ckratsch
asked on
BSOD 0xc2 BAD_POOL_CALLER
Here's a doozie.
I've been trying to repair this Windows XP Pro computer, which decided to bluescreen with 0xc2, BAD_POOL_CALLER. It wouldn't load up, so I decided to reinstall (it needed that anyway). After reinstalling, everything runs fine for a few boots, then the machine hangs at the splash screen - but it will boot into Safe Mode. I have run the minidump through WinDbg, and I'll attach those results at the bottom. Basically, it's saying "probably hardware." I took the hard drive out and put it in a completely different computer, but the effect is still there. Ordinarily, I would suspect the hard drive ... but it's booting into safe mode, so I really don't know.
Any thoughts are greatly appreciated. Here's the bugcheck info:
BugCheck C2, {7, cd4, f7fef7fe, e2e14008}
GetUlongFromAddress: unable to read from 80560070
unable to get pool big page table - either wrong symbols or pool tagging is disabled
e2e14000 is freed (or corrupt) pool
Bad previous allocation size @e2e14000, last size was 0
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFE2E14000)
***
*** Use !poolval e2e14000 for more details.
***
*** WARNING: Unable to verify timestamp for hal.dll
GetUlongFromAddress: unable to read from 80560070
unable to get pool big page table - either wrong symbols or pool tagging is disabled
e2e14000 is freed (or corrupt) pool
Bad previous allocation size @e2e14000, last size was 0
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFE2E14000)
***
*** Use !poolval e2e14000 for more details.
***
Probably caused by : hardware ( nt!_ValidateEH3RN+1 )
Followup: MachineOwner
---------
kd> !poolval e2e14000
Pool page e2e14000 region is Unknown
Validating Pool headers for pool page: e2e14000
Pool page [ e2e14000 ] is INVALID.
Analyzing linked list...
[ e2e14000 ]: invalid previous size [ 0x1fe ] should be [ 0x0 ]
[ e2e14000 ]: invalid block size [ 0x1fe ] should be [ 0x6 ]
Scanning for single bit errors...
None found
kd> !analyze -v
************************** ********** ********** ********** ********** ********** ***
* *
* Bugcheck Analysis *
* *
************************** ********** ********** ********** ********** ********** ***
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: f7fef7fe, Memory contents of the pool block
Arg4: e2e14008, Address of the block of pool being deallocated
Debugging Details:
------------------
GetUlongFromAddress: unable to read from 80560070
unable to get pool big page table - either wrong symbols or pool tagging is disabled
e2e14000 is freed (or corrupt) pool
Bad previous allocation size @e2e14000, last size was 0
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFE2E14000)
***
*** Use !poolval e2e14000 for more details.
***
GetUlongFromAddress: unable to read from 80560070
unable to get pool big page table - either wrong symbols or pool tagging is disabled
e2e14000 is freed (or corrupt) pool
Bad previous allocation size @e2e14000, last size was 0
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFE2E14000)
***
*** Use !poolval e2e14000 for more details.
***
POOL_ADDRESS: e2e14008
BUGCHECK_STR: 0xc2_7
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
MISALIGNED_IP:
nt!_ValidateEH3RN+1
804f4103 5d pop ebp
LAST_CONTROL_TRANSFER: from 8053438f to 804f4103
STACK_TEXT:
f4212c00 8053438f 000000c2 00000007 00000cd4 nt!_ValidateEH3RN+0x1
f4212c48 80608c8f e2e14008 00000000 e2d98758 nt!MiRemoveUnusedSegments+ 0x714
f4212ca8 80596675 e313c138 e313c120 00000000 nt!CmpMarkIndexDirty+0xa2
f4212cc4 80516027 e313c138 00000000 000005ae nt!RtlpGenerateInheritedAc e+0xa9
f4212ce8 805975c3 82264070 e17f3bb0 8222ebc0 nt!OpcodeNPXV86+0x15
f4212d00 80597651 e17f3bb0 e313c138 000005ae nt!HvpDoWriteHive+0x14a
f4212d48 80597777 000005ae 00000001 00000000 nt!HvpDoWriteHive+0x2e2
f4212d64 ffffffff f8370d8c 805aca20 00000000 nt!CmpFileWriteThroughCach e+0x49
804d6da8 00000000 00000000 00000000 00000000 0xffffffff
FOLLOWUP_IP:
nt!_ValidateEH3RN+1
804f4103 5d pop ebp
SYMBOL_STACK_INDEX: 0
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: nt!_ValidateEH3RN+1
IMAGE_NAME: hardware
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: kb
MODULE_NAME: hardware
BUCKET_ID: IP_MISALIGNED
Followup: MachineOwner
---------
I've been trying to repair this Windows XP Pro computer, which decided to bluescreen with 0xc2, BAD_POOL_CALLER. It wouldn't load up, so I decided to reinstall (it needed that anyway). After reinstalling, everything runs fine for a few boots, then the machine hangs at the splash screen - but it will boot into Safe Mode. I have run the minidump through WinDbg, and I'll attach those results at the bottom. Basically, it's saying "probably hardware." I took the hard drive out and put it in a completely different computer, but the effect is still there. Ordinarily, I would suspect the hard drive ... but it's booting into safe mode, so I really don't know.
Any thoughts are greatly appreciated. Here's the bugcheck info:
BugCheck C2, {7, cd4, f7fef7fe, e2e14008}
GetUlongFromAddress: unable to read from 80560070
unable to get pool big page table - either wrong symbols or pool tagging is disabled
e2e14000 is freed (or corrupt) pool
Bad previous allocation size @e2e14000, last size was 0
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFE2E14000)
***
*** Use !poolval e2e14000 for more details.
***
*** WARNING: Unable to verify timestamp for hal.dll
GetUlongFromAddress: unable to read from 80560070
unable to get pool big page table - either wrong symbols or pool tagging is disabled
e2e14000 is freed (or corrupt) pool
Bad previous allocation size @e2e14000, last size was 0
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFE2E14000)
***
*** Use !poolval e2e14000 for more details.
***
Probably caused by : hardware ( nt!_ValidateEH3RN+1 )
Followup: MachineOwner
---------
kd> !poolval e2e14000
Pool page e2e14000 region is Unknown
Validating Pool headers for pool page: e2e14000
Pool page [ e2e14000 ] is INVALID.
Analyzing linked list...
[ e2e14000 ]: invalid previous size [ 0x1fe ] should be [ 0x0 ]
[ e2e14000 ]: invalid block size [ 0x1fe ] should be [ 0x6 ]
Scanning for single bit errors...
None found
kd> !analyze -v
**************************
* *
* Bugcheck Analysis *
* *
**************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: f7fef7fe, Memory contents of the pool block
Arg4: e2e14008, Address of the block of pool being deallocated
Debugging Details:
------------------
GetUlongFromAddress: unable to read from 80560070
unable to get pool big page table - either wrong symbols or pool tagging is disabled
e2e14000 is freed (or corrupt) pool
Bad previous allocation size @e2e14000, last size was 0
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFE2E14000)
***
*** Use !poolval e2e14000 for more details.
***
GetUlongFromAddress: unable to read from 80560070
unable to get pool big page table - either wrong symbols or pool tagging is disabled
e2e14000 is freed (or corrupt) pool
Bad previous allocation size @e2e14000, last size was 0
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFE2E14000)
***
*** Use !poolval e2e14000 for more details.
***
POOL_ADDRESS: e2e14008
BUGCHECK_STR: 0xc2_7
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
MISALIGNED_IP:
nt!_ValidateEH3RN+1
804f4103 5d pop ebp
LAST_CONTROL_TRANSFER: from 8053438f to 804f4103
STACK_TEXT:
f4212c00 8053438f 000000c2 00000007 00000cd4 nt!_ValidateEH3RN+0x1
f4212c48 80608c8f e2e14008 00000000 e2d98758 nt!MiRemoveUnusedSegments+
f4212ca8 80596675 e313c138 e313c120 00000000 nt!CmpMarkIndexDirty+0xa2
f4212cc4 80516027 e313c138 00000000 000005ae nt!RtlpGenerateInheritedAc
f4212ce8 805975c3 82264070 e17f3bb0 8222ebc0 nt!OpcodeNPXV86+0x15
f4212d00 80597651 e17f3bb0 e313c138 000005ae nt!HvpDoWriteHive+0x14a
f4212d48 80597777 000005ae 00000001 00000000 nt!HvpDoWriteHive+0x2e2
f4212d64 ffffffff f8370d8c 805aca20 00000000 nt!CmpFileWriteThroughCach
804d6da8 00000000 00000000 00000000 00000000 0xffffffff
FOLLOWUP_IP:
nt!_ValidateEH3RN+1
804f4103 5d pop ebp
SYMBOL_STACK_INDEX: 0
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: nt!_ValidateEH3RN+1
IMAGE_NAME: hardware
DEBUG_FLR_IMAGE_TIMESTAMP:
STACK_COMMAND: kb
MODULE_NAME: hardware
BUCKET_ID: IP_MISALIGNED
Followup: MachineOwner
---------
Sorry to see no help here yet. Here's what I'd do....
We did upgrade to XP SP2, but not before doing all the homework to research the known problems and ensure that the setup and HW/SW were compatible; where not updated that first. Then ran complete Viruscan on all drives with updated virus definition files and checked for Spyware with AdAware Pro SE and Spybot S&D. Once done, and drivers also confirmed as compatible had no pleased.
Therefore I'm pleased to have upgraded to XP SP2 while Microsoft is still providing FREE support for this version as seen below:
Of course, I don't know how long this will be. My guess is this is "free" because of all the known issues.
Chat Support -> No charge support for issues related to SP2.
E-mail Support -> Response time: Up to 24 hours (Monday - Friday)
No charge support for issues related to SP2.
Options Phone Numbers
No charge support for issues related to SP2. (888) SP2-HELP (772-4357)
Paid Support for questions regarding how to configure and use features included with SP2 is available for $35 U.S. (888) SP2-HELP (772-4357)
Advanced Support is available for $245 U.S. (800) 936-4900
TTY/TDD help requests - cost will vary (800) 892-5234
*Long distance charges may apply.
Long hold times may be experienced. If your issue is not critical, we recommend using Individual Chat Support.
Source link for this here: http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer80&sd=GN
We did upgrade to XP SP2, but not before doing all the homework to research the known problems and ensure that the setup and HW/SW were compatible; where not updated that first. Then ran complete Viruscan on all drives with updated virus definition files and checked for Spyware with AdAware Pro SE and Spybot S&D. Once done, and drivers also confirmed as compatible had no pleased.
Therefore I'm pleased to have upgraded to XP SP2 while Microsoft is still providing FREE support for this version as seen below:
Of course, I don't know how long this will be. My guess is this is "free" because of all the known issues.
Chat Support -> No charge support for issues related to SP2.
E-mail Support -> Response time: Up to 24 hours (Monday - Friday)
No charge support for issues related to SP2.
Options Phone Numbers
No charge support for issues related to SP2. (888) SP2-HELP (772-4357)
Paid Support for questions regarding how to configure and use features included with SP2 is available for $35 U.S. (888) SP2-HELP (772-4357)
Advanced Support is available for $245 U.S. (800) 936-4900
TTY/TDD help requests - cost will vary (800) 892-5234
*Long distance charges may apply.
Long hold times may be experienced. If your issue is not critical, we recommend using Individual Chat Support.
Source link for this here: http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer80&sd=GN
ASKER
Thanks for the tip. I got the first level support person, who only directed me to delete the Winnov software (which isn't installed, I explained that this continued to recur even after a clean install on an unpartitioned disk). Second level support will contact me in one business day.
ASKER
Consider it finished. Microsoft was no help; they never called me back. I suspect that there's some driver conflict with the Western Digital 80gb hard drive, and I'm not interested in going any further.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER