ofsmount.exe VHDX disk
Posted by Anonymous on Thu 13th Aug 2026 17:07
raw | new post

ofsmount.exe VHDX disk handling causes a crash in callback code like this:
---- snip ----
00000039`259fca60 00007ffd`8a81f8a5 ucrtbased!free_dbg_nolock(void * block = 0x00000039`259fcc74, int block_use = 0n1)+0x59a [d:\th\minkernel\crts\ucrt\src\appcrt\heap\debug_heap.cpp @ 976]
00000039`259fcad0 00007ffd`8bf58750 ucrtbased!_free_dbg(void * block = 0x00000039`259fcc74, int block_use = 0n1)+0x55 [d:\th\minkernel\crts\ucrt\src\appcrt\heap\debug_heap.cpp @ 1011]
00000039`259fcb10 00007ff6`9f3f5276 libtirpc!xdr_bytes(struct __rpc_xdr * xdrs = 0x00000196`0dc5edb0, char ** cpp = 0x00000039`259fcbd0, unsigned int * sizep = 0x00000039`259fcc70, unsigned int maxsize = 0x2000)+0x160 [C:\cygwin64\home\roland_mainz\
work\msnfs41_uidmapping\ms-nfs41-client\libtirpc\src\xdr.c @ 691]
00000039`259fcbb0 00007ff6`9f3ab8c9 nfsd!xdr_fattr4(struct __rpc_xdr * xdr = 0x00000196`0dc5edb0, struct __fattr4 * fattr = 0x00000039`259fcc60)+0x56 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_xdr.c @ 165]
00000039`259fcc30 00007ffd`8bf59b4f nfsd!op_cb_getattr_res(struct __rpc_xdr * xdr = 0x00000196`0dc5edb0, struct cb_getattr_res * res = 0x00000196`0dc576d8)+0xc9 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\callback_x
dr.c @ 422]
00000039`259feeb0 00007ff6`9f3acd82 libtirpc!xdr_union(struct __rpc_xdr * xdrs = 0x00000196`0dc5edb0, int * dscmp = 0x00000196`0dc576d0, char * unp = 0x00000196`0dc576d8 "", struct xdr_discrim * choices = 0x00007ff6`9f429de0, <function> * dfault = 0
x00000000`00000000)+0x6f [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\libtirpc\src\xdr.c @ 746]
00000039`259fef30 00007ffd`8bf59d80 nfsd!cb_compound_resop(struct __rpc_xdr * xdr = 0x00000196`0dc5edb0, struct cb_resop * res = 0x00000196`0dc576d0)+0x42 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\callback_xdr.c @
 893]
00000039`259fefc0 00007ff6`9f3ae478 libtirpc!xdr_array(struct __rpc_xdr * xdrs = 0x00000196`0dc5edb0, char ** addrp = 0x00000196`0de1c718, unsigned int * sizep = 0x00000196`0de1c720, unsigned int maxsize = 0x10, unsigned int elsize = 0x370, <functio
n> * elproc = 0x00007ff6`9f3acd40)+0x170 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\libtirpc\src\xdr_array.c @ 118]
00000039`259ff080 00007ffd`8bf4241f nfsd!proc_cb_compound_res(struct __rpc_xdr * xdr = 0x00000196`0dc5edb0, struct cb_compound_res * res = 0x00000196`0de1c6d0)+0x108 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\callb
ack_xdr.c @ 913]
00000039`259ff110 00007ffd`8a84a1bc libtirpc!clnt_cb_thread(void * args = 0x00000196`0de1c630)+0x5ef [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\libtirpc\src\clnt_vc.c @ 362]
00000039`259ff790 00007ffd`8a849e13 ucrtbased!invoke_thread_procedure(<function> * procedure = 0x00007ffd`8bf41e30, void * context = 0x00000196`0de1c630)+0x2c [d:\th\minkernel\crts\ucrt\src\appcrt\startup\thread.cpp @ 92]
00000039`259ff7d0 00007ffd`c4887374 ucrtbased!thread_start<unsigned int (void * parameter = 0x00000196`0dcef3a0)+0x93 [d:\th\minkernel\crts\ucrt\src\appcrt\startup\thread.cpp @ 115]
00000039`259ff820 00007ffd`c601cc91 KERNEL32!BaseThreadInitThunk+0x14
00000039`259ff850 00000000`00000000 ntdll!RtlUserThreadStart+0x21
---- snip ----