driver verifier detected violation 블루스크린

verifier /standard /all

실행시 발생됩니다.

kd> !analyze -v

Loading Kernel Symbols

...............................................................

........................................

Loading User Symbols

Loading unloaded module list

...

---

•                                                                         *
  

•                    Bugcheck Analysis                                    *
  

•                                                                         *
  

---

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)

A device driver attempting to corrupt the system has been caught. This is

because the driver was specified in the registry as being suspect (by the

administrator) and the kernel has enabled substantial checking of this driver.

If the driver attempts to corrupt the system, BugChecks 0xC4, 0xC1 and 0xA will

be among the most commonly seen crashes.

Arguments:

Arg1: 0000000000000083, MmMapIoSpace called to map, but the caller hasn't locked down the MDL pages.

Arg2: 00000000000e0000, Starting physical address to map.

Arg3: 00000000000fffff, Number of bytes to map.

Arg4: 0000000000000104, The first page frame number that isn't locked down.

Debugging Details:

---

*** WARNING: Unable to verify timestamp for EZSocketGOT.sys

*** WARNING: Check Image - Checksum mismatch - Dump: 0x10d0d, File: 0x10a47 - C:\ProgramData\Dbg\sym\nsiproxy.sys\7126B05512000\nsiproxy.sys

KEY_VALUES_STRING: 1

Key  : Analysis.CPU.mSec

Value: 1765

Key  : Analysis.Elapsed.mSec

Value: 6312

Key  : Analysis.IO.Other.Mb

Value: 0

Key  : Analysis.IO.Read.Mb

Value: 1

Key  : Analysis.IO.Write.Mb

Value: 0

Key  : Analysis.Init.CPU.mSec

Value: 703

Key  : Analysis.Init.Elapsed.mSec

Value: 10290

Key  : Analysis.Memory.CommitPeak.Mb

Value: 72

Key  : Analysis.Version.DbgEng

Value: 10.0.29547.1002

Key  : Analysis.Version.Description

Value: 10.2602.27.2 amd64fre

Key  : Analysis.Version.Ext

Value: 1.2602.27.2

Key  : Bugcheck.Code.LegacyAPI

Value: 0xc4

Key  : Bugcheck.Code.TargetModel

Value: 0xc4

Key  : Failure.Bucket

Value: 0xc4_83_VRF_EZSocketGOT!unknown_function

Key  : Failure.Hash

Value: {531e92a9-56ce-3687-4fd0-44ca736c3112}

Key  : Hypervisor.RootFlags.AccessStats

Value: 0

Key  : Hypervisor.RootFlags.CrashdumpEnlightened

Value: 0

Key  : Hypervisor.RootFlags.CreateVirtualProcessor

Value: 0

Key  : Hypervisor.RootFlags.DisableHyperthreading

Value: 0

Key  : Hypervisor.RootFlags.HostTimelineSync

Value: 0

Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled

Value: 0

Key  : Hypervisor.RootFlags.IsHyperV

Value: 0

Key  : Hypervisor.RootFlags.LivedumpEnlightened

Value: 0

Key  : Hypervisor.RootFlags.MapDeviceInterrupt

Value: 0

Key  : Hypervisor.RootFlags.MceEnlightened

Value: 0

Key  : Hypervisor.RootFlags.Nested

Value: 0

Key  : Hypervisor.RootFlags.StartLogicalProcessor

Value: 0

Key  : Hypervisor.RootFlags.Value

Value: 0

Key  : Hypervisor.RootFlags.ValueHex

Value: 0x0

Key  : WER.OS.Branch

Value: vb_release

Key  : WER.OS.Version

Value: 10.0.19041.1

BUGCHECK_CODE: c4

BUGCHECK_P1: 83

BUGCHECK_P2: e0000

BUGCHECK_P3: fffff

BUGCHECK_P4: 104

FILE_IN_CAB: 040526-5656-01dmp

FAULTING_THREAD: ffffc10e73af1040

BLACKBOXNTFS: 1 (!blackboxntfs)

PROCESS_NAME: System

STACK_TEXT:

ffff8a0b6dfa2118 fffff80711feae44 : 00000000000000c4 0000000000000083 00000000000e0000 00000000000fffff : nt!KeBugCheckEx

ffff8a0b6dfa2120 fffff80711fdff4d : 00000000000e0000 00000000000000dc 00000000000030c0 0000000000000104 : nt!VerifierBugCheckIfAppropriate+0xe0

ffff8a0b6dfa2160 fffff80712000a09 : 00000000000e0000 ffff8a0b6dfa2270 0000000000000000 00000000000fffff : nt!MmCheckMapIoSpace+0x95

ffff8a0b6dfa21a0 fffff80fa9b8116c : 00000000000e0000 00000000000fffff fffff80fa9b9e610 00000000000e0000 : nt!VerifierMmMapIoSpace+0x59

ffff8a0b6dfa21e0 00000000000e0000 : 00000000000fffff fffff80fa9b9e610 00000000000e0000 00000000000e0000 : EZSocketGOT+0x1116c

ffff8a0b6dfa21e8 00000000000fffff : fffff80fa9b9e610 00000000000e0000 00000000000e0000 fffff80700000000 : 0xe0000

ffff8a0b6dfa21f0 fffff80fa9b9e610 : 00000000000e0000 00000000000e0000 fffff80700000000 ffffffff80000128 : 0xfffff

ffff8a0b6dfa21f8 00000000000e0000 : 00000000000e0000 fffff80700000000 ffffffff80000128 ffff9c07c57b6fe0 : EZSocketGOT+0x2e610

ffff8a0b6dfa2200 00000000000e0000 : fffff80700000000 ffffffff80000128 ffff9c07c57b6fe0 0000000000000000 : 0xe0000

ffff8a0b6dfa2208 fffff80700000000 : ffffffff80000128 ffff9c07c57b6fe0 0000000000000000 fffff80fa9b81462 : 0xe0000

ffff8a0b6dfa2210 ffffffff80000128 : ffff9c07c57b6fe0 0000000000000000 fffff80fa9b81462 00000000000e0000 : 0xfffff807`00000000

ffff8a0b6dfa2218 ffff9c07c57b6fe0 : 0000000000000000 fffff80fa9b81462 00000000000e0000 0000000000000000 : 0xffffffff`80000128

ffff8a0b6dfa2220 0000000000000000 : fffff80fa9b81462 00000000000e0000 0000000000000000 ffff8a0b6dfa2500 : 0xffff9c07`c57b6fe0

SYMBOL_NAME: EZSocketGOT+1116c

MODULE_NAME: EZSocketGOT

IMAGE_NAME: EZSocketGOT.sys

STACK_COMMAND: .process /r /p 0xffffc10e70f0c140; .thread /r /p 0xffffc10e73af1040 ; kb

BUCKET_ID_FUNC_OFFSET: 1116c

FAILURE_BUCKET_ID: 0xc4_83_VRF_EZSocketGOT!unknown_function

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {531e92a9-56ce-3687-4fd0-44ca736c3112}

Followup: MachineOwner

---