[ros-bugs] [Bug 1362] New: cache_manager_rewrite: Crash in memcpy in CcCopyWrite

[ReactOS.Bugzilla at reactos.org]

http://www.reactos.org/bugzilla/show_bug.cgi?id=1362

           Summary: cache_manager_rewrite: Crash in memcpy in CcCopyWrite
           Product: ReactOS
           Version: unspecified
          Platform: VMWare 5
               URL: http://svn.reactos.org/svn/reactos/branches/cache_manage
                    r_rewrite/reactos/
        OS/Version: ReactOS
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Kernel
        AssignedTo: ros-bugs at reactos.org
        ReportedBy: maarten.paul at bosma.de
         QAContact: ros-bugs at reactos.org


In the cache_manager_rewrite branch the function CcCopyWrite crashes sometimes
in the memcpy (cc/copy.c:354). This problem does for example sometimes (!) occur
when hitting the next button in the first dialog of the Vmware Tools Installer,
if it does not you can just click back and next again until it does. 

Normally the page fault handler should allocate the memory and read the file,
but the problem is that IoPageRead (mm/section.c:877) returns
STATUS_INVALID_PARAMETER and so it does not and the memcpy crashes. The blue
screen looks like this:

-----------------------------------

A problem has been detected and ReactOS has been shut down to prevent damage to
your computer.

The problem seems to be caused by the following file: ntoskrnl.exe

Technical information:

*** STOP: 0x0000001E (0xc0000005,0x8007e9a1,0x00000000,0xd0ca1000)

***    ntoskrnl.exe - Address 0x8007e9a1 base at 0x80000000, DateStamp 0x0

Page Fault Exception: 14(2)
Processor: 0 CS:EIP 8:8007e9a1 <ntoskrnl.exe:7e9a1
(lib\string\i386\memcpy_asm.s:35 (memcpy))>
cr2 d0ca1000 cr3 4445000 Proc: 818b8960 Pid: 140 <MSIEXEC.EXE> Thrd: 818bd2c8
Tid: 144
DS 23 ES 23 FS 30 GS 0
EAX: d0ca1000   EBX: 00000080   ECX: 00000020
EDX: 00000080   EBP: 9e8df628   ESI: 8d4046e8   ESP: 9e8df5ac
EDI: d0ca1000   EFLAGS: 00010212 kESP 9e8df5ac kernel stack base 9e8da000
Frames:
<ntoskrnl.exe:6da6 (./ntoskrnl/cc/copy.c:354 (CcCopyWrite))>
<vfatfs.sys:aed0 (drivers/filesystems/vfat/rw.c:994 (VfatWrite))>
<vfatfs.sys:97e4 (drivers/filesystems/vfat/misc.c:111 (VfatDispatchRequest))>
<vfatfs.sys:9b4e (drivers/filesystems/vfat/misc.c:167 (VfatBuildRequest))>
<ntoskrnl.exe:20bc4 (./ntoskrnl/io/irp.c:1076 (IofCallDriver))>
<ntoskrnl.exe:34dfe (ntoskrnl/io/file.c:3965 (NtWriteFile))>
<ntoskrnl.exe:66b07 (ntoskrnl\ke\i386\trap.s:306 (KiFastCallEntry))>
<KERNEL32.dll:d4ab (./dll/win32/kernel32/file/rw.c:97 (WriteFile))>

-----------------------------------

I will try to investigate this a bit further today.

-- 
Configure bugmail: http://www.reactos.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
You are the QA contact for the bug, or are watching the QA contact.