お客様先のサーバがブルースクリーンになりダンプファイルが出力されていたので、Debugging Tools for Windowsを使用して解析結果を確認したのですが、内容がよくわかりません。
出力結果を下記に記載しますので、アドバイスやチェックしないといけない箇所をご教授をお願いします。
Symbol search path is: SRV*C:\Windows\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_rtm.070216-1710
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Sat Dec 4 13:05:45.241 2010 (GMT+9)
System Uptime: 0 days 4:53:08.015
Loading Kernel Symbols
...............................................................
....................................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, e2b73c48, e2b73c90, c090405}
Probably caused by : win32k.sys ( win32k!EngFreeMem+1f )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: e2b73c48, The pool entry we were looking for within the page.
Arg3: e2b73c90, The next pool entry.
Arg4: 0c090405, (reserved)
Debugging Details:
------------------
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: e2b73c48
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP
PROCESS_NAME: csrss.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 808927bb to 80827c63
STACK_TEXT:
b72a2348 808927bb 00000019 00000020 e2b73c48 nt!KeBugCheckEx+0x1b
b72a23b0 bf86da7a e2b73c50 00000000 e329d044 nt!ExFreePoolWithTag+0x477
b72a23c4 bf831619 e2b73c60 00000000 e329d044 win32k!EngFreeMem+0x1f
b72a23d8 bf8102df e329d018 04199e34 b72a29ec win32k!bLoadGlyphSet+0xb8
b72a2a80 bf80ff7c e1c23650 03000010 0002c228 win32k!bLoadTTF+0x2e1
b72a2b08 bf80feb6 e1c23650 04180010 0002c228 win32k!bLoadFontFile+0x228
b72a2b58 bf80fb94 00000001 e1c23648 b72a2c10 win32k!ttfdSemLoadFontFile+0x4c
b72a2b88 bf80fb22 00000001 e1c23648 b72a2c10 win32k!PDEVOBJ::LoadFontFile+0x3a
b72a2bc0 bf9625c8 00000000 00000000 e1c23648 win32k!vLoadFontFileView+0x12b
b72a2ca8 bf935d1b b72a2d08 e1c23648 00000001 win32k!PUBLIC_PFTOBJ::bLoadRemoteFonts+0xf8
b72a2d4c 8088978c 8b210456 027bb048 0002c238 win32k!NtGdiAddRemoteFontToDC+0xd4
b72a2d4c 7c9785ec 8b210456 027bb048 0002c238 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
012bee54 00000000 00000000 00000000 00000000 0x7c9785ec
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!EngFreeMem+1f
bf86da7a 5e pop esi
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: win32k!EngFreeMem+1f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 45d6a129
FAILURE_BUCKET_ID: 0x19_20_win32k!EngFreeMem+1f
BUCKET_ID: 0x19_20_win32k!EngFreeMem+1f
Followup: MachineOwner
以上、よろしくお願いします。
Debugging Tools for Windows
