AdamiPL

Log z MS debugera

Microsoft (R) Windows Debugger Version 6.3.9600.17298 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\010215-18312-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.17476.amd64fre.winblue_r5.141029-1500
Machine Name:
Kernel base = 0xfffff800`02c16000 PsLoadedModuleList = 0xfffff800`02eef250
Debug session time: Fri Jan  2 13:33:16.903 2015 (UTC + 1:00)
System Uptime: 0 days 0:06:15.628
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9C, {0, ffffd0018ac49f60, 0, 0}

Probably caused by : win32k.sys ( win32k!UserSessionSwitchLeaveCrit+b )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MACHINE_CHECK_EXCEPTION (9c)
A fatal Machine Check Exception has occurred.
KeBugCheckEx parameters;
    x86 Processors
        If the processor has ONLY MCE feature available (For example Intel
        Pentium), the parameters are:
        1 - Low  32 bits of P5_MC_TYPE MSR
        2 - Address of MCA_EXCEPTION structure
        3 - High 32 bits of P5_MC_ADDR MSR
        4 - Low  32 bits of P5_MC_ADDR MSR
        If the processor also has MCA feature available (For example Intel
        Pentium Pro), the parameters are:
        1 - Bank number
        2 - Address of MCA_EXCEPTION structure
        3 - High 32 bits of MCi_STATUS MSR for the MCA bank that had the error
        4 - Low  32 bits of MCi_STATUS MSR for the MCA bank that had the error
    IA64 Processors
        1 - Bugcheck Type
            1 - MCA_ASSERT
            2 - MCA_GET_STATEINFO
                SAL returned an error for SAL_GET_STATEINFO while processing MCA.
            3 - MCA_CLEAR_STATEINFO
                SAL returned an error for SAL_CLEAR_STATEINFO while processing MCA.
            4 - MCA_FATAL
                FW reported a fatal MCA.
            5 - MCA_NONFATAL
                SAL reported a recoverable MCA and we don't support currently
                support recovery or SAL generated an MCA and then couldn't
                produce an error record.
            0xB - INIT_ASSERT
            0xC - INIT_GET_STATEINFO
                  SAL returned an error for SAL_GET_STATEINFO while processing INIT event.
            0xD - INIT_CLEAR_STATEINFO
                  SAL returned an error for SAL_CLEAR_STATEINFO while processing INIT event.
            0xE - INIT_FATAL
                  Not used.
        2 - Address of log
        3 - Size of log
        4 - Error code in the case of x_GET_STATEINFO or x_CLEAR_STATEINFO
    AMD64 Processors
        1 - Bank number
        2 - Address of MCA_EXCEPTION structure
        3 - High 32 bits of MCi_STATUS MSR for the MCA bank that had the error
        4 - Low  32 bits of MCi_STATUS MSR for the MCA bank that had the error
Arguments:
Arg1: 0000000000000000
Arg2: ffffd0018ac49f60
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0x9C_GenuineIntel

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  firefox.exe

CURRENT_IRQL:  f

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre

LAST_CONTROL_TRANSFER:  from fffff800033e1745 to fffff80002d66aa0

STACK_TEXT:  
ffffd001`8ac49f28 fffff800`033e1745 : 00000000`0000009c 00000000`00000000 ffffd001`8ac49f60 00000000`00000000 : nt!KeBugCheckEx
ffffd001`8ac49f30 fffff800`033e1b9f : 00000000`00000008 ffffd001`8ac4a230 00000000`00000000 00000000`00000008 : hal!HalpMcaReportError+0xf5
ffffd001`8ac4a080 fffff800`033e1ccf : ffffe000`143f60c0 ffffd001`8ac4a2b0 00000000`00000000 00000000`00000000 : hal!HalpMceHandlerWithRendezvous+0x12b
ffffd001`8ac4a0b0 fffff800`02d715bb : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : hal!HalHandleMcheck+0x40
ffffd001`8ac4a0e0 fffff800`02d71371 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxMcheckAbort+0x7b
ffffd001`8ac4a220 fffff960`001be54b : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiMcheckAbort+0x171
ffffd000`32f6eba0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!UserSessionSwitchLeaveCrit+0xb


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!UserSessionSwitchLeaveCrit+b
fffff960`001be54b 4585c0          test    r8d,r8d

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  win32k!UserSessionSwitchLeaveCrit+b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  54335e2a

IMAGE_VERSION:  6.3.9600.17393

BUCKET_ID_FUNC_OFFSET:  b

FAILURE_BUCKET_ID:  0x9C_GenuineIntel_win32k!UserSessionSwitchLeaveCrit

BUCKET_ID:  0x9C_GenuineIntel_win32k!UserSessionSwitchLeaveCrit

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x9c_genuineintel_win32k!usersessionswitchleavecrit

FAILURE_ID_HASH:  {7086f301-16c3-09c5-2054-d27dbafac35d}

Followup: MachineOwner
---------