Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-12388

REGRESSION: Assertion c:\reactos\ntoskrnl\mm\arm3\mdlsup.c(355): (Mdl->MdlFlags & (MDL_MAPPED_TO_SYSTEM_VA | MDL_SOURCE_IS_NONPAGED_POOL | MDL_PARTIAL_HAS_BEEN_MAPPED)) == 0

    XMLWordPrintable

Details

    • Bug
    • Resolution: Incomplete
    • Major
    • None
    • None
    • None

    Description

      1)Install Miranda IM 0.10.24 (easy to find in FileHippo)
      2)Install
      3)"+" sign, create an IRC connection
      4)Main window, click on Miranda logo->Fast Join/Connect
      5)Assertion happens

      fixme:(C:\reactos\dll\win32\iphlpapi\address.c:289) GetAdaptersAddresses - Semi Stub: Family 2, Flags 0x0000002e, Reserved 00000000, pAdapterAddress 00000000, pOutBufLen 012AF450.
      fixme:(C:\reactos\dll\win32\iphlpapi\address.c:289) GetAdaptersAddresses - Semi Stub: Family 2, Flags 0x0000002e, Reserved 00000000, pAdapterAddress 001D5008, pOutBufLen 012AF450.
      (C:\reactos\dll\win32\wshtcpip\wshtcpip.c:703) Set: Received unsupported IPPROTO_IP option 9
      Assertion c:\reactos\ntoskrnl\mm\arm3\mdlsup.c(355): (Mdl->MdlFlags & (MDL_MAPPED_TO_SYSTEM_VA | MDL_SOURCE_IS_NONPAGED_POOL | MDL_PARTIAL_HAS_BEEN_MAPPED)) == 0
      nt!MmMapLockedPagesSpecifyCache+0x7a:
      8048e3ea cd2c            int     2Ch
      kd> !analyze -v
      Connected to Windows Server 2003 3790 x86 compatible target at (Sun Nov 13 11:40:08.927 2016 (UTC + 1:00)), ptr64 FALSE
      Loading Kernel Symbols
      ..............................................................
      Loading User Symbols
       
      *** ERROR: Symbol file could not be found.  Defaulted to export symbols for VBoxDisp.dll - 
      *** ERROR: Symbol file could not be found.  Defaulted to export symbols for VBoxSF.sys - 
      *** ERROR: Symbol file could not be found.  Defaulted to export symbols for VBoxMouse.sys - 
      *** ERROR: Symbol file could not be found.  Defaulted to export symbols for VBoxVideo.sys - 
      *** ERROR: Symbol file could not be found.  Defaulted to export symbols for VBoxGuest.sys - 
      ERROR: FindPlugIns 800700a1
      *******************************************************************************
      *                                                                             *
      *                        Bugcheck Analysis                                    *
      *                                                                             *
      *******************************************************************************
       
      Unknown bugcheck code (0)
      Unknown bugcheck description
      Arguments:
      Arg1: 00000000
      Arg2: 00000000
      Arg3: 00000000
      Arg4: e2be46af
       
      Debugging Details:
      ------------------
       
       
      PROCESS_NAME:  System
       
      FAULTING_IP: 
      nt!MmMapLockedPagesSpecifyCache+7a [c:\reactos\ntoskrnl\mm\arm3\mdlsup.c @ 355]
      8048e3ea cd2c            int     2Ch
       
      EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
      ExceptionAddress: 8048e3ea (nt!MmMapLockedPagesSpecifyCache+0x0000007a)
         ExceptionCode: c0000420 (Assertion failure)
        ExceptionFlags: 00000000
      NumberParameters: 0
      Assertion c:\reactos\ntoskrnl\mm\arm3\mdlsup.c(355): (Mdl->MdlFlags & (MDL_MAPPED_TO_SYSTEM_VA | MDL_SOURCE_IS_NONPAGED_POOL | MDL_PARTIAL_HAS_BEEN_MAPPED)) == 0
       
      ERROR_CODE: (NTSTATUS) 0xc0000420 - Error de aserci n.
       
      EXCEPTION_CODE: (NTSTATUS) 0xc0000420 - Error de aserci n.
       
      DEFAULT_BUCKET_ID:  DRIVER_FAULT
       
      BUGCHECK_STR:  0x0
       
      CURRENT_IRQL:  0
       
      LAST_CONTROL_TRANSFER:  from 8048e5db to 8048e3ea
       
      STACK_TEXT:  
      fb1b2bd8 8048e5db ff9e9d10 00000000 00000001 nt!MmMapLockedPagesSpecifyCache+0x7a [c:\reactos\ntoskrnl\mm\arm3\mdlsup.c @ 355]
      fb1b2bf8 fa3d92fc ff9e9d10 00000000 00000040 nt!MmMapLockedPages+0x1b [c:\reactos\ntoskrnl\mm\arm3\mdlsup.c @ 484]
      fb1b2c20 fa3d8ee2 ff9e9148 ff9f3c68 fb1b2c4c afd!TryToSatisfyRecvRequestFromBuffer+0x16c [c:\reactos\drivers\network\afd\afd\read.c @ 123]
      fb1b2c50 fa3d89f0 ff9e9148 00000000 804f40e1 afd!ReceiveActivity+0x2e2 [c:\reactos\drivers\network\afd\afd\read.c @ 214]
      fb1b2c74 8046368b 00000000 ffa50528 ff9e9148 afd!ReceiveComplete+0x220 [c:\reactos\drivers\network\afd\afd\read.c @ 313]
      fb1b2cdc fa3fe8f6 00000000 fb1b2cfc fa3feb4d nt!IofCompleteRequest+0x22b [c:\reactos\ntoskrnl\io\iomgr\irp.c @ 1344]
      fb1b2ce8 fa3feb4d ffa50528 00000000 ffa50528 tcpip!IRPFinish+0x46 [c:\reactos\drivers\network\tcpip\tcpip\dispatch.c @ 38]
      fb1b2cfc fa41211f ffa50528 00000000 00000040 tcpip!DispDataRequestComplete+0x10d [c:\reactos\drivers\network\tcpip\tcpip\dispatch.c @ 113]
      fb1b2d1c fa41e51d ff9ea230 ffaf8d70 ff9e90c0 tcpip!BucketCompletionWorker+0x2f [c:\reactos\sdk\lib\drivers\ip\transport\tcp\event.c @ 30]
      fb1b2d30 804620ba b01e3a38 ff9e90c0 b01e3a38 tcpip!ChewWorkItem+0x1d [c:\reactos\sdk\lib\drivers\chew\workqueue.c @ 50]
      fb1b2d48 80437ffd ffaf8d70 00000001 00000001 nt!IopWorkItemCallback+0x2a [c:\reactos\ntoskrnl\io\iomgr\iowork.c @ 30]
      fb1b2d8c 804da194 00000001 00000000 8000003b nt!ExpWorkerThreadEntryPoint+0x18d [c:\reactos\ntoskrnl\ex\work.c @ 165]
      fb1b2dc0 804f3902 80437e70 00000001 fb1b2de0 nt!PspSystemThreadStartup+0x64 [c:\reactos\ntoskrnl\ps\thread.c @ 158]
      fb1b2ddc 804da12f 80437e70 00000001 cccccc00 nt!KiThreadStartup+0x42 [c:\reactos\ntoskrnl\ke\i386\thrdini.c @ 81]
      fb1b2de0 80437e6f 00000001 cccccc00 0000027f nt!PspUnhandledExceptionInSystemThread+0xcf
      fb1b2de4 00000000 cccccc00 0000027f 00000000 nt!ExpDesktopClose+0x4f
       
       
      STACK_COMMAND:  kb
       
      FOLLOWUP_IP: 
      afd!TryToSatisfyRecvRequestFromBuffer+16c [c:\reactos\drivers\network\afd\afd\read.c @ 123]
      fa3d92fc 8b4dfc          mov     ecx,dword ptr [ebp-4]
       
      FAULTING_SOURCE_CODE:  
         119:         BytesToCopy =
         120:             MIN( RecvReq->BufferArray[i].len, BytesAvailable );
         121: 
         122:         if( Map[i].Mdl ) {
      >  123:             Map[i].BufferAddress = MmMapLockedPages( Map[i].Mdl, KernelMode );
         124: 
         125:             AFD_DbgPrint(MID_TRACE,("Buffer %u: %p:%u\n",
         126:                                     i,
         127:                                     Map[i].BufferAddress,
         128:                                     BytesToCopy));
       
       
      SYMBOL_STACK_INDEX:  2
       
      SYMBOL_NAME:  afd!TryToSatisfyRecvRequestFromBuffer+16c
       
      FOLLOWUP_NAME:  MachineOwner
       
      MODULE_NAME: afd
       
      IMAGE_NAME:  afd.sys
       
      DEBUG_FLR_IMAGE_TIMESTAMP:  5826f8be
       
      FAILURE_BUCKET_ID:  0x0_afd!TryToSatisfyRecvRequestFromBuffer+16c
       
      BUCKET_ID:  0x0_afd!TryToSatisfyRecvRequestFromBuffer+16c
       
      Followup: MachineOwner
      ---------

      Attachments

        Activity

          People

            bug zilla Bug Zilla
            vicmarcal vicmarcal
            Votes:
            1 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: