Share via

KERNEL_SECURITY_CHECK_FAILURE Blue screen

Anonymous
2022-07-26T10:08:43+00:00

Hello,

I'm asking for help finding solution for this:

ERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000004, The thread's stack pointer was outside the legal stack
extents for the thread.
Arg2: ffff990065bd9010, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffff990065bd8f68, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 2077

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 5852

    Key  : Analysis.Init.CPU.mSec
    Value: 1421

    Key  : Analysis.Init.Elapsed.mSec
    Value: 94080

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 110

    Key  : Bugcheck.Code.DumpHeader
    Value: 0x139

    Key  : Bugcheck.Code.Register
    Value: 0x139

    Key  : Dump.Attributes.AsUlong
    Value: 8

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : FailFast.Name
    Value: INCORRECT_STACK

    Key  : FailFast.Type
    Value: 4

FILE_IN_CAB:  072622-6500-01.dmp

DUMP_FILE_ATTRIBUTES: 0x8
  Kernel Generated Triage Dump

BUGCHECK_CODE:  139

BUGCHECK_P1: 4

BUGCHECK_P2: ffff990065bd9010

BUGCHECK_P3: ffff990065bd8f68

BUGCHECK_P4: 0

TRAP_FRAME:  ffff990065bd9010 -- (.trap 0xffff990065bd9010)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe4064c1d1000 rbx=0000000000000000 rcx=0000000000000004
rdx=ffffe4064c1d8000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80432635c5d rsp=ffff990065bd91a0 rbp=ffff990065bd9710
 r8=ffffe4064c1d8000  r9=ffff990065bd9728 r10=ffffe4064c1d7f80
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!RtlpGetStackLimitsEx+0x1de82d:
fffff804`32635c5d cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  ffff990065bd8f68 -- (.exr 0xffff990065bd8f68)
ExceptionAddress: fffff80432635c5d (nt!RtlpGetStackLimitsEx+0x00000000001de82d)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000004
Subcode: 0x4 FAST_FAIL_INCORRECT_STACK 

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  LeagueClient.e

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000004

EXCEPTION_STR:  0xc0000409

STACK_TEXT:  
ffff9900`65bd91a0 fffff804`32635e2b     : ffff9900`65bd9710 00000000`00000000 ffffe406`4c1d7f80 fffff804`00000002 : nt!RtlpGetStackLimitsEx+0x1de82d
ffff9900`65bd91d0 fffff804`324563b6     : ffffe406`4c1d71d8 ffff9900`65bd9e20 ffffe406`4c1d71d8 00000000`00000000 : nt!RtlDispatchException+0x1de90b
ffff9900`65bd98f0 fffff804`325f9422     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x186
ffff9900`65bd9fb0 fffff804`325f93f0     : fffff804`3260a6a5 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxExceptionDispatchOnExceptionStack+0x12
ffffe406`4c1d7098 fffff804`3260a6a5     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatchOnExceptionStackContinue
ffffe406`4c1d70a0 fffff804`32604016     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0x125
ffffe406`4c1d7280 fffff804`36039e60     : ffffe706`6ce101a0 ffffe706`713c3a60 ffffe706`78c85f20 00000000`00000210 : nt!KiBreakpointTrap+0x316
ffffe406`4c1d7410 fffff804`3603965c     : 00000000`00000050 00000000`00000002 ffffe406`00000000 ffffe706`6cdf4101 : storport!RaidStartIoPacket+0x5c0
ffffe406`4c1d7540 fffff804`360393fa     : 00000000`00746000 00000000`10d3dac0 ffffe706`6ce58a50 fffff804`325f873d : storport!RaUnitScsiIrp+0x21c
ffffe406`4c1d75e0 fffff804`32430d45     : ffffe706`78c85dc0 ffffe706`78c85dc0 ffffe706`6ce58a50 00000000`00000000 : storport!RaDriverScsiIrp+0x5a
ffffe406`4c1d7620 fffff804`35b8b58d     : ffffe706`6ce58a50 ffffe706`78c85dc0 00000000`00000001 00000000`00000000 : nt!IofCallDriver+0x55
ffffe406`4c1d7660 fffff804`35b810d6     : ffffe706`6cd52be0 00000000`00000007 ffffe706`78c85f20 fffff804`325230d0 : ACPI!ACPIIrpDispatchDeviceControl+0xad
ffffe406`4c1d76a0 fffff804`32430d45     : 00000000`00000007 ffffe706`75ccc710 00000000`00008000 00000001`76eda400 : ACPI!ACPIDispatchIrp+0xc6
ffffe406`4c1d7720 fffff804`36d670ed     : ffffe706`75ccc710 00000000`00008000 ffffe706`70761040 ffffe706`70761040 : nt!IofCallDriver+0x55
ffffe406`4c1d7760 fffff804`36d6660c     : 00000000`00000000 00000000`00000000 00000000`00008000 00000000`00000040 : CLASSPNP!SubmitTransferPacket+0x29d
ffffe406`4c1d77b0 fffff804`36d6636b     : ffffe706`75ccc710 ffffe706`7a5259c0 ffffe706`7a525900 00000000`00000000 : CLASSPNP!ServiceTransferRequest+0x21c
ffffe406`4c1d7840 fffff804`36d683e4     : 00000000`00000000 ffffe706`706f1a20 00000001`6f9e2400 00000000`00989680 : CLASSPNP!ClassReadWrite+0x14b
ffffe406`4c1d7890 fffff804`32430d45     : ffffe706`7070a8a0 ffffe706`7a5259c0 ffffe706`7072f8e0 00000000`00000000 : CLASSPNP!ClassGlobalDispatch+0x24
ffffe406`4c1d78c0 fffff804`35e53bcb     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IofCallDriver+0x55
ffffe406`4c1d7900 fffff804`35e53f00     : 00000001`00000001 00000001`09628622 00000000`00000000 ffffbcab`00200340 : partmgr!PmIo+0xeb
ffffe406`4c1d7980 fffff804`32430d45     : ffffe706`79a87080 ffffe706`75e80080 00000000`00000001 ffffe706`75e80080 : partmgr!PmGlobalDispatch+0x20
ffffe406`4c1d79b0 fffff804`35e53734     : ffffe706`75e80080 00000000`00008000 00000000`00000000 ffffe406`4c1d7a30 : nt!IofCallDriver+0x55
ffffe406`4c1d79f0 fffff804`35e53f00     : 00000000`00008000 ffffe706`7a525bf8 ffffe406`4c1d7c19 00000000`00000000 : partmgr!PartitionIo+0x1d4
ffffe406`4c1d7aa0 fffff804`32430d45     : ffffe406`4c1d7c19 fffff804`35e53e7d 00000000`00000000 ffffe406`4c1d7b10 : partmgr!PmGlobalDispatch+0x20
ffffe406`4c1d7ad0 fffff804`35f41109     : ffffe706`70720a40 00000000`00000001 00000001`09628614 ffffe706`707208f0 : nt!IofCallDriver+0x55
ffffe406`4c1d7b10 fffff804`32430d45     : ffffe406`4c1d7c19 ffffe706`709f7180 00000000`00000002 00000000`00000000 : volmgr!VmReadWrite+0xf9
ffffe406`4c1d7b50 fffff804`36b34ece     : ffffe706`709f7180 ffffe406`4c1d7c19 ffffe706`709f71b8 00000000`00000000 : nt!IofCallDriver+0x55
ffffe406`4c1d7b90 fffff804`36b34b77     : 00000000`00000000 ffffe406`4c1d7d70 00000000`00000000 ffffe706`7a5259c0 : fvevol!FveFilterRundownReadWrite+0x33e
ffffe406`4c1d7c80 fffff804`32430d45     : 00000000`00000000 ffffbcd5`ffb7bddc ffffffff`fffffffe ffffbcd5`ff83f081 : fvevol!FveFilterRundownRead+0x27
ffffe406`4c1d7cb0 fffff804`36d03d07     : ffffdc7a`79ad5592 00ffffbc`ab06612e 00000000`00000004 ffffe406`48c66f68 : nt!IofCallDriver+0x55
ffffe406`4c1d7cf0 fffff804`36d05035     : 00000000`00000002 ffffe406`48c66e00 ffffe706`709f8930 ffffe706`7a5259c0 : iorate!IoRateIssueAndRecordIo+0x7f
ffffe406`4c1d7d30 fffff804`36d051ef     : ffffe706`709fa190 ffffe706`75e80080 00000000`00000000 00000000`00000000 : iorate!IoRateProcessIrpWrapper+0x69
ffffe406`4c1d7dc0 fffff804`32430d45     : 00000000`77144e50 00000000`00000020 00000000`10e3f81c 00000000`00000000 : iorate!IoRateDispatchReadWrite+0x5f
ffffe406`4c1d7e00 fffff804`36bf1033     : ffffe706`707a0500 fffff804`36c01a98 00000000`00000000 ffffe706`00000000 : nt!IofCallDriver+0x55
ffffe406`4c1d7e40 fffff804`32430d45     : ffffe706`709fa190 fffff804`36c4acf8 00000000`00000018 000000e2`14b8cc88 : volume!VolumePassThrough+0x23
ffffe406`4c1d7e70 fffff804`36c04e3a     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IofCallDriver+0x55
ffffe406`4c1d7eb0 fffff804`36c011a9     : ffffe406`48c66f68 00000000`00000000 00000000`00000000 00000000`00000000 : volsnap!VolSnapReadFilter+0x3c7a
ffffe406`4c1d7ee0 fffff804`32430d45     : 00007ffc`9f634630 00000000`00000000 00000000`00000000 00000000`00000000 : volsnap!VolSnapRead+0x19
ffffe406`4c1d7f10 fffff804`3625266c     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IofCallDriver+0x55
ffffe406`4c1d7f50 fffff804`325fbe6e     : 00000000`00000401 00000000`00000000 000000e2`14b8cba8 00000000`00000000 : Ntfs!NtfsStorageDriverCallout+0x1c
ffffe406`4c1d7f80 fffff804`325fbe2c     : ffffe406`4c1d7fd0 ffffe706`75e80080 ffffe406`4c1d8000 fffff804`3247cdcd : nt!KxSwitchKernelStackCallout+0x2e
ffffe406`48c66d50 fffff804`3247cdcd     : ffffe406`4c1d7fd0 ffffe706`75e80080 ffffe406`48c66e00 00000000`00000000 : nt!KiSwitchKernelStackContinue
ffffe406`48c66d70 fffff804`3247cbc2     : fffff804`36252650 ffffe406`48c66f68 ffffe406`00000002 ffffe706`00000000 : nt!KiExpandKernelStackAndCalloutOnStackSegment+0x19d
ffffe406`48c66e10 fffff804`3247ca23     : ffffe406`48c670b0 00000000`00000001 00000000`00000000 ffffe706`709fa040 : nt!KiExpandKernelStackAndCalloutSwitchStack+0xf2
ffffe406`48c66e80 fffff804`3247c9dd     : fffff804`36252650 ffffe406`48c66f68 ffffe706`781f7a28 00000000`00000001 : nt!KeExpandKernelStackAndCalloutInternal+0x33
ffffe406`48c66ef0 fffff804`36234d80     : ffffe706`781f7a28 fffff804`362348d5 ffffe706`781f7a03 ffffe706`7a5259c0 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffffe406`48c66f30 fffff804`36233771     : ffffe406`48c66ff0 ffff800e`50adb720 ffffe706`781f7a28 00000000`00065400 : Ntfs!NtfsMultipleAsync+0x140
ffffe406`48c66fb0 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsNonCachedIo+0x431

STACK_COMMAND:  .trap 0xffff990065bd9010 ; kb

SYMBOL_NAME:  partmgr!PmIo+eb

MODULE_NAME: partmgr

IMAGE_NAME:  partmgr.sys

IMAGE_VERSION:  10.0.19041.1826

BUCKET_ID_FUNC_OFFSET:  eb

FAILURE_BUCKET_ID:  0x139_MISSING_GSFRAME_partmgr!PmIo

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {be2df98c-0c53-e055-7f73-ba1a59277248}

Followup:     MachineOwner
---------

here is the dump file:

https://drive.google.com/file/d/1-RP7nbL6eT2J4zX98NTY2-D94GFxM-Fx/view?usp=sharing
Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

3 answers

Sort by: Most helpful
  1. DaveM121 891.6K Reputation points Independent Advisor
    2022-07-27T06:06:58+00:00

    Hi j k3

    If your system continues to crash, please upload any newly created minidump files you may have for analysis.

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2022-07-26T21:25:15+00:00

    Hi j k3

    I am Dave, I will help you with this.

    Your minidump file indicates it is the device driver on the chipset that is causing the system crashes.

    Go to the support page for your PC or Motherboard on the manufacturers website, then from there, download and install the version of Chipset drivers they recommend and while there, check for any BIOS update that may need to be installed

    Installed INF driver from manufacturerers website, now crashing without BSOD.

    BIOS is newest one.

    Was this answer helpful?

    0 comments No comments
  3. DaveM121 891.6K Reputation points Independent Advisor
    2022-07-26T10:42:44+00:00

    Hi j k3

    I am Dave, I will help you with this.

    Your minidump file indicates it is the device driver on the chipset that is causing the system crashes.

    Go to the support page for your PC or Motherboard on the manufacturers website, then from there, download and install the version of Chipset drivers they recommend and while there, check for any BIOS update that may need to be installed

    Was this answer helpful?

    0 comments No comments