<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.technet.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Kernel dump analysis - Bugcheck 0xA (IRQL_NOT_LESS_OR_EQUAL)</title><link>http://blogs.technet.com/marcelofartura/archive/2008/06/25/kernel-mode.aspx</link><description>Yet another kernel memory dump to be analyzed - The bugcheck this time is the 0xA - IRQL_NOT_LESS_OR_EQUAL. To better understand what this message means we would need a little background on Windows Internals but basically when executing anything at a</description><dc:language>en-US</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>re: Kernel dump analysis - Bugcheck 0xA (IRQL_NOT_LESS_OR_EQUAL)</title><link>http://blogs.technet.com/marcelofartura/archive/2008/06/25/kernel-mode.aspx#3210731</link><pubDate>Mon, 09 Mar 2009 14:29:18 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3210731</guid><dc:creator>n-rico</dc:creator><description>&lt;P&gt;Hello Marcelo,&lt;/P&gt;
&lt;P&gt;I am trying to apply your debugging steps to a few 0xA dumps we have had over the last few weeks, all were 'probably caused' by TDI.sys. (so I'm guessing something network related)&lt;/P&gt;
&lt;P&gt;The last function called before the stack was: hal!KeAcquireSpinLockRaiseToSynch+0xe&lt;/P&gt;
&lt;P&gt;Any tips on further analyzing this problem? I really find this stuff interesting but I'm guessing I would have to aquire some Assembler knowledge to be able to debug these kind of issues :S&lt;/P&gt;
&lt;P&gt;# ChildEBP RetAddr &amp;nbsp;Args to Child &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;&lt;/P&gt;
&lt;P&gt;00 b7104a04 80a5a3de badb0d00 00000000 80a5da73 nt!KiTrap0E+0x2a7 (FPO: [0,0] TrapFrame @ b7104a04)&lt;/P&gt;
&lt;P&gt;01 b7104a74 b4bb1b6c b7104ae0 8ab6ae48 00000000 hal!KeAcquireSpinLockRaiseToSynch+0xe (FPO: [0,0,0])&lt;/P&gt;
&lt;P&gt;02 b7104a8c b4bb750d 89351002 00000000 00000029 tcpip!TCPDataRequestComplete+0x40 (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;03 b7104aac b4bb74ad b7104ae0 00003700 88e3e1a8 tcpip!CompleteSends+0x31 (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;04 b7104aec b4bb6cbc 00000029 3b806af8 8c51e700 tcpip!TcpFastReceive+0x390 (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;05 b7104bc8 b4bb32bf 8cb63f48 0100007f 0100007f tcpip!TCPRcv+0x723 (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;06 b7104c28 b4bb14de 00000024 8cb63f48 b4bb6a6d tcpip!DeliverToUser+0x189 (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;07 b7104cb8 b4bbd163 8cb63f48 b7104d30 00000014 tcpip!IPRcvPacket+0x686 (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;08 b7104d64 f7658064 b4bf2ee0 8cb63f48 8cf50660 tcpip!LoopXmitRtn+0x195 (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;09 b7104d80 8088043d 8cb63f48 00000000 8cf50660 TDI!CTEpEventHandler+0x32 (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;0a b7104dac 80949b7c b4bf2ee0 00000000 00000000 nt!ExpWorkerThread+0xeb (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;0b b7104ddc 8088e062 80880352 00000001 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo])&lt;/P&gt;
&lt;P&gt;0c 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16&lt;/P&gt;
&lt;P&gt;3: kd&amp;gt; .trap b7104a04&lt;/P&gt;
&lt;P&gt;ErrCode = 00000002&lt;/P&gt;
&lt;P&gt;eax=00000002 ebx=00000000 ecx=00000026 edx=00000000 esi=89351040 edi=00000002&lt;/P&gt;
&lt;P&gt;eip=80a5a3de esp=b7104a78 ebp=b7104a8c iopl=0 &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; nv up ei pl nz na po nc&lt;/P&gt;
&lt;P&gt;cs=0008 &amp;nbsp;ss=0010 &amp;nbsp;ds=0023 &amp;nbsp;es=0023 &amp;nbsp;fs=0030 &amp;nbsp;gs=0000 &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; efl=00010202&lt;/P&gt;
&lt;P&gt;hal!KeAcquireSpinLockRaiseToSynch+0xe:&lt;/P&gt;
&lt;P&gt;80a5a3de f00fba2900 &amp;nbsp; &amp;nbsp; &amp;nbsp;lock bts dword ptr [ecx],0 &amp;nbsp; ds:0023:00000026=????????&lt;/P&gt;
&lt;P&gt;Sincerely,&lt;/P&gt;
&lt;P&gt;Enrico Klein&lt;/P&gt;</description></item></channel></rss>