Hi:

 

I have been having problems with blue screen crashes when running colinux.  They are usually  memory corruptions, irql too high, corrupt page table list. The just started when I tried to get ndis bridge mode networking working on Portable Ubuntu which uses colinux. I never had any crashes when using the slirp mode networking.  Also, I never have any crashes when colinux is not running.

 

Many dumps had Kaspersky driver active at the time of crash.

Kaspersky support has analyzed the dump and say that their driver

Is not causing the problem.  So to prove it, I uninstalled Kaspersky and used their clean up utility to removed all components, and registry items.

It still crashed with memory corruption but this time the active module was nt .  The windbg output of this dump is:

 

kd> !analyze -v

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************

 

IRQL_NOT_LESS_OR_EQUAL (a)

An attempt was made to access a pageable (or completely invalid) address at an

interrupt request level (IRQL) that is too high.  This is usually

caused by drivers using improper addresses.

If a kernel debugger is available get the stack backtrace.

Arguments:

Arg1: 9ded4804, memory referenced

Arg2: 00000002, IRQL

Arg3: 00000000, value 0 = read operation, 1 = write operation

Arg4: 804eb3b5, address which referenced memory

 

Debugging Details:

------------------

 

 

READ_ADDRESS:  9ded4804

 

CURRENT_IRQL:  2

 

FAULTING_IP:

nt!MiDeletePte+15b

804eb3b5 8b420c          mov     eax,dword ptr [edx+0Ch]

 

CUSTOMER_CRASH_COUNT:  3

 

DEFAULT_BUCKET_ID:  DRIVER_FAULT

 

BUGCHECK_STR:  0xA

 

TRAP_FRAME:  f1c03aec -- (.trap fffffffff1c03aec)

ErrCode = 00000000

eax=038202ff ebx=c000430c ecx=012b5655 edx=9ded47f8 esi=835d2fe8 edi=000fffff

eip=804eb3b5 esp=f1c03b60 ebp=f1c03b84 iopl=0         nv up ei pl nz na pe nc

cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010206

nt!MiDeletePte+0x15b:

804eb3b5 8b420c          mov     eax,dword ptr [edx+0Ch] ds:0023:9ded4804=????????

Resetting default scope

 

LAST_CONTROL_TRANSFER:  from 804eb3b5 to 804e1892

 

STACK_TEXT: 

f1c03aec 804eb3b5 badb0d00 9ded47f8 873c63e8 nt!KiTrap0E+0x233

f1c03b84 804eb6fe c000430c 010c3000 00000000 nt!MiDeletePte+0x15b

f1c03c48 804f1d7c e122a614 010c9fff 00000000 nt!MiDeleteVirtualAddresses+0x162

f1c03cf4 8057a7c3 860fcb80 861acd00 f1c03d64 nt!MiRemoveMappedView+0x212

f1c03d38 8057a86f 85f21218 85eb8ee8 00000000 nt!MiUnmapViewOfSection+0x12b

f1c03d54 804de7ec ffffffff 860fcb80 008beeec nt!NtUnmapViewOfSection+0x54

f1c03d54 7c90e514 ffffffff 860fcb80 008beeec nt!KiFastCallEntry+0xf8

WARNING: Frame IP not in any known module. Following frames may be wrong.

008beeec 00000000 00000000 00000000 00000000 0x7c90e514

 

 

STACK_COMMAND:  kb

 

FOLLOWUP_IP:

nt!MiDeletePte+15b

804eb3b5 8b420c          mov     eax,dword ptr [edx+0Ch]

 

SYMBOL_STACK_INDEX:  1

 

FOLLOWUP_NAME:  MachineOwner

 

MODULE_NAME: nt

 

DEBUG_FLR_IMAGE_TIMESTAMP:  4ea6ba87

 

SYMBOL_NAME:  nt!MiDeletePte+15b

 

IMAGE_NAME:  memory_corruption

 

FAILURE_BUCKET_ID:  0xA_nt!MiDeletePte+15b

 

BUCKET_ID:  0xA_nt!MiDeletePte+15b

 

Followup: MachineOwner

---------

I am using the stable snapshot of colinux dated 2/16/11

Linux version 2.6.33.7-co-0.7.9 (hn@hn-dt) (gcc version 4.4.1 [gcc-4_4-branch revision 150839] (SUSE Linux) ) #1 PREEMPT Wed Feb 16 23:51:21 UTC 2011

 

The linux config file:

 

kernel=vmlinux

ro

initrd=initrd.gz

setcobd=async

cobd0="F:\P_Ubuntu\Portable_Ubuntu_V4\images\rootfs.img"

cofs0="F:\P_Ubuntu\Portable_Ubuntu_V4"

cofs1="C:\DOCUME~1\RANGER~1\LOCALS~1\Temp"

root=/dev/cobd0

cobd1="C:\DOCUME~1\RANGER~1\LOCALS~1\Temp\swap.img"

hdc=\Device\Cdrom0

cofs2=c:\

exec0="F:\P_Ubuntu\Portable_Ubuntu_V4\pulseaudio\pulseaudio.exe"

mem=384

eth0=ndis-bridge,"Local Area Connection",00:ff:75:39:D3:C2

 

This crash is fairly easy to create immediately when using XEMACS for editing. However, it takes longer to crash if you are just surfing the web.

 

Since this is a memory corruption the program/driver active at the time of the crash is the victim of the corruption and it is likely some other driver/program caused it, in this case colinux.

 

How to I submit a problem report on this and what additional information does the Colinux team need to solve this problem? 

 

Thanks for your help.

Regards

Bob