Stop 0x19 in a Large Pool Allocation

Hello all, Scott Olson here again to share another interesting issue I recently debugged with pool corruption and found that using special pool does not work with large pool allocations (pool allocations greater than a PAGE_SIZE).   Here is an example of a valid large page allocation. Notice the size is 0x1fb0 and a PAGE_SIZE…

2

GES Team

                            


Exam preparation information for Exam 71-660

Exam 71-660 TS: Windows Internals      Published:      October 10, 2008 (in development)      Language(s):      English      Audience(s):      Developers, IT Professionals, Partners      Technology:      Windows Vista      Type:      Proctored Exam      About this Exam This exam validates deep technical skills in the area of Windows Internals. Including troubleshooting operating systems that are not performing as expected…

1

Platforms GES Team Photos

Platforms GES – Texas     Platforms GES – North Carolina


This didn’t puzzle the Debug Ninja, how about you? – The Complete Debug

This debug is quite long, for readability purposes we kept the initial blog post short and the complete debug is on this page.   1: kd> .bugcheck Bugcheck code 000000D1 Arguments e074281d 00000002 00000001 ba502493 1: kd> kv ChildEBP RetAddr  Args to Child f78b6544 ba502493 badb0d00 00000001 00000000 nt!_KiTrap0E+0x2a7 (FPO: [0,0] TrapFrame @ f78b6544) f78b65e0…

1

ntdebug blog test page 2

This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created…


ntdebug blog test page

This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created for testing the survey proof-of-concept.  This ntdebug page was created…


NT Debugging blog history

Reminder Windows NT Debugging Blog Live Chat 2Posted Monday, March 2nd, 2009   Debug Fundamentals Exercise 4: The GAMEOVER exercise Posted Friday, Februrary 27th, 2009 (Chris) Windows NT Debugging Blog Live Chat 2Posted Thursday, Februrary 26th, 2009 (East) Easily Resolving an Event Viewer Error using a Process Memory Dump Posted Friday, Februrary 16th, 2009 (Ryan) Debugging a Hang at “Applying…