Blue Screen (BSOD) nach Aktualisierung von Windows 10 Fall Creators Update 1709

Sehr geehrte Damen und Herren,


nach der Aktualisierung von Windows 10 Fall Creators Update 1709 bekommen wir in unserer Delphi 32-Bit Anwendung (Delphi XE3 und Delphi XE6) bei diversen Aktionen (z.B. Auftragserfassung, PDF Auftragsdruck) sehr häufig einen Blue Screen (BSOD).


Folgende Meldung wird in dem BSOD ausgegeben:


Stillstandcode: SYSTEM SERVICE EXCEPTION
Fehlerursache: win32kbase.sys


Wir haben das Verhalten bisher auf jedem Rechner, der mit dem neusten Windows Update ausgestattet worden ist, reproduzieren können. Vor dem Update lief die Anwendung auf den Rechnern fehlerfrei. Wir können somit ausschließen, dass der Fehler durch geänderte Hardware bzw. Speicher- oder Treiberproblemen entsteht. Ebenfalls sind die Rechner was Updates betrifft auf aktuellem Stand. Der Blue Screen tritt auch auf, wenn man die Anwendung im Kompatibilitätsmodus laufen lässt.

Können Sie uns an dieser Stelle bezüglich der Fehlerursache weiterhelfen?

Beste Grüße,Dirk Klemenz



Folgenden Output ergab die Analyse des Dump Files:

Microsoft (R) Windows Debugger Version 6.3.9600.17298 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [S:\clxMobile\BZA\Windows10FallCreator\Minidumps_PS_Michael\Minidump\Kernel_3b_8204d4347bd885c29d73ea502a8aff912c83_00000000_cab_030c2971\121417-4625-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred https://msdl.microsoft.com/download/symbols
Symbol search path is: https://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 8 Kernel Version 16299 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0xfffff801`da217000 PsLoadedModuleList = 0xfffff801`da578ff0
Debug session time: Thu Dec 14 13:03:12.981 2017 (UTC + 1:00)
System Uptime: 0 days 2:34:45.760
Loading Kernel Symbols
...............................................................
................................................................
...................................................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, ffff93640be32ca9, fffff986b43dafc0, 0}

Probably caused by : win32kbase.sys ( win32kbase!XEPALOBJ::vRemoveFromList+b5 )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: ffff93640be32ca9, Address of the instruction which caused the bugcheck
Arg3: fffff986b43dafc0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.

FAULTING_IP:
win32kbase!XEPALOBJ::vRemoveFromList+b5
ffff9364`0be32ca9 48898878050000 mov qword ptr [rax+578h],rcx

CONTEXT: fffff986b43dafc0 -- (.cxr 0xfffff986b43dafc0;r)
rax=0000000000000000 rbx=fffff986b43dba70 rcx=0000000031010c8a
rdx=ffff93314504b350 rsi=fffff986b43dba70 rdi=fffff986b43dba68
rip=ffff93640be32ca9 rsp=fffff986b43db9b0 rbp=00000000410813d9
r8=fffff986b43db878 r9=0000000000000002 r10=7ffffffffffffffc
r11=ffff9b86d3d3b080 r12=00000000002a1000 r13=0000000003d0fda0
r14=ffff93314001a010 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
win32kbase!XEPALOBJ::vRemoveFromList+0xb5:
ffff9364`0be32ca9 48898878050000 mov qword ptr [rax+578h],rcx ds:002b:00000000`00000578=????????????????
Last set context:
rax=0000000000000000 rbx=fffff986b43dba70 rcx=0000000031010c8a
rdx=ffff93314504b350 rsi=fffff986b43dba70 rdi=fffff986b43dba68
rip=ffff93640be32ca9 rsp=fffff986b43db9b0 rbp=00000000410813d9
r8=fffff986b43db878 r9=0000000000000002 r10=7ffffffffffffffc
r11=ffff9b86d3d3b080 r12=00000000002a1000 r13=0000000003d0fda0
r14=ffff93314001a010 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
win32kbase!XEPALOBJ::vRemoveFromList+0xb5:
ffff9364`0be32ca9 48898878050000 mov qword ptr [rax+578h],rcx ds:002b:00000000`00000578=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: clxMobile_prof

CURRENT_IRQL: 0

ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) x86fre

LAST_CONTROL_TRANSFER: from ffff93640be17253 to ffff93640be32ca9

STACK_TEXT:
fffff986`b43db9b0 ffff9364`0be17253 : ffff9331`4470fb70 00000000`410813d9 00000000`410813d9 ffff9364`0be40997 : win32kbase!XEPALOBJ::vRemoveFromList+0xb5
fffff986`b43dba00 ffff9364`0be1715b : ffff9331`4470fb70 00000000`00000000 00000000`410813d9 ffff9331`44013260 : win32kbase!SelectPaletteWorker+0xcf
fffff986`b43dba50 ffff9364`0c91c8db : 00000000`00000001 ffffffff`bf010f4b 00000000`00000000 00000000`00000000 : win32kbase!GreSelectPalette+0x3b
fffff986`b43dba90 ffff9364`0c91c863 : 00000000`ffffffff fffff986`b43dbb80 ffffffff`bf010f4b 00000000`410813d9 : win32kfull!_SelectPalette+0x53
fffff986`b43dbad0 fffff801`da386553 : ffff9b86`d3d3b080 00000000`bf010f4b 00000000`00003f80 ffff9364`0bd21cbc : win32kfull!NtUserSelectPalette+0x33
fffff986`b43dbb00 00000000`72b01e5c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`03d0f388 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x72b01e5c


FOLLOWUP_IP:
win32kbase!XEPALOBJ::vRemoveFromList+b5
ffff9364`0be32ca9 48898878050000 mov qword ptr [rax+578h],rcx

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32kbase!XEPALOBJ::vRemoveFromList+b5

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32kbase

IMAGE_NAME: win32kbase.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 0

IMAGE_VERSION: 10.0.16299.125

STACK_COMMAND: .cxr 0xfffff986b43dafc0 ; kb

BUCKET_ID_FUNC_OFFSET: b5

FAILURE_BUCKET_ID: 0x3B_win32kbase!XEPALOBJ::vRemoveFromList

BUCKET_ID: 0x3B_win32kbase!XEPALOBJ::vRemoveFromList

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:0x3b_win32kbase!xepalobj::vremovefromlist

FAILURE_ID_HASH: {078f0445-90d8-dbd7-9615-c86026551b6e}

Followup: MachineOwner
---------

Weiterlesen...