locked
藍屏-請求大神幫忙解讀 RRS feed

  • 問題

  • 0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    INVALID_MDL_RANGE (12e)
    A driver has called the IoBuildPartialMdl() function and passed it an MDL
    to map part of a source MDL, but the virtual address range specified is
    outside the range in the source MDL.  This is a driver bug.  The source
    and target MDLs, as well as the address range length to be mapped are the
    arguments to the IoBuildPartialMdl() function, i.e.;
        IoBuildPartialMdl(
            IN PMDL SourceMdl,
            IN OUT PMDL TargetMdl,
            IN PVOID VirtualAddress,
            IN ULONG Length
            )
    Arguments:
    Arg1: 867497e8
    Arg2: 8078acb4
    Arg3: 0e11d9c0
    Arg4: 00000040

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that   ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that   ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!KPRCB                                      ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that   ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that   ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!KPRCB                                      ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that   ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that   ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that   ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that   ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************

    ADDITIONAL_DEBUG_TEXT:  
    You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

    FAULTING_MODULE: 83e4f000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bbf18

    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

    BUGCHECK_STR:  0x12E

    CURRENT_IRQL:  0

    LAST_CONTROL_TRANSFER:  from 83ee8859 to 83f2e3c8

    STACK_TEXT:  
    WARNING: Stack unwind information not available. Following frames may be wrong.
    8078ac64 83ee8859 0000012e 867497e8 8078acb4 nt!KeBugCheckEx+0x1e
    8078ac90 8d635ee8 86ce99c0 8078acb4 0e11d9c0 nt!IoBuildPartialMdl+0xa5
    8078ad14 8d635d5d 868cc890 9c194980 868cca47 Ntfs+0x8ee8
    8078ad3c 83ec7553 87558020 018cc890 00040000 Ntfs+0x8d5d
    8078ad80 83ec75f9 00000001 868c1a00 874f03a8 nt!RtlCaptureContext+0x29f
    8078adb8 8d9a8498 8078adec 8d9a8abd 874ef400 nt!RtlCaptureContext+0x345
    8078adc0 8d9a8abd 874ef400 868c13b8 00000001 CLASSPNP!ClassCompleteRequest+0x11
    8078adec 83ec7553 00000000 868c18f8 018c1a00 CLASSPNP!ClassCompleteRequest+0x636
    8078ae30 8d551da3 868c1aac 86d5e310 8078ae60 nt!RtlCaptureContext+0x29f
    8078ae40 8d552642 8674d9c0 868c18f8 868c1aac ataport!AtaPortInitialize+0x8c5
    8078ae60 8d54f4bd 8674d9c0 86d5e310 867530e0 ataport!AtaPortInitialize+0x1164
    8078ae7c 8d555474 867530e0 86d5e310 86d5e310 ataport+0x44bd
    8078aef4 8d555677 867530e0 86d5e310 8675309c ataport!AtaPortInitialize+0x3f96
    8078af48 83ec6df5 8675309c 86753028 00000000 ataport!AtaPortInitialize+0x4199
    8078afa4 83ec6c58 83f7ad20 86c95640 00000000 nt!KiDispatchInterrupt+0xa05
    8078aff4 83ec641c 90c7ece4 00000000 00000000 nt!KiDispatchInterrupt+0x868
    90c7ed00 83e1db29 83f7ac02 90c7ed34 f527c436 nt!KiDispatchInterrupt+0x2c
    90c7ed18 83e1dcc3 87041d30 90c7ed34 83e88ea8 hal!KeRaiseIrqlToSynchLevel+0x8f
    90c7ed24 83e88ea8 00000f00 00000092 0221f5e8 hal!HalEndSystemInterrupt+0x67
    90c7ed34 5e5cfa76 badb0d00 00000000 00000000 nt!KeSynchronizeExecution+0x428
    90c7ed38 badb0d00 00000000 00000000 00000000 0x5e5cfa76
    90c7ed3c 00000000 00000000 00000000 00000000 0xbadb0d00


    STACK_COMMAND:  kb

    FOLLOWUP_IP: 
    CLASSPNP!ClassCompleteRequest+11
    8d9a8498 5d              pop     ebp

    SYMBOL_STACK_INDEX:  6

    SYMBOL_NAME:  CLASSPNP!ClassCompleteRequest+11

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: CLASSPNP

    IMAGE_NAME:  CLASSPNP.SYS

    BUCKET_ID:  WRONG_SYMBOLS

    Followup: MachineOwner
    ---------
    2015年7月15日 下午 07:04

所有回覆

  • 根據這樣的訊息裡面有提到
    A driver has called the IoBuildPartialMdl()
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    感覺是有某個驅動程式有問題造成這樣的狀況
    建議您可以看安全模式能否進去OS找出可能有問題的驅動
    或者使用win7的系統修復工具試試看

    歡迎開發者或IT技術工作者同好在開發過程中遇到的問題或相關經驗分享在MSDN論壇上,供大家經驗交流學習
    並請記得將對您有幫助的回覆"標示為解答"以幫助其他尋找解答及參與社群討論的朋友們。

    Please remember to click Mark as Answer on the post that helps you. This can be beneficial to other community members reading the thread.

    2015年7月16日 上午 02:52