Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-10111

Occasional KERNEL_SECURITY_CHECK_FAILURE bugcheck in MmDeleteProcessAddressSpace

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 0.4.0
    • NTCore
    • None

    Description

      E.g. in https://build.reactos.org/builders/Test%20KVM/builds/11575/steps/test/logs/stdio

       
      *** Fatal System Error: 0x00000139
                             (0x00000003,0xF6F8591C,0xF6F858C4,0x00000000)
       
      
      Entered debugger on embedded INT3 at 0x0008:0x8094b198.
      kdb:>
       bt
      Eip:
      <NTOSKRNL.EXE:14b199 (:0 (RtlpBreakWithStatusInstruction))>
      Frames:
      <NTOSKRNL.EXE:8cb5d (ntoskrnl/ke/bug.c:1098 (KeBugCheckWithTf))>
      <NTOSKRNL.EXE:134789 (ntoskrnl/ke/i386/traphdlr.c:1511 (KiRaiseSecurityCheckFailureHandler))>
      <NTOSKRNL.EXE:3969 (:0 (KiRaiseSecurityCheckFailure))>
      <NTOSKRNL.EXE:e4b1d (include/crt/mingw32/intrin_x86.h:1502 (MmDeleteProcessAddressSpace))>
      <NTOSKRNL.EXE:10e9ff (ntoskrnl/ps/kill.c:354 (PspDeleteProcess))>
      <NTOSKRNL.EXE:fbb99 (ntoskrnl/ob/oblife.c:211 (ObpDeleteObject))>
      <NTOSKRNL.EXE:10244f (ntoskrnl/ob/obref.c:237 (ObfDereferenceObject))>
      <NTOSKRNL.EXE:aae41 (ntoskrnl/mm/ARM3/expool.c:2302 (ExFreePoolWithTag))>
      <NTOSKRNL.EXE:ab895 (ntoskrnl/mm/ARM3/expool.c:2503 (ExFreePool))>
      <npfs.sys:6fdd (drivers/filesystems/npfs/secursup.c:53 (NpFreeClientSecurityContext))>
      <npfs.sys:70d1 (drivers/filesystems/npfs/secursup.c:76 (NpUninitializeSecurity))>
      <npfs.sys:803c (drivers/filesystems/npfs/statesup.c:326 (NpSetClosingPipeState))>
      <npfs.sys:113b (drivers/filesystems/npfs/cleanup.c:47 (NpCommonCleanup))>
      <npfs.sys:11eb (drivers/filesystems/npfs/cleanup.c:66 (NpFsdCleanup))>
      <NTOSKRNL.EXE:757a4 (ntoskrnl/io/iomgr/irp.c:1221 (IofCallDriver))>
      <NTOSKRNL.EXE:67820 (ntoskrnl/io/iomgr/file.c:1964 (IopCloseFile))>
      <NTOSKRNL.EXE:f7549 (ntoskrnl/ob/obhandle.c:619 (ObpDecrementHandleCount))>
      <NTOSKRNL.EXE:f77df (ntoskrnl/ob/obhandle.c:746 (ObpCloseHandleTableEntry))>
      <NTOSKRNL.EXE:f915c (ntoskrnl/ob/obhandle.c:1745 (ObpCloseHandle))>
      <NTOSKRNL.EXE:fb087 (ntoskrnl/ob/obhandle.c:3297 (NtClose))>--- Press q to abort, any other key to continue ---

      Looks like we don't have any locking whatsoever around operations on MmProcessList/EPROCESS::MmProcessLinks.

      Attachments

        Activity

          People

            ThFabba ThFabba
            ThFabba ThFabba
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: