Stack Buffer Overrun - BSOD

Question

Our server has been crashing for the past 2 weeks repeatedly from the the following:

On Wed 12/3/2014 1:57:54 PM GMT your computer crashed

crash dump file: C:\Windows\Minidump\120314-37390-01.dmp

This was probably caused by the following module: ntoskrnl.exe (nt+0x1509A0)

Bugcheck code: 0x139 (0x2, 0xFFFFD001C62A8100, 0xFFFFD001C62A8058, 0x0)

Error: KERNEL_SECURITY_CHECK_FAILURE

file path: C:\Windows\system32\ntoskrnl.exe

product: Microsoft® Windows® Operating System

company: Microsoft Corporation

description: NT Kernel & System

Bug check description: The kernel has detected the corruption of a critical data structure.

The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

I checked with Windbg and thought it was a controller driver. Updated the controller and then it dropped from 5 + crashes a day to 1. Now it has crashed again with same error so there is something else I'm missing. I don't have a lot of experience with Windbg so if anyone can tell me how I should be looking through the dmp file I'd appreciate it.

Minidump File: http://1drv.ms/12tIie1

Answer 1

Server issues are beyond the scope of this forum, so you may want to post your query at the TechNet forums, but the driver responsible for this crash is the Dynamic Smart Array SAS/SATA Controller Storport Driver

Use !analyze -v to get detailed debugging information.

BugCheck 139, {2, ffffd001c62a8100, ffffd001c62a8058, 0}

Unable to load image \SystemRoot\System32\drivers\HPSA2.sys, Win32 error 0n2

*** WARNING: Unable to verify timestamp for HPSA2.sys

*** ERROR: Module load completed but symbols could not be loaded for HPSA2.sys

Probably caused by : HPSA2.sys ( HPSA2+1d125 )

Followup: MachineOwner

Dynamic Smart Array SAS/SATA Controller Storport Driver.

Loaded symbol image file: HPSA2.sys

    Image path: \SystemRoot\System32\drivers\HPSA2.sys

    Image name: HPSA2.sys

    Timestamp:        Thu Jan 31 16:32:07 2013 (510AE2D7)

See if there is an update available.

ProLiant ML310e Gen8 v2

http://h20564.www2.hp.com/hpsc/swd/public/readIndex?sp4ts.oid=5379532

.

Answer 2

You are welcome! :)

Answer 3

I had already updated that driver through the device manager but looking at the date stamp I'm not sure it took. I am going to do it manually and see if that gets me farther. Thanks for confirming my thoughts. If I need more help I'll move it over to Tech Net. Thanks again!