Voilà l’analyse du fichier dump avec windbg
[spoiler]
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 87b21000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8304861e, address which referenced memory
Debugging Details:
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 831a7848
Unable to read MiSystemVaType memory at 83186e40
87b21000
CURRENT_IRQL: 2
FAULTING_IP:
nt!PpmParkComputeDiff+120
8304861e f3ab rep stos dword ptr es:[edi]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: 87b20de8 – (.trap 0xffffffff87b20de8)
ErrCode = 00000002
eax=ffffffff ebx=00000000 ecx=0000fea3 edx=ffffff01 esi=00000001 edi=87b21000
eip=8304861e esp=87b20e5c ebp=87b20e98 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!PpmParkComputeDiff+0x120:
8304861e f3ab rep stos dword ptr es:[edi]
Resetting default scope
LAST_CONTROL_TRANSFER: from 8304861e to 8307f5db
STACK_TEXT:
87b20de8 8304861e badb0d00 ffffff01 a0d9e4f0 nt!KiTrap0E+0x2cf
87b20e98 ffffffff ffffffff ffffffff ffffffff nt!PpmParkComputeDiff+0x120
WARNING: Frame IP not in any known module. Following frames may be wrong.
87b20e9c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ea0 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ea4 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ea8 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20eac ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20eb0 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20eb4 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20eb8 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ebc ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ec0 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ec4 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ec8 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ecc ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ed0 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ed4 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ed8 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20edc ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ee0 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ee4 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ee8 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20eec ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ef0 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ef4 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20ef8 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20efc ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f00 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f04 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f08 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f0c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f10 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f14 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f18 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f1c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f20 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f24 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f28 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f2c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f30 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f34 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f38 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f3c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f40 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f44 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f48 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f4c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f50 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f54 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f58 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f5c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f60 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f64 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f68 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f6c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f70 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f74 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f78 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f7c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f80 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f84 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f88 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f8c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f90 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f94 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f98 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20f9c ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20fa0 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20fa4 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20fa8 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20fac ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20fb0 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20fb4 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20fb8 ffffffff ffffffff ffffffff ffffffff 0xffffffff
87b20fbc ffffffff ffffffff ffffffff ffffffff 0xffffffff
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!PpmParkComputeDiff+120
8304861e f3ab rep stos dword ptr es:[edi]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!PpmParkComputeDiff+120
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02a389
FAILURE_BUCKET_ID: 0xA_VRF_nt!PpmParkComputeDiff+120
BUCKET_ID: 0xA_VRF_nt!PpmParkComputeDiff+120
Followup: MachineOwner
[/spoiler]
Edit : sinon il dit ça aussi, ca a l’air plutôt explicite
“Probably caused by : ntkrpamp.exe ( nt!PpmParkComputeDiff+120 )”
Edité le 30/08/2011 à 15:05