I have confirmed that 13.30 has resolved this issue. Thanks all for your input and thanks to those who worked to get this fixed!
SysMon 13.24 crashing on app run with Visual Studio 2019
Hello, we have confirmed that there is an interoperability issue with Visual Studio Code 2019 and SysMon 13.24 when trying to run an application.
This causes a Blue Screen and can corrupt a project in Visual Studio Code. The current work around is to remove SysMon. We don't know what other version this affects as these users don't have time to test.
I have seen some similar issues on older posts but was wondering if others are seeing this problem and how we can address it. This is happening on more than 1 system so it is more of a wide spread issue.
Here is a recent post as well that address this problem: https://learn.microsoft.com/en-us/answers/questions/511948/bsod-driver-overran-stack-buffer-when-attaching-to.html
This is a much older post with the same Failure ID hash so maybe not as relevant: https://social.technet.microsoft.com/Forums/en-US/64857333-cf8e-47ab-b638-4370ae4e4fce/sysmon-1111-bsod-on-laptops?forum=miscutils
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4593
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 14312
Key : Analysis.Init.CPU.mSec
Value: 437
Key : Analysis.Init.Elapsed.mSec
Value: 6108
Key : Analysis.Memory.CommitPeak.Mb
Value: 77
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: f7
BUGCHECK_P1: ff96a4d06874eab0
BUGCHECK_P2: f8077ce3f0c0
BUGCHECK_P3: ffff07f8831c0f3f
BUGCHECK_P4: 0
SECURITY_COOKIE: Expected 0000f8077ce3f0c0 found ff96a4d06874eab0
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: devenv.exe
STACK_TEXT:
ffffa48a685cea38 fffff807
7ce21056 : 00000000000000f7 ff96a4d0
6874eab0 0000f8077ce3f0c0 ffff07f8
831c0f3f : nt!KeBugCheckEx
ffffa48a685cea40 00000000
000000f7 : ff96a4d06874eab0 0000f807
7ce3f0c0 ffff07f8831c0f3f 00000000
00000000 : SysmonDrv+0x1056
ffffa48a685cea48 ff96a4d0
6874eab0 : 0000f8077ce3f0c0 ffff07f8
831c0f3f 0000000000000000 01000000
00100000 : 0xf7
ffffa48a685cea50 0000f807
7ce3f0c0 : ffff07f8831c0f3f 00000000
00000000 0100000000100000 ffff8009
fb5bf620 : 0xff96a4d06874eab0 ffffa48a
685cea58 ffff07f8831c0f3f : 00000000
00000000 0100000000100000 ffff8009
fb5bf620 fffff8077ce285e8 : 0x0000f807
7ce3f0c0
ffffa48a685cea60 00000000
00000000 : 0100000000100000 ffff8009
fb5bf620 fffff8077ce285e8 00000000
00000001 : 0xffff07f8`831c0f3f
SYMBOL_NAME: SysmonDrv+1056
MODULE_NAME: SysmonDrv
IMAGE_NAME: SysmonDrv.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 1056
FAILURE_BUCKET_ID: 0xF7_MISSING_GSFRAME_SysmonDrv!unknown_function
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {bfcd09b2-c8e3-6711-5ab4-bb081f1f34f2}
Followup: MachineOwner
11 additional answers
Sort by: Most helpful
-
csinagra 21 Reputation points
2021-10-27T16:55:19.56+00:00 Confirmed that this is now fixed in version 13.30
-
Alex Mihaiuc 721 Reputation points
2021-09-29T12:54:22.173+00:00 @Devin McLean , @Penning, Nicholas I'm on it.
-
MD 1 Reputation point
2021-10-21T18:39:25.803+00:00 We've been experiencing this problem as well. It seems to only happen in projects where we are using the Microsoft.Xrm.Sdk. Any project that we use to access CRM via the the sdk causes the BSOD when we attempt to run in VS 2019.