Crash on WaitForSingleObject - One or more arguments are invalid, ONLY happens on Win10 x64

[CABBITCHEN]

Hi Experts,

I got a crash issue on Win10 x64 OS only, it worked fine on Win7 x64 and Win10 x86.

The issue happened when calling WaitForSingleObject API, the parameters I passed in was a waitSignal and the wait time.



Checking the local variable, the waitSignal should be 0x960



But looking into the call stack information, it appeared that the parameters passed in were handles of entry (000000dd`3f4eb150) and wu (000000dd`2182cd40)



Windbg Analysis:

EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 0000000000000000
ExceptionCode: 80000003 (Break instruction exception)
ExceptionFlags: 00000000
NumberParameters: 0

FAULTING_THREAD: 00000b30

DEFAULT_BUCKET_ID: BREAKPOINT_NOSOS

PROCESS_NAME: XgigMaestro.exe

ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION} Breakpoint A breakpoint has been reached.

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid

EXCEPTION_CODE_STR: 80000003

WATSON_BKT_PROCSTAMP: 5ce1b394

WATSON_BKT_PROCVER: 10.6.88.64693

PROCESS_VER_PRODUCT: XgigMaestro

WATSON_BKT_MODULE: unknown

WATSON_BKT_MODVER: 0.0.0.0

WATSON_BKT_MODOFFSET: 0

WATSON_BKT_MODSTAMP: bbbbbbb4

BUILD_VERSION_STRING: 10.0.10240.16384 (th1.150709-1700)

MODLIST_WITH_TSCHKSUM_HASH: 50de0cd8e434949d065d43a8bd242ed420a5d51f

MODLIST_SHA1_HASH: aa85fa2b614cf5d225aea19a4eeaf41a61f22b69

NTGLOBALFLAG: 0

PROCESS_BAM_CURRENT_THROTTLED: 0

PROCESS_BAM_PREVIOUS_THROTTLED: 0

APPLICATION_VERIFIER_FLAGS: 0

PRODUCT_TYPE: 1

SUITE_MASK: 272

DUMP_FLAGS: 8000c07

DUMP_TYPE: 3

MISSING_CLR_SYMBOL: 0

ANALYSIS_SESSION_HOST: BK4YW02

ANALYSIS_SESSION_TIME: 05-29-2019 11:19:59.0436

ANALYSIS_VERSION: 10.0.16299.15 amd64fre

MANAGED_CODE: 1

MANAGED_ENGINE_MODULE: clr

MANAGED_ANALYSIS_PROVIDER: SOS

MANAGED_THREAD_ID: b30

THREAD_ATTRIBUTES:
OS_LOCALE: ENU

ADDITIONAL_DEBUG_TEXT: SOS.DLL is not loaded for managed code. Analysis might be incomplete

PROBLEM_CLASSES:

ID: [0n309]
Type: [@APPLICATION_FAULT_STRING]
Class: Primary
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Omit
Data: Add
String: [BREAKPOINT]
PID: [Unspecified]
TID: [Unspecified]
Frame: [0]

ID: [0n239]
Type: [NOSOS]
Class: Addendum
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Add
Data: Omit
PID: [Unspecified]
TID: [Unspecified]
Frame: [0]

BUGCHECK_STR: BREAKPOINT_NOSOS

PRIMARY_PROBLEM_CLASS: BREAKPOINT

LAST_CONTROL_TRANSFER: from 00007ffa1a75415f to 00007ffa1dc9358a

STACK_TEXT:
000000dd`21acdc50 00007ffa`00000002 000000dd`21acdc50 00000000`00000000 : ntdll!NtWaitForSingleObject+0xa
000000dd`3f4eb150 00007ff9`fb5b15ba 00000000`00000000 00000000`00000960 : KERNELBASE!WaitForSingleObjectEx+0x8f
000000dd`3f4eb150 000000dd`2182cd40 000000dd`2182cd40 00000000`00000030 : monarchfl_c_wrapper!ItechWaitForSignal+0x13
00000000`00000000 000000dd`3f4eb150 00000000`01082983 000000dd`45817190 : monarchfl_c_wrapper!MonarchDeviceXgigRemote::IssueWUtoCard+0x1f1
00000000`00000125 00000000`00000000 00000000`00000000 00000000`01082983 : monarchfl_c_wrapper!MS3Device:rocessWU+0x1a
00000000`00000000 000000dd`3f4a2f20 00000000`01082983 00000000`00000001 : monarchfl_c_wrapper!OpenTester+0x1d8
000000dd`2182cf00 000000dd`2182d040 000000dd`2182cfc8 00000000`01082983 : monarchfl_c_wrapper!open_tester+0xb8


Thanks,

Ricky

Continue reading...