Description
E.g. in https://build.reactos.org/builders/Test%20KVM/builds/11575/steps/test/logs/stdio
|
*** Fatal System Error: 0x00000139
|
(0x00000003,0xF6F8591C,0xF6F858C4,0x00000000)
|
|
[7h
|
Entered debugger on embedded INT3 at 0x0008:0x8094b198.
|
kdb:>
|
bt
|
Eip:
|
<NTOSKRNL.EXE:14b199 (:0 (RtlpBreakWithStatusInstruction))>
|
Frames:
|
<NTOSKRNL.EXE:8cb5d (ntoskrnl/ke/bug.c:1098 (KeBugCheckWithTf))>
|
<NTOSKRNL.EXE:134789 (ntoskrnl/ke/i386/traphdlr.c:1511 (KiRaiseSecurityCheckFailureHandler))>
|
<NTOSKRNL.EXE:3969 (:0 (KiRaiseSecurityCheckFailure))>
|
<NTOSKRNL.EXE:e4b1d (include/crt/mingw32/intrin_x86.h:1502 (MmDeleteProcessAddressSpace))>
|
<NTOSKRNL.EXE:10e9ff (ntoskrnl/ps/kill.c:354 (PspDeleteProcess))>
|
<NTOSKRNL.EXE:fbb99 (ntoskrnl/ob/oblife.c:211 (ObpDeleteObject))>
|
<NTOSKRNL.EXE:10244f (ntoskrnl/ob/obref.c:237 (ObfDereferenceObject))>
|
<NTOSKRNL.EXE:aae41 (ntoskrnl/mm/ARM3/expool.c:2302 (ExFreePoolWithTag))>
|
<NTOSKRNL.EXE:ab895 (ntoskrnl/mm/ARM3/expool.c:2503 (ExFreePool))>
|
<npfs.sys:6fdd (drivers/filesystems/npfs/secursup.c:53 (NpFreeClientSecurityContext))>
|
<npfs.sys:70d1 (drivers/filesystems/npfs/secursup.c:76 (NpUninitializeSecurity))>
|
<npfs.sys:803c (drivers/filesystems/npfs/statesup.c:326 (NpSetClosingPipeState))>
|
<npfs.sys:113b (drivers/filesystems/npfs/cleanup.c:47 (NpCommonCleanup))>
|
<npfs.sys:11eb (drivers/filesystems/npfs/cleanup.c:66 (NpFsdCleanup))>
|
<NTOSKRNL.EXE:757a4 (ntoskrnl/io/iomgr/irp.c:1221 (IofCallDriver))>
|
<NTOSKRNL.EXE:67820 (ntoskrnl/io/iomgr/file.c:1964 (IopCloseFile))>
|
<NTOSKRNL.EXE:f7549 (ntoskrnl/ob/obhandle.c:619 (ObpDecrementHandleCount))>
|
<NTOSKRNL.EXE:f77df (ntoskrnl/ob/obhandle.c:746 (ObpCloseHandleTableEntry))>
|
<NTOSKRNL.EXE:f915c (ntoskrnl/ob/obhandle.c:1745 (ObpCloseHandle))>
|
<NTOSKRNL.EXE:fb087 (ntoskrnl/ob/obhandle.c:3297 (NtClose))>--- Press q to abort, any other key to continue ---
|
Looks like we don't have any locking whatsoever around operations on MmProcessList/EPROCESS::MmProcessLinks.