Reproducible BSODs caused by an application

[stef]

Hi,
I keep getting random BSODs when running an application (bsw.exe). I am not 100% sure about this, but it seems like i can only reproduce this when i am logged in remotely or using terminal services.
Can someone please take a look at the dumps and hopefully give me more details on this? What I think i figured out so far from looking at the dumps is that bsw.exe somehow causes csrss.exe to fail with a "ReadMemory error: Cannot get nt!KeMaximumIncrement value. fffff78000000000: Unable to get shared data"

I am hoping to find out more details on what bsw.exe is doing here. I don't think there is anything wrong with the systems - i was able to reproduce this on 3 different ones.

I attached two complete sets of dump and system info files from two different machines (Win7 and Win7sp1). I also uploaded the files here:
https://skydrive.live.com/#!/?cid=6...!cid=6A89509B3105B1DD&id=6A89509B3105B1DD!105

Thank you!!!

 

[jcgriff2]

Hi -

What is bsw.exe?

Is it --> http://systemexplorer.net/file-database/file/bsw-exe/123873

I see "VM" listed throughout the files.
Are you running in a VM environment?
Is the app running in VM on the remote system?

You said BSOD occurs only when you run the app remotely.
- Can you run it on your system locally with success?
- Can you run it on the remote system in person successfully?

The one item that stands out is an old Intel Ethernet driver -

[font=lucida console]E1G6032E.sys                Wed May 28 19:14:51 2008 (483DE76B)
[/font]

https://www.sysnative.com/drivers/driver.php?id=E1G6032E.sys

That is from the Windows 7 SP1 system, but I doubt it is the sole cause.

It looks more to be an issue with bsw itself given 0xf4 bugcheck + "image" (corrupted install..?).

FAILURE_BUCKET_ID:  X64_0xF4_bsw.exe_IMAGE__

It's not really worth the time to test a W7 system void of SP1 because all Windows 7 systems should be fully updated, including SP1.

Regards. . .


jcgriff2

[font=lucida console]
Debug session time: Sun Sep 23 08:28:10.174 2012 (GMT-4)
Loading Dump File [C:\Users\PalmDesert\SysnativeBSODApps\092312-75078-01.dmp]
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime: 0 days 2:59:22.366
BugCheck F4, {3, fffffa8004c92060, fffffa8004c92340, fffff80002be68b0}
Probably caused by : _
Bugcheck code 000000f4
Arguments 00000000`00000003 fffffa80`04c92060 fffffa80`04c92340 fffff800`02be68b0
PROCESS_NAME:  bsw.exe
BUGCHECK_STR:  0xF4_bsw.exe
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
FAILURE_BUCKET_ID:  X64_0xF4_bsw.exe_IMAGE__
MaxSpeed:     2000
CurrentSpeed: 1995
BiosVersion = 6.00
BiosReleaseDate = 10/13/2009
SystemManufacturer = VMware, Inc.
SystemProductName = VMware Virtual Platform
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

[/font]

 

[stef]

Hi jcgriff2,

Here are the details you requested:
Bsw.exe is HyperLynx: http://www.mentor.com/products/pcb-system-design/circuit-simulation/hyperlynx-signal-integrity/
The released version works fine, but I am using a new beta version of it and i started getting the bluescreens with this. There is also a simresserver.exe running in parallel as a service, so i'm wondering if that has to do anything with this. So this is most probably something caused by this non-released version of bsw. I am just hoping to gather more details on this before reporting it, so hopefully they can fix this.

Yes, both minidumps are from VMs (VMWare), but i was able to reproduce this on a real machine too when logged in remotely. I can send you that crash dump too if needed.
I can run it fine both locally and on the remote system too, when i don't use Remote Desktop. It runs fine interactively.

Thank you for looking into this! I appreciate your help!

Regards,
Stefan

 

[jcgriff2]

Hi Stefan. . .

Is it your system that BSODs or the one you're connected to via RD?

Is bsw.exe running on your system or the RD system -- BSODs?

I am not familiar with bsw.exe, but I do beta test other apps. I would think if all conditions are the same and the the system only BSODs under the beta version bsw, it is very likey involved or there is a conflict with another driver.

... bsw.exe somehow causes csrss.exe to fail with a "ReadMemory error: Cannot get nt!KeMaximumIncrement value. fffff78000000000: Unable to get shared data"

Bugcheck 0xf4 (0x3,,,) simply tells us that a process critical to Windows suddenly terminated. csrss.exe is often seen with 0xf4, but the W7 SP1 system listed nothing as the probable cause, not even the usual NT default.

 BugCheck F4, {3, fffffa8004c92060, fffffa8004c92340, fffff80002be68b0}
Probably caused by :[h41] _[/h41]

The dump listed bsw.exe as the process running, but didn't actually name bsw drivers as the probable cause. Have others reported BSODs while running the beta bsw version?

Yes, both minidumps are from VMs (VMWare), but i was able to reproduce this on a real machine too when logged in remotely. I can send you that crash dump too if needed.
I can run it fine both locally and on the remote system too, when i don't use Remote Desktop. It runs fine interactively.

I mentioned the Intel Ethernet driver because the May 2008 timestamp = Vista SP1 era. Since the BSODs are only occurring while RD'ing, the outdated Intel driver may be a contibuting factor. It should be updated -

https://www.sysnative.com/drivers/driver.php?id=E1G6032E.sys

The bsw developers are best suited to deal with crashes involving their app as they have symbol files not available to us.

However, I'll be glad to take a look at the non-VM dump to see if it yields any clues.

Regards. . .

jcgriff2

 

[stef]

The system i am connected to via RD BSODs, and bsw.exe is running on the RD system.

I will try updating the Ethernet driver and let you know if that makes a difference.

The non-VM dump shows exactly the same thing as the dumps you looked at, so at this point I don't want to waist more of your time.
Thanks again for looking into this!!!

 

[jcgriff2]

Hi Stefan...

Both dumps -- one from the W7 SP0 system & the other from the W7 SP1 system - had the same Intel Ethernet driver -

[font=lucida console]
E1G6032E.sys                Wed May 28 19:14:51 2008 (483DE76B)[/font]

Just curious.... does the 3rd system that BSOD'd also have that same driver?

Also, the 3rd BSOD contained this same Probably caused by - ?

 BugCheck F4, {3, fffffa8004c92060, fffffa8004c92340, fffff80002be68b0}
Probably caused by :[h41] _[/h41]

I don't recall ever seeing that before.

System uptimes before BSOD were:

System Uptime: 0 days 2:59:22.366
System Uptime: 0 days 1:46:46.413

You could run Driver Verifier on the offending systems to test 3rd party drivers, which would include bsw + Intel -

https://www.sysnative.com/forums/showthread.php/29-Driver-Verifier-BSOD-related

If software related, Driver Verifier will add additional info to dump files to help ID the offending driver.

It's not a waste of my time to try and help, I assure you. I understand why you want to provide as much feedback to the developer as possible, but beta apps often get frequent updates behind-the-scenes before the next public version release. You may want to just submit your dump files & info to them and continue your own testing. I'll be glad to look at any dump files you have or new ones from future BSODs.

Regards. . .

jcgriff2

 

[stef]

Hi jcgriff2,

I'm out of the office this week, but i will definitely try updating E1G6032E.sys
The real machine has Win7 (no SP1) and it looks like it uses E1G6032E.sys. $sys_list.txt collected with your utility shows the following entry:
145792 6/10/2009 1:35:09 PM "C:\Windows\System32\DriverStore\FileRepository\nete1g3e.inf_amd64_neutral_7f08406e40c6ede2\E1G6032E.sys"

And yes, the third BSOD shows exactly the same Probably caused by -

Thank you again for all this good data and great help you provide here.

Regards,
Stefan

 

[jcgriff2]

Thanks for posting back, Stefan.. pleease let us know how things go.

Regards. . .

jcgriff2

 

[stef]

Hi jcgriff2,

Just a quick update...
When i try to update the driver for E1G6032E.sys, Windows says that i already have the latest driver. It shows me i have version 8.4.1.0. I didn't find a newer one and Intel's website says "These adapters are only supported by the drivers included "in box" with Microsoft Windows* 7 and Windows* Server 2008 R2" and doesn't provide a download.
Please let me know if you'll have any other suggestions.

Thanks,
Stefan

 

[jcgriff2]

System files show - Intel(R) PRO/1000 MT Network Connection

There doesn't appear to be driver updates available - http://www.intel.com/support/network/sb/CS-030613.htm

¹In-box support

• Driver and software updates are not planned for adapters with only
  in-box support. These adapters cannot be updated using automated or manual
  methods.
• Intel® PROSet for Windows Device Manager and Advanced Network Services (ANS)
  driver for teaming and VLANS are not included with in-box support.
• You might be able to add an adapter with in-box
  support to a team using multi-vendor teaming (MVT). See the user
  guide for MVT considerations.

http://www.intel.com/support/network/sb/CS-030613.htm

Not sure if this may help or not - http://downloadcenter.intel.com/Det...el(R)+PRO/1000+MT+Network+Connection&lang=eng

http://downloadcenter.intel.com/SearchResult.aspx?keyword=PROWin32.exe&OSVersion=Windows+7*

If you do try them, create a system restore point first, so you can fall back in case Internet connectivity is INOP after update.

Regards. . .

jcgriff2