pastebin - collaborative debugging tool
nrubsig.kpaste.net RSS


|CcSetReadAheadGranularityEx()| crash
Posted by Anonymous on Mon 21st Jul 2025 10:47
raw | new post

  1. diff --git a/sys/nfs41sys_openclose.c b/sys/nfs41sys_openclose.c
  2. index 406c1bf..727ce21 100644
  3. --- a/sys/nfs41sys_openclose.c
  4. +++ b/sys/nfs41sys_openclose.c
  5. @@ -587,6 +587,13 @@ out:
  6.      return status;
  7.  }
  8.  
  9. +NTKERNELAPI
  10. +VOID
  11. +CcSetReadAheadGranularityEx (
  12. +    _In_ PFILE_OBJECT FileObject,
  13. +    _In_ PREAD_AHEAD_PARAMETERS ReadAheadParameters
  14. +    );
  15. +
  16.  NTSTATUS nfs41_Create(
  17.      IN OUT PRX_CONTEXT RxContext)
  18.  {
  19. @@ -1041,6 +1048,15 @@ retry_on_link:
  20.              !pVNetRootContext->read_only)
  21.          nfs41_fcb->StandardInfo.DeletePending = TRUE;
  22.  
  23. +    READ_AHEAD_PARAMETERS rap = {
  24. +        .NodeByteSize = (CSHORT)sizeof(READ_AHEAD_PARAMETERS),
  25. +        .Granularity = 64 * 1024U,
  26. +        .PipelinedRequestSize = 8 * 1024U,
  27. +        .ReadAheadGrowthPercentage = 50
  28. +    };
  29. +
  30. +    CcSetReadAheadGranularityEx(RxContext->CurrentIrpSp->FileObject, &rap);
  31. +
  32.      RxContext->Create.ReturnedCreateInformation =
  33.  
  34. This crashes with this backtrace:
  35. EXCEPTION_RECORD:  fffffd828d5479f8 -- (.exr 0xfffffd828d5479f8)
  36. ExceptionAddress: fffff805144ea4ee (nt!CcSetReadAheadGranularityEx+0x000000000000000e)
  37.    ExceptionCode: c0000005 (Access violation)
  38.   ExceptionFlags: 00000000
  39. NumberParameters: 2
  40.    Parameter[0]: 0000000000000001
  41.    Parameter[1]: 0000000000000004
  42. Attempt to write to address 0000000000000004
  43.  
  44. CONTEXT:  fffffd828d547230 -- (.cxr 0xfffffd828d547230)
  45. rax=000000000000ffff rbx=0000000000000000 rcx=ffff8e0ce020fca0
  46. rdx=fffffd828d547db0 rsi=ffff8e0cd848fb00 rdi=ffffd08a5023c8f8
  47. rip=fffff805144ea4ee rsp=fffffd828d547c38 rbp=fffffd828d547fd9
  48.  r8=0000000000000000  r9=ffffd08a5023c610 r10=ffffd08a520bb290
  49. r11=fffffd828d547c30 r12=0000000000001000 r13=0000000000000007
  50. r14=ffffd08a5023c928 r15=0000000000020000
  51. iopl=0         nv up ei pl nz ac po nc
  52. cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
  53. nt!CcSetReadAheadGranularityEx+0xe:
  54. fffff805`144ea4ee 41894004        mov     dword ptr [r8+4],eax ds:002b:00000000`00000004=????????
  55. Resetting default scope
  56.  
  57. BLACKBOXBSD: 1 (!blackboxbsd)
  58.  
  59.  
  60. BLACKBOXNTFS: 1 (!blackboxntfs)
  61.  
  62.  
  63. BLACKBOXWINLOGON: 1
  64.  
  65. PROCESS_NAME:  mount.exe
  66.  
  67. WRITE_ADDRESS:  0000000000000004
  68.  
  69. ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%p verwies auf Arbeitsspeicher bei 0x%p. Der Vorgang %s konnte im Arbeitsspeicher nicht durchgef hrt werden.
  70.  
  71. EXCEPTION_CODE_STR:  c0000005
  72.  
  73. EXCEPTION_PARAMETER1:  0000000000000001
  74.  
  75. EXCEPTION_PARAMETER2:  0000000000000004
  76.  
  77. EXCEPTION_STR:  0xc0000005
  78.  
  79. STACK_TEXT:  
  80. fffffd82`8d547c38 fffff805`19154f2f : ffffd08a`5023c610 00000000`00000000 ffff8e0c`d848fb00 ffffd08a`5023c8f8 : nt!CcSetReadAheadGranularityEx+0xe
  81. fffffd82`8d547c40 fffff805`1917e750 : ffff8e0c`e653ea20 ffff8e0c`00030000 ffffd08a`5023c928 00000000`00000007 : nfs41_driver!nfs41_Create+0x111f [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_openclose.c @ 1060]
  82. fffffd82`8d547df0 fffff805`1917f521 : ffff8e0c`e653ea20 ffff8e0c`d8593a00 ffffd08a`5023c610 fffffd82`00000000 : nfs41_driver!RxCollapseOrCreateSrvOpen+0x130 [base\fs\rdr2\rdbss\create.c @ 2034]
  83. fffffd82`8d547e90 fffff805`1917efc0 : ffff8e0c`e653ea20 fffffd82`00000007 fffffd82`8d547fb0 00000000`00000002 : nfs41_driver!RxCreateFromNetRoot+0x3b1 [base\fs\rdr2\rdbss\create.c @ 2634]
  84. fffffd82`8d547f20 fffff805`1915ecb2 : ffff8e0c`e653ea20 ffff8e0c`c0000016 ffff8e0c`e020fca0 00000000`00000000 : nfs41_driver!RxCommonCreate+0x3e0 [base\fs\rdr2\rdbss\create.c @ 3729]
  85. fffffd82`8d548040 fffff805`1917b96d : fffff805`1916e160 fffff805`00000000 00000000`00000000 ffff8e0c`dd1e96a0 : nfs41_driver!RxFsdCommonDispatch+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848]
  86. fffffd82`8d548140 fffff805`191489d7 : ffff8e0c`e5088d80 00000000`00000000 00000000`00000000 fffff805`142bc8af : nfs41_driver!RxFsdDispatch+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442]
  87. fffffd82`8d548170 fffff805`142d2205 : ffff8e0c`dd1e96a0 ffff8e0c`d8593a20 ffff8e0c`e5088e10 ffffd08a`51f49a90 : nfs41_driver!nfs41_FsdDispatch+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_driver.c @ 983]
  88. fffffd82`8d5481b0 fffff805`17d206d8 : 00000000`00000001 fffff805`17d2049a ffff8e0c`e5088e30 00000000`00000000 : nt!IofCallDriver+0x55
  89. fffffd82`8d5481f0 fffff805`17d20229 : ffffd08a`4bc23240 00000000`00000000 fffff805`17d19000 ffff8e0c`e339d400 : mup!MupiCallUncProvider+0xb8
  90. fffffd82`8d548260 fffff805`17d1feff : 00000000`00000000 00000000`00000008 ffff8e0c`e020fca0 ffff8e0c`e339d400 : mup!MupStateMachine+0x59
  91. fffffd82`8d548290 fffff805`142d2205 : ffff8e0c`e574c010 ffff8e0c`e339d400 00000000`00000000 ffff8e0c`e5088d80 : mup!MupCreate+0x1cf
  92. fffffd82`8d548300 fffff805`1652710f : ffff8e0c`e020fd00 fffffd82`8d5483f0 fffffd82`8d5483f9 fffff805`16525f7a : nt!IofCallDriver+0x55
  93. fffffd82`8d548340 fffff805`16559ee4 : fffffd82`8d5483f0 ffff8e0c`e020fcf8 ffff8e0c`dac62b00 00000000`00000000 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28f
  94. fffffd82`8d5483b0 fffff805`142d2205 : ffff8e0c`00000000 ffff8e0c`dac628f0 00000000`00000000 00000000`00000000 : FLTMGR!FltpCreate+0x324
  95. fffffd82`8d548460 fffff805`142d40c4 : ffff8e0c`e020fca0 fffff805`149b418e ffff8e0c`dac628f0 fffff805`142d3cf3 : nt!IofCallDriver+0x55
  96. fffffd82`8d5484a0 fffff805`1464f609 : fffffd82`8d548750 ffff8e0c`dac628f0 ffff8e0c`e020fd38 fffff805`14d20001 : nt!IoCallDriverWithTracing+0x34
  97. fffffd82`8d5484f0 fffff805`14642517 : ffff8e0c`dac628f0 ffff8e0c`dac628c0 ffff8e0c`e65afa60 ffffd08a`4be54c01 : nt!IopParseDevice+0x11a9
  98. fffffd82`8d548650 fffff805`146ce9aa : ffff8e0c`e65afa01 fffffd82`8d5488b8 01000000`00000040 ffff8e0c`d84eec40 : nt!ObpLookupObjectName+0x1117
  99. fffffd82`8d548820 fffff805`1460c1f1 : ffff8e0c`00000000 00000007`ffffc560 00000007`ffffc510 00000000`00000000 : nt!ObOpenObjectByNameEx+0x1fa
  100. fffffd82`8d548950 fffff805`1460b638 : 00000007`ffffc500 00000000`00020000 00000007`ffffc560 00000007`ffffc510 : nt!IopCreateFile+0xb11
  101. fffffd82`8d548a00 fffff805`14411305 : 00000000`0000015c 00000007`ffffc4c8 00000000`00000000 00000000`0000001c : nt!NtOpenFile+0x58
  102. fffffd82`8d548a90 00007fff`2deedb54 : 00007fff`15f96a8c 00000000`00000000 00000007`ffffc510 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  103. 00000007`ffffc4a8 00007fff`15f96a8c : 00000000`00000000 00000007`ffffc510 00000000`00000000 00000000`00000000 : ntdll!NtOpenFile+0x14
  104. 00000007`ffffc4b0 00000000`00000000 : 00000007`ffffc510 00000000`00000000 00000000`00000000 00000007`00000007 : cygwin1!lfind+0x2bc0
  105.  
  106.  
  107. FAULTING_SOURCE_LINE:  C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_openclose.c
  108.  
  109. FAULTING_SOURCE_FILE:  C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_openclose.c
  110.  
  111. FAULTING_SOURCE_LINE_NUMBER:  1060
  112.  
  113. FAULTING_SOURCE_CODE:  
  114.   1056:     };
  115.   1057:
  116.   1058:     CcSetReadAheadGranularityEx(RxContext->CurrentIrpSp->FileObject, &rap);
  117.   1059:
  118. > 1060:     RxContext->Create.ReturnedCreateInformation =
  119.   1061:         map_disposition_to_create_retval(params->Disposition, entry->errno);
  120.   1062:
  121.   1063:     RxContext->pFobx->OffsetOfNextEaToReturn = 1;
  122.   1064:     RxContext->CurrentIrp->IoStatus.Information =
  123.   1065:         RxContext->Create.ReturnedCreateInformation;
  124.  
  125.  
  126. SYMBOL_NAME:  nfs41_driver!nfs41_Create+111f
  127.  
  128. MODULE_NAME: nfs41_driver
  129.  
  130. IMAGE_NAME:  nfs41_driver.sys
  131.  
  132. STACK_COMMAND:  .cxr 0xfffffd828d547230 ; kb
  133.  
  134. BUCKET_ID_FUNC_OFFSET:  111f
  135.  
  136. FAILURE_BUCKET_ID:  0x27_nfs41_driver!nfs41_Create
  137.  
  138. OS_VERSION:  10.0.19041.1
  139.  
  140. BUILDLAB_STR:  vb_release
  141.  
  142. OSPLATFORM_TYPE:  x64
  143.  
  144. OSNAME:  Windows 10

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with {%HIGHLIGHT}




All content is user-submitted.
The administrators of this site (kpaste.net) are not responsible for their content.
Abuse reports should be emailed to us at