Details
Description
On the tested environment the following steps may allow to reproduce the crash:
1. Run FileMonNT from SysInternals (see e.g. this download link).
2. Perform some trace.
3. Press the "Save (as)" button. Crash happens.
See the attached log for a complete backtrace.
The corresponding code is:
ntoskrnl/mm/arm3/virtual.c |
|
1563
|
ULONG
|
1564
|
NTAPI
|
1565
|
MiQueryAddressState(IN PVOID Va, |
1566
|
IN PMMVAD Vad,
|
1567
|
IN PEPROCESS TargetProcess,
|
1568
|
OUT PULONG ReturnedProtect, |
1569
|
OUT PVOID *NextVa) |
1570
|
{
|
1571
|
...
|
1572
|
/* Check if this is an image-backed VAD */ |
1573
|
if ((TempPte.u.Soft.Valid == 0) && |
1574
|
(TempPte.u.Soft.Prototype == 1) &&
|
1575
|
(Vad->u.VadFlags.PrivateMemory == 0) &&
|
1576
|
(Vad->ControlArea))
|
1577
|
{
|
1578
|
DPRINT1("Not supported\n"); |
1579
|
ASSERT(FALSE);
|
1580
|
}
|
1581
|
...
|
1582
|
}
|
Attachments
Issue Links
- is duplicated by
-
CORE-14850 MM unimplemented code path assertion FALSE
- Resolved