Bug Check in Marea.c

[James Tabor]

Hi all,
With real hardware and revision 20802, At the end of first stage and after hitting
the Finish button, I can reproduce this every time too,


KeBugCheck at ./ntoskrnl/mm/marea.c:901
A problem has been detected and ReactOS has been shut down to prevent damage to
your computer.

Technical information:

*** STOP: 0x00000000 (0x00000000,0x00000000,0x00000000,0x00000000)

Frames:
<ntoskrnl.exe:1676 (./ntoskrnl/ke/bug.c:483 (KeBugCheckEx))>
<ntoskrnl.exe:168d (./ntoskrnl/ke/bug.c:504 (KeBugCheck))>
<ntoskrnl.exe:4342b (./ntoskrnl/mm/marea.c:0 ())>
<ntoskrnl.exe:434c4 (./ntoskrnl/mm/process.c:0 ())>
<ntoskrnl.exe:55c12 (./ntoskrnl/ps/kill.c:200 (PspDeleteThread))>
<ntoskrnl.exe:50cdd (./ntoskrnl/ob/object.c:0 ())>
<ntoskrnl.exe:518ce (./ntoskrnl/ob/handle.c:254 (ObpDeleteHandle))>
<ntoskrnl.exe:51a0b (./ntoskrnl/ob/handle.c:1112 (NtClose))>
<ntoskrnl.exe:6440c (ntoskrnl/ke/i386/syscall.S:372 (KiSystemService))>
<KERNEL32.dll:a697 (./lib/kernel32/misc/handle.c:0 ())>

Entered debugger on embedded INT3 at 0x0008:0x80073b86.
kdb:> bt
Eip:
<ntoskrnl.exe:73b87 (lib/rtl/i386/debug_asm.S:28 (DbgBreakPointWithStatus))>
Frames:
<ntoskrnl.exe:1676 (./ntoskrnl/ke/bug.c:483 (KeBugCheckEx))>
<ntoskrnl.exe:168d (./ntoskrnl/ke/bug.c:504 (KeBugCheck))>
<ntoskrnl.exe:4342b (./ntoskrnl/mm/marea.c:0 ())>
<ntoskrnl.exe:434c4 (./ntoskrnl/mm/process.c:0 ())>
<ntoskrnl.exe:55c12 (./ntoskrnl/ps/kill.c:200 (PspDeleteThread))>
<ntoskrnl.exe:50cdd (./ntoskrnl/ob/object.c:0 ())>
<ntoskrnl.exe:518ce (./ntoskrnl/ob/handle.c:254 (ObpDeleteHandle))>
<ntoskrnl.exe:51a0b (./ntoskrnl/ob/handle.c:1112 (NtClose))>
<ntoskrnl.exe:6440c (ntoskrnl/ke/i386/syscall.S:372 (KiSystemService))>
<KERNEL32.dll:a697 (./lib/kernel32/misc/handle.c:0 ())>
<winlogon.exe:1ae2>
<winlogon.exe:20f6>
<winlogon.exe:339a>
<winlogon.exe:11e7>
<winlogon.exe:1258>
<00000000>
kdb:>


I go into ntoskrnl/mm/marea.c and at line 891 I change DPRINT to DPRINT1, now
the system reboots and runs normal. I even have Abiword running with Winefile.

Thanks,
James

[James Tabor]

James Tabor wrote:
>   Hi all,
>  With real hardware and revision 20802, At the end of first stage and 
>  after hitting
>  the Finish button, I can reproduce this every time too,
>  
>  
>  KeBugCheck at ./ntoskrnl/mm/marea.c:901
>  A problem has been detected and ReactOS has been shut down to prevent 
>  damage to
>  your computer.
>  
>  Technical information:
>  
>  *** STOP: 0x00000000 (0x00000000,0x00000000,0x00000000,0x00000000)
>  
>  Frames:
>  <ntoskrnl.exe:1676 (./ntoskrnl/ke/bug.c:483 (KeBugCheckEx))>
>  <ntoskrnl.exe:168d (./ntoskrnl/ke/bug.c:504 (KeBugCheck))>
>  <ntoskrnl.exe:4342b (./ntoskrnl/mm/marea.c:0 ())>
>  <ntoskrnl.exe:434c4 (./ntoskrnl/mm/process.c:0 ())>
>  <ntoskrnl.exe:55c12 (./ntoskrnl/ps/kill.c:200 (PspDeleteThread))>
>  <ntoskrnl.exe:50cdd (./ntoskrnl/ob/object.c:0 ())>
>  <ntoskrnl.exe:518ce (./ntoskrnl/ob/handle.c:254 (ObpDeleteHandle))>
>  <ntoskrnl.exe:51a0b (./ntoskrnl/ob/handle.c:1112 (NtClose))>
>  <ntoskrnl.exe:6440c (ntoskrnl/ke/i386/syscall.S:372 (KiSystemService))>
>  <KERNEL32.dll:a697 (./lib/kernel32/misc/handle.c:0 ())>
>  
>  Entered debugger on embedded INT3 at 0x0008:0x80073b86.
>  kdb:> bt
>  Eip:
>  <ntoskrnl.exe:73b87 (lib/rtl/i386/debug_asm.S:28 
>  (DbgBreakPointWithStatus))>
>  Frames:
>  <ntoskrnl.exe:1676 (./ntoskrnl/ke/bug.c:483 (KeBugCheckEx))>
>  <ntoskrnl.exe:168d (./ntoskrnl/ke/bug.c:504 (KeBugCheck))>
>  <ntoskrnl.exe:4342b (./ntoskrnl/mm/marea.c:0 ())>
>  <ntoskrnl.exe:434c4 (./ntoskrnl/mm/process.c:0 ())>
>  <ntoskrnl.exe:55c12 (./ntoskrnl/ps/kill.c:200 (PspDeleteThread))>
>  <ntoskrnl.exe:50cdd (./ntoskrnl/ob/object.c:0 ())>
>  <ntoskrnl.exe:518ce (./ntoskrnl/ob/handle.c:254 (ObpDeleteHandle))>
>  <ntoskrnl.exe:51a0b (./ntoskrnl/ob/handle.c:1112 (NtClose))>
>  <ntoskrnl.exe:6440c (ntoskrnl/ke/i386/syscall.S:372 (KiSystemService))>
>  <KERNEL32.dll:a697 (./lib/kernel32/misc/handle.c:0 ())>
>  <winlogon.exe:1ae2>
>  <winlogon.exe:20f6>
>  <winlogon.exe:339a>
>  <winlogon.exe:11e7>
>  <winlogon.exe:1258>
>  <00000000>
>  kdb:>
>  
>  
>  I go into ntoskrnl/mm/marea.c and at line 891 I change DPRINT to 
>  DPRINT1, now
>  the system reboots and runs normal. I even have Abiword running with 
>  Winefile.
>  
>  Thanks,
>  James
>   
Need to add this,
I exit from any app including setup screen app I get this,

(./subsys/win32k/ntuser/ntstubs.c:231) NtUserEnumDisplayDevices() is UNIMPLEMENT
ED!
(./subsys/win32k/ntuser/ntstubs.c:231) NtUserEnumDisplayDevices() is UNIMPLEMENT
ED!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle 0x1c0
5027e, caller needs to get ownership first!!!
(./subsys/win32k/objects/dc.c:2703) display flag : 1
(./subsys/win32k/objects/dc.c:2792) set CDS_UPDATEREGISTRY
(lib/rtl/res.c:152) root 77ea0000 dir 77ea0b08 name SYSMENU ret 77ea0b80
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle 0x290
502b2, caller needs to get ownership first!!!
(./subsys/win32k/objects/dc.c:2703) display flag : 1
(./subsys/win32k/objects/dc.c:2792) set CDS_UPDATEREGISTRY
(lib/rtl/res.c:152) root 77ea0000 dir 77ea0b08 name SYSMENU ret 77ea0b80
(lib/rtl/exception.c:75) RtlRaiseStatus(Status 0xc0000005)
(./subsys/win32k/ntuser/message.c:1125) Failed to copy message to kernel: invali
d usermode buffer
(./ntoskrnl/mm/marea.c:893) MmFreeMemoryArea(AddressSpace 800cb588, BaseAddress
9f2dd000, FreePageContext 00000000)

Than!! A Reboot!
Thanks,
James