Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-10111

Occasional KERNEL_SECURITY_CHECK_FAILURE bugcheck in MmDeleteProcessAddressSpace

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Fix Version/s: 0.4.0
    • Component/s: NTCore
    • Labels:
      None

      Description

      E.g. in https://build.reactos.org/builders/Test%20KVM/builds/11575/steps/test/logs/stdio

       
      *** Fatal System Error: 0x00000139
                             (0x00000003,0xF6F8591C,0xF6F858C4,0x00000000)
       
      
      Entered debugger on embedded INT3 at 0x0008:0x8094b198.
      kdb:>
       bt
      Eip:
      <NTOSKRNL.EXE:14b199 (:0 (RtlpBreakWithStatusInstruction))>
      Frames:
      <NTOSKRNL.EXE:8cb5d (ntoskrnl/ke/bug.c:1098 (KeBugCheckWithTf))>
      <NTOSKRNL.EXE:134789 (ntoskrnl/ke/i386/traphdlr.c:1511 (KiRaiseSecurityCheckFailureHandler))>
      <NTOSKRNL.EXE:3969 (:0 (KiRaiseSecurityCheckFailure))>
      <NTOSKRNL.EXE:e4b1d (include/crt/mingw32/intrin_x86.h:1502 (MmDeleteProcessAddressSpace))>
      <NTOSKRNL.EXE:10e9ff (ntoskrnl/ps/kill.c:354 (PspDeleteProcess))>
      <NTOSKRNL.EXE:fbb99 (ntoskrnl/ob/oblife.c:211 (ObpDeleteObject))>
      <NTOSKRNL.EXE:10244f (ntoskrnl/ob/obref.c:237 (ObfDereferenceObject))>
      <NTOSKRNL.EXE:aae41 (ntoskrnl/mm/ARM3/expool.c:2302 (ExFreePoolWithTag))>
      <NTOSKRNL.EXE:ab895 (ntoskrnl/mm/ARM3/expool.c:2503 (ExFreePool))>
      <npfs.sys:6fdd (drivers/filesystems/npfs/secursup.c:53 (NpFreeClientSecurityContext))>
      <npfs.sys:70d1 (drivers/filesystems/npfs/secursup.c:76 (NpUninitializeSecurity))>
      <npfs.sys:803c (drivers/filesystems/npfs/statesup.c:326 (NpSetClosingPipeState))>
      <npfs.sys:113b (drivers/filesystems/npfs/cleanup.c:47 (NpCommonCleanup))>
      <npfs.sys:11eb (drivers/filesystems/npfs/cleanup.c:66 (NpFsdCleanup))>
      <NTOSKRNL.EXE:757a4 (ntoskrnl/io/iomgr/irp.c:1221 (IofCallDriver))>
      <NTOSKRNL.EXE:67820 (ntoskrnl/io/iomgr/file.c:1964 (IopCloseFile))>
      <NTOSKRNL.EXE:f7549 (ntoskrnl/ob/obhandle.c:619 (ObpDecrementHandleCount))>
      <NTOSKRNL.EXE:f77df (ntoskrnl/ob/obhandle.c:746 (ObpCloseHandleTableEntry))>
      <NTOSKRNL.EXE:f915c (ntoskrnl/ob/obhandle.c:1745 (ObpCloseHandle))>
      <NTOSKRNL.EXE:fb087 (ntoskrnl/ob/obhandle.c:3297 (NtClose))>--- Press q to abort, any other key to continue ---

      Looks like we don't have any locking whatsoever around operations on MmProcessList/EPROCESS::MmProcessLinks.

        Attachments

          Activity

            People

            • Assignee:
              ThFabba ThFabba
              Reporter:
              ThFabba ThFabba
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: