR="#008000"]Entweder es wurde eine falsche Adresse (verbotener Bereich) angegeben,
oder es wurde Speicher referenziert, der bereits frei gegeben ist[/COLOR]
Arguments:
Arg1: fffff6fb400037a8, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000006, (reserved)
...
TRAP_FRAME: ffffd00024846630 -- (.trap 0xffffd00024846630)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000047c42890 rbx=0000000000000000 rcx=0000000047c4377f
rdx=00000000006f56d8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8014eea37c7 rsp=ffffd000248467c8 rbp=0000007ffffffff8
r8=ffffe00030e00000 r9=00000000deadb000 r10=ffffe00030e00030
r11=ffffe00020d00000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
[COLOR="#FF0000"]nt!MmBuildMdlForNonPagedPool+0x87:[/COLOR]
fffff801`4eea37c7 488b06 mov rax,qword ptr [rsi] ds:00000000`00000000=0000000000000000
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff8014f00a5de to fffff8014efc4940
STACK_TEXT:
ffffd000`24846348 fffff801`4f00a5de : 00000000`00000050 fffff6fb`400037a8 00000000`00000000 fffff6fb`7da00018 : nt!KeBugCheckEx
ffffd000`24846350 fffff801`4ef1f314 : 00000000`00000000 fffff6fb`400037a8 00000000`00000000 ffffd000`00000000 : nt! ?? ::FNODOBFM::`string'+0x372de
ffffd000`248464d0 fffff801`4efcdbbc : 00000000`00000000 fffff801`5a0338df ffffe000`27388010 00000000`0023e248 : nt!MmAccessFault+0x2e4
ffffd000`24846630 fffff801`4eea37c7 : 00000000`00000000 00000000`00000780 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x13c
ffffd000`248467c8 fffff801`5a051a21 : ffffe000`30e00000 00000000`deadbeef ffffe000`24545000 00000000`47c41891 : nt!MmBuildMdlForNonPagedPool+0x87
ffffd000`248467f0 fffff801`5ed8cf5f : ffffe000`23f72180 ffffe000`2a129af0 ffffe000`26712800 ffffe000`24545000 : ndis!NdisAllocateMdl+0x31
[COLOR="#FF0000"]ffffd000`24846830 ffffe000`23f72180 : ffffe000`2a129af0 ffffe000`26712800 ffffe000`24545000 00000000`000000dc : bcmwl63a+0xdcf5f[/COLOR]
[COLOR="#008000"]Dieser Treiber weist ndis.sys an, die MDL (SpeicherDescriptionListe zu aktivieren.
Im nächsten Schritt wird eine MDL für den NonPagedPool aufgerufen und dadurch kommt es zum PageFault.[/COLOR]
ffffd000`24846838 ffffe000`2a129af0 : ffffe000`26712800 ffffe000`24545000 00000000`000000dc fffff801`5ed6f37c : 0xffffe000`23f72180
ffffd000`24846840 ffffe000`26712800 : ffffe000`24545000 00000000`000000dc fffff801`5ed6f37c ffffe000`245449c0 : 0xffffe000`2a129af0
ffffd000`24846848 ffffe000`24545000 : 00000000`000000dc fffff801`5ed6f37c ffffe000`245449c0 ffffe000`2671d780 : 0xffffe000`26712800
ffffd000`24846850 00000000`000000dc : fffff801`5ed6f37c ffffe000`245449c0 ffffe000`2671d780 00000000`0000006e : 0xffffe000`24545000
ffffd000`24846858 fffff801`5ed6f37c : ffffe000`245449c0 ffffe000`2671d780 00000000`0000006e ffffe000`245449c0 : 0xdc
ffffd000`24846860 ffffe000`245449c0 : ffffe000`2671d780 00000000`0000006e ffffe000`245449c0 00000000`00000000 : bcmwl63a+0xbf37c
ffffd000`24846868 ffffe000`2671d780 : 00000000`0000006e ffffe000`245449c0 00000000`00000000 fffff801`4efc93d6 : 0xffffe000`245449c0
ffffd000`24846870 00000000`0000006e : ffffe000`245449c0 00000000`00000000 fffff801`4efc93d6 00000000`100006f0 : 0xffffe000`2671d780
ffffd000`24846878 ffffe000`245449c0 : 00000000`00000000 fffff801`4efc93d6 00000000`100006f0 fffff801`5f7ae0f8 : 0x6e
ffffd000`24846880 00000000`00000000 : fffff801`4efc93d6 00000000`100006f0 fffff801`5f7ae0f8 00000000`00000000 : 0xffffe000`245449c0
....
MODULE_NAME: bcmwl63a
[COLOR="#FF0000"]IMAGE_NAME: bcmwl63a.sys[/COLOR]
DEBUG_FLR_IMAGE_TIMESTAMP: 55ca5318
FAILURE_BUCKET_ID: AV_bcmwl63a+dcf5f
BUCKET_ID: AV_bcmwl63a+dcf5f
ANALYSIS_SOURCE: KM
[COLOR="#FF0000"]FAILURE_ID_HASH_STRING: km:av_bcmwl63a+dcf5f[/COLOR]
...
[COLOR="#008000"]Hier die Beschreibung der Datei, die den Bluescreen verursacht hat:[/COLOR]
2: kd> lmvm bcmwl63a
start end module name
fffff801`5ecb0000 fffff801`5f9d6000 bcmwl63a T (no symbols)
Loaded symbol image file: bcmwl63a.sys
Image path: \SystemRoot\system32\DRIVERS\bcmwl63a.sys
Image name: bcmwl63a.sys
Timestamp: Tue Aug 11 21:55:04 2015 (55CA5318)
CheckSum: 00B223CD
ImageSize: 00D26000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4