Kernel mode heap corruption and random BSOD issues

Question

KERNEL_MODE_HEAP_CORRUPTION (13a) The kernel mode heap manager has detected corruption in a heap. Arguments: Arg1: 0000000000000011, Type of corruption detected Arg2: ffff950f6a010100, Address of the heap that reported the corruption Arg3: ffff950f871143d0, Address at which the corruption was detected Arg4: 0000000000000000

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 4655

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 6511

    Key  : Analysis.IO.Other.Mb
    Value: 6

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 31

    Key  : Analysis.Init.CPU.mSec
    Value: 1233

    Key  : Analysis.Init.Elapsed.mSec
    Value: 90051

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 106

    Key  : Bugcheck.Code.DumpHeader
    Value: 0x13a

    Key  : Bugcheck.Code.KiBugCheckData
    Value: 0x13a

    Key  : Bugcheck.Code.Register
    Value: 0x13a

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Timestamp
    Value: 2019-12-06T14:06:00Z

    Key  : WER.OS.Version
    Value: 10.0.19041.1

FILE_IN_CAB:  MEMORY.DMP

BUGCHECK_CODE:  13a

BUGCHECK_P1: 11

BUGCHECK_P2: ffff950f6a010100

BUGCHECK_P3: ffff950f871143d0

BUGCHECK_P4: 0

POOL_ADDRESS:  ffff950f871143d0 Nonpaged pool

FREED_POOL_TAG:  Mdl_

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

PROCESS_NAME:  System

STACK_TEXT:  
ffffe50d`9aaff5c8 fffff807`4f98eb2c     : 00000000`0000013a 00000000`00000011 ffff950f`6a010100 ffff950f`871143d0 : nt!KeBugCheckEx
ffffe50d`9aaff5d0 fffff807`4f98eb8c     : 00000000`00000011 00000000`00000000 ffff950f`6a010100 00000000`00000000 : nt!RtlpHeapHandleError+0x40
ffffe50d`9aaff610 fffff807`4f98e7b9     : 00000000`000000d0 ffff950f`87106000 ffff8080`af680100 fffff807`00000000 : nt!RtlpHpHeapHandleError+0x58
ffffe50d`9aaff640 fffff807`4f86185a     : ffff950f`6b020000 fffff807`4f6851ef ffffe50d`9aaff828 00000000`00000000 : nt!RtlpLogHeapFailure+0x45
ffffe50d`9aaff670 fffff807`4f624252     : ffff950f`6a010340 00000000`000000ff ffffe50d`9aaff8f0 fffff807`00000000 : nt!RtlpHpLfhSubsegmentFreeBlock+0x16c85a
ffffe50d`9aaff720 fffff807`4fdb2019     : ffff950f`00000000 ffff950f`72800000 ffff950f`71fa5540 01000000`00100000 : nt!ExFreeHeapPool+0x362
ffffe50d`9aaff800 fffff807`4f7102fa     : ffff950f`7207b0f8 ffff950f`72800000 ffff950f`82b73a40 fffff807`518153d3 : nt!ExFreePool+0x9
ffffe50d`9aaff830 fffff807`518cca90     : 00000000`00000000 ffff950f`72800000 00000000`0000002d ffff950f`80dcbcc0 : nt!IoFreeMdl+0x9a
ffffe50d`9aaff860 fffff807`5f57482f     : 00000000`00000000 ffff950f`72800000 00000000`00000000 00000000`00000000 : ndis!NdisFreeBuffer+0x10
ffffe50d`9aaff890 fffff807`5f5875f3     : ffff950f`83294480 ffffe50d`9aaff990 fffff807`5f7c2000 ffff950f`72800000 : rtwlanu+0x4482f
ffffe50d`9aaff8d0 fffff807`5f9ec8b2     : ffff950f`71fa7bb0 00000000`00000003 00000000`00000003 ffff950f`83294480 : rtwlanu+0x575f3
ffffe50d`9aaff900 fffff807`5f9ec293     : ffff950f`71fa7bb0 ffffe50d`9aaff990 00000000`00000003 00000000`00000001 : wdiwifi!CRxMgr::RxReturnFrames+0x36
ffffe50d`9aaff930 fffff807`5f9e8192     : ffff950f`83294480 ffffe50d`9aaffae0 ffff950f`71fc7000 fffff807`5f7914e3 : wdiwifi!CRxMgr::RxInOrderDataInd+0x2f7
ffffe50d`9aaff9d0 fffff807`5f57628f     : ffff950f`71fc7000 fffff807`5f7c2000 00000000`00000010 fffff807`5f576406 : wdiwifi!AdapterRxInorderDataInd+0x92
ffffe50d`9aaffa20 fffff807`5f575747     : ffff950f`71fc5000 fffff807`5f78f301 ffff950f`72800000 fffff807`5f79142d : rtwlanu+0x4628f
ffffe50d`9aaffa90 fffff807`5f5e8540     : ffff950f`00000000 ffff950f`72800000 ffff950f`73039308 ffff950f`7303a2dc : rtwlanu+0x45747
ffffe50d`9aaffae0 fffff807`5f78ee0e     : ffff950f`71fc6570 ffff950f`73039258 ffff950f`71c8c4f8 ffff950f`72800000 : rtwlanu+0xb8540
ffffe50d`9aaffb20 fffff807`4f671d25     : ffff950f`71dd7640 00000000`00000080 fffff807`5f78ed8c ffff950f`73039258 : rtwlanu+0x25ee0e
ffffe50d`9aaffb50 fffff807`4f800778     : ffff8080`af740180 ffff950f`71dd7640 fffff807`4f671cd0 00000000`00000000 : nt!PspSystemThreadStartup+0x55
ffffe50d`9aaffba0 00000000`00000000     : ffffe50d`9ab00000 ffffe50d`9aaf9000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28

SYMBOL_NAME:  rtwlanu+4482f

MODULE_NAME: rtwlanu

IMAGE_NAME:  rtwlanu.sys

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  4482f

FAILURE_BUCKET_ID:  0x13a_11_Mdl__rtwlanu!unknown_function

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {b212f4ea-1a52-3727-380e-61215c6154bc}

Followup:     MachineOwner

Answer 1

Thanks for the clarification.

I couldn't confirm that the TP-Link adapter uses the Realtek driver.

But as it is the only Wi-Fi adapter present, reinstall it and see if the system will work stable.

Download the latest driver for this adapter from the link below
https://static.tp-link.com/TL-WN823N_EU_US_V2_V...

Source: https://www.tp-link.com/us/support/download/tl-...

________________________________________________________
Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.

Answer 2

The adaptor is a TL-WN823N V2

Answer 3

I don't see any Realtek adapter in this screenshot. But I know that TP-Link sometimes uses 3rd party adapters in their USB adapters.

What is the model of this TP-Link USB adapter?

Also, send a screenshot of the "Driver" tab of the TP-Link adapter properties.

• Right-click on the TP-Link adapter and select "Properties". Then select the "Driver" tab.

Answer 4

I'm not sure which one is the correct one

Answer 5

Hi. I'm David, and I'm happy to help you.

The information from this minidump indicates that the Realtek Wi-Fi adapter driver "rtwlanu.sys" caused the crash.

Reinstall the Wi-Fi driver.

Before starting the procedure, go to the support area of your computer manufacturer's website and download the latest Realtek Wi-Fi driver.

(If you cannot find it, let me know the manufacturer and model of your computer)

Uninstall the current driver:

1. Open "Device Manager" (Windows + X and select Device Manager);
2. Expand "Network adapters";
3. Right-click on the Realtek Wi-Fi adapter and select "Uninstall device";

(It may have more than one adapter, if you don't identify the correct one, send a screenshot "Windows + Shift + S")

4. On the confirmation screen, check "Delete the driver software for this device" and click "Ok";
5. Restart the PC.

Install the driver you downloaded from the manufacturer.

I hope this helps. Feel free to ask back any questions.