Bug Check 0xE3: RESOURCE_NOT_OWNED
in [Device Drivers]
|
From: Kerem Gümrükcü on 20 Nov 2008 15:11 Hi, can someone please explain me, how this can happen?: --------------------------------------------------------------- Microsoft (R) Windows Debugger Version 6.10.0003.233 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\crashdumps\20_11_2008_MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: C:\Symbols Executable search path is: Windows Server 2008/Windows Vista SP1 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible Product: WinNt, suite: TerminalServer SingleUserTS Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612 Machine Name: Kernel base = 0x82248000 PsLoadedModuleList = 0x8235fc70 Debug session time: Thu Nov 20 20:41:12.315 2008 (GMT+1) System Uptime: 2 days 16:37:01.584 Loading Kernel Symbols ................................................................ ................................................................. .......................................................... Loading User Symbols Loading unloaded module list ................................................... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck E3, {8234a3a0, 8498ead0, 0, 2} Probably caused by : ntkrpamp.exe ( nt!ExpReleaseResourceForThreadLite+d8 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* RESOURCE_NOT_OWNED (e3) A thread tried to release a resource it did not own. Arguments: Arg1: 8234a3a0, Address of resource Arg2: 8498ead0, Address of thread Arg3: 00000000, Address of owner table if there is one Arg4: 00000002 Debugging Details: ------------------ DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0xE3 PROCESS_NAME: System CURRENT_IRQL: 2 LAST_CONTROL_TRANSFER: from 822ffe12 to 823150e3 STACK_TEXT: 8b567a04 822ffe12 000000e3 8234a3a0 8498ead0 nt!KeBugCheckEx+0x1e 8b567a34 822ffd33 00000022 8b567ab8 823fb361 nt!ExpReleaseResourceForThreadLite+0xd8 8b567a40 823fb361 00000000 82520d0c 8b567ad8 nt!ExReleaseResourceLite+0xf 8b567a48 82520d0c 8b567ad8 00000001 00000000 nt!ExReleaseTimeRefreshLock+0xd 8b567aa4 82520963 8b567ab8 00000003 00000001 nt!PoBroadcastSystemState+0x398 8b567ad8 82521cb3 d57babe5 8b567c10 8b567c94 nt!PopSetDevicesSystemState+0x7b 8b567bfc 8229fa1a 00000002 c000010a 01000000 nt!NtSetSystemPowerState+0x6c5 8b567bfc 8229e931 00000002 c000010a 01000000 nt!KiFastCallEntry+0x12a 8b567c80 824d8917 00000002 00000005 a0000000 nt!ZwSetSystemPowerState+0x11 8b567ccc 824d82aa 00000000 00000002 00000005 nt!PopIssueActionRequest+0x352 8b567d08 8227b00c d57bad5d 8234a13c 8498ead0 nt!PopPolicyWorkerAction+0x45 8b567d44 82280445 00000004 00000000 8498ead0 nt!PopPolicyWorkerThread+0x6e 8b567d7c 8241db18 80000000 d57badd9 00000000 nt!ExpWorkerThread+0xfd 8b567dc0 82276a2e 82280348 00000001 00000000 nt!PspSystemThreadStartup+0x9d 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16 STACK_COMMAND: kb FOLLOWUP_IP: nt!ExpReleaseResourceForThreadLite+d8 822ffe12 cc int 3 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt!ExpReleaseResourceForThreadLite+d8 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrpamp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 48d1b7fa FAILURE_BUCKET_ID: 0xE3_nt!ExpReleaseResourceForThreadLite+d8 BUCKET_ID: 0xE3_nt!ExpReleaseResourceForThreadLite+d8 Followup: MachineOwner ------------------------------------------ Regards Kerem -- ----------------------- Beste Gr�sse / Best regards / Votre bien devoue Kerem G�mr�kc� Latest Project: http://www.pro-it-education.de/software/deviceremover Latest Open-Source Projects: http://entwicklung.junetz.de ----------------------- "This reply is provided as is, without warranty express or implied."
From: Don Burn on 20 Nov 2008 15:27 Most likely is a call to ExReleaseResourceLite without having a corresponding ExAcquireResourceXXX call before it. -- Don Burn (MVP, Windows DDK) Windows Filesystem and Driver Consulting Website: http://www.windrvr.com Blog: http://msmvps.com/blogs/WinDrvr Remove StopSpam to reply "Kerem G�mr�kc�" <kareem114(a)hotmail.com> wrote in message news:uebLxw0SJHA.1164(a)TK2MSFTNGP02.phx.gbl... > Hi, > > can someone please explain me, how this can happen?: > > --------------------------------------------------------------- > > Microsoft (R) Windows Debugger Version 6.10.0003.233 X86 > Copyright (c) Microsoft Corporation. All rights reserved. > > > Loading Dump File [C:\crashdumps\20_11_2008_MEMORY.DMP] > Kernel Summary Dump File: Only kernel address space is available > > Symbol search path is: C:\Symbols > Executable search path is: > Windows Server 2008/Windows Vista SP1 Kernel Version 6001 (Service Pack 1) > MP (2 procs) Free x86 compatible > Product: WinNt, suite: TerminalServer SingleUserTS > Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612 > Machine Name: > Kernel base = 0x82248000 PsLoadedModuleList = 0x8235fc70 > Debug session time: Thu Nov 20 20:41:12.315 2008 (GMT+1) > System Uptime: 2 days 16:37:01.584 > Loading Kernel Symbols > ............................................................... > ................................................................ > ......................................................... > Loading User Symbols > > Loading unloaded module list > .................................................. > ******************************************************************************* > * * > * Bugcheck Analysis * > * * > ******************************************************************************* > > Use !analyze -v to get detailed debugging information. > > BugCheck E3, {8234a3a0, 8498ead0, 0, 2} > > Probably caused by : ntkrpamp.exe ( > nt!ExpReleaseResourceForThreadLite+d8 ) > > Followup: MachineOwner > --------- > > 0: kd> !analyze -v > ******************************************************************************* > * * > * Bugcheck Analysis * > * * > ******************************************************************************* > > RESOURCE_NOT_OWNED (e3) > A thread tried to release a resource it did not own. > Arguments: > Arg1: 8234a3a0, Address of resource > Arg2: 8498ead0, Address of thread > Arg3: 00000000, Address of owner table if there is one > Arg4: 00000002 > > Debugging Details: > ------------------ > > > DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT > > BUGCHECK_STR: 0xE3 > > PROCESS_NAME: System > > CURRENT_IRQL: 2 > > LAST_CONTROL_TRANSFER: from 822ffe12 to 823150e3 > > STACK_TEXT: > 8b567a04 822ffe12 000000e3 8234a3a0 8498ead0 nt!KeBugCheckEx+0x1e > 8b567a34 822ffd33 00000022 8b567ab8 823fb361 > nt!ExpReleaseResourceForThreadLite+0xd8 > 8b567a40 823fb361 00000000 82520d0c 8b567ad8 nt!ExReleaseResourceLite+0xf > 8b567a48 82520d0c 8b567ad8 00000001 00000000 > nt!ExReleaseTimeRefreshLock+0xd > 8b567aa4 82520963 8b567ab8 00000003 00000001 > nt!PoBroadcastSystemState+0x398 > 8b567ad8 82521cb3 d57babe5 8b567c10 8b567c94 > nt!PopSetDevicesSystemState+0x7b > 8b567bfc 8229fa1a 00000002 c000010a 01000000 > nt!NtSetSystemPowerState+0x6c5 > 8b567bfc 8229e931 00000002 c000010a 01000000 nt!KiFastCallEntry+0x12a > 8b567c80 824d8917 00000002 00000005 a0000000 nt!ZwSetSystemPowerState+0x11 > 8b567ccc 824d82aa 00000000 00000002 00000005 > nt!PopIssueActionRequest+0x352 > 8b567d08 8227b00c d57bad5d 8234a13c 8498ead0 nt!PopPolicyWorkerAction+0x45 > 8b567d44 82280445 00000004 00000000 8498ead0 nt!PopPolicyWorkerThread+0x6e > 8b567d7c 8241db18 80000000 d57badd9 00000000 nt!ExpWorkerThread+0xfd > 8b567dc0 82276a2e 82280348 00000001 00000000 > nt!PspSystemThreadStartup+0x9d > 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16 > > > STACK_COMMAND: kb > > FOLLOWUP_IP: > nt!ExpReleaseResourceForThreadLite+d8 > 822ffe12 cc int 3 > > SYMBOL_STACK_INDEX: 1 > > SYMBOL_NAME: nt!ExpReleaseResourceForThreadLite+d8 > > FOLLOWUP_NAME: MachineOwner > > MODULE_NAME: nt > > IMAGE_NAME: ntkrpamp.exe > > DEBUG_FLR_IMAGE_TIMESTAMP: 48d1b7fa > > FAILURE_BUCKET_ID: 0xE3_nt!ExpReleaseResourceForThreadLite+d8 > > BUCKET_ID: 0xE3_nt!ExpReleaseResourceForThreadLite+d8 > > Followup: MachineOwner > > ------------------------------------------ > > > Regards > > Kerem > > -- > ----------------------- > Beste Gr�sse / Best regards / Votre bien devoue > Kerem G�mr�kc� > Latest Project: http://www.pro-it-education.de/software/deviceremover > Latest Open-Source Projects: http://entwicklung.junetz.de > ----------------------- > "This reply is provided as is, without warranty express or implied."
|
Pages: 1 Prev: Regarding printer property pages Next: Shadow copy of file content in FS filter driver |