BSOD: KERNEL_MODE_HEAP_CORRUPTION on Windows

selfagency commented 1 year ago

What happened: I updated incoming connection settings for individual applications and quickly unchecked something after checking it. This happened three times.

Dump File	Crash Time	Bug Check Code	Parameter 1	Parameter 2	Parameter 3	Parameter 4	Caused By Driver	Caused By Address	Processor	Crash Address	Full Path	Processors Count	Major Version	Minor Version	Dump File Size	Dump File Time
082423-11171-01.dmp	8/24/2023 12:43:37 PM	0x0000013a	00000000`00000011	ffffc504`47000100	ffffc504`5bdefd90	00000000`00000000	ntoskrnl.exe	ntoskrnl.exe+3fcc40	x64	ntoskrnl.exe+3fcc40	C:\windows\Minidump\082423-11171-01.dmp	12	15	19041	4,419,252	8/24/2023 12:44:50 PM
082423-11046-01.dmp	8/24/2023 10:21:24 AM	0x0000013a	00000000`00000011	ffffb48b`6ca00100	ffffb48b`6e50ff80	00000000`00000000	ntoskrnl.exe	ntoskrnl.exe+3fcc40	x64	ntoskrnl.exe+3fcc40	C:\windows\Minidump\082423-11046-01.dmp	12	15	19041	3,111,820	8/24/2023 10:22:30 AM
082423-10515-01.dmp	8/24/2023 9:45:56 AM	0x0000013a	00000000`00000011	ffffe286`c7000100	ffffe286`c7bc30f0	00000000`00000000	ntoskrnl.exe	ntoskrnl.exe+3fcc40	x64	ntoskrnl.exe+3fcc40	C:\windows\Minidump\082423-10515-01.dmp	12	15	19041	3,470,548	8/24/2023 9:47:09 AM

What did you expect to happen?:

To not cause a kernel panic!

How did you reproduce it?:

By quickly flicking a setting from on to off and back, like dangerous to untrusted on incoming connections.

Debug Information:

Version 1.4.3

``` Portmaster version 1.4.3 commit tags/v1.4.3-0-g62a9d5f6c910b79d0dc5a09dc7e76ed4a43518ab built with go1.20 (gc) windows/amd64 using options by user@docker on 19.08.2023 Licensed under the AGPLv3 license. The source code is available here: https://github.com/safing/portmaster ```

Platform: Microsoft Windows 10 Education 10.0.19045 Build 19045

``` System: Microsoft Windows 10 Education windows (Standalone Workstation) 10.0.19045 Build 19045 Kernel: 10.0.19045 Build 19045 x86_64 ```

No Module Error

Unexpected Logs

``` 230824 13:20:56.513 er/resolve:317 > WARN 018 resolver: async query for api.segment.io.A failed: query was blocked by upstream DNS resolver 6bc6a4.dns.nextdns.io (dot://6bc6a4.dns.nextdns.io:853#config) 230824 13:21:39.320 er/resolve:317 > WARN 020 resolver: async query for api.segment.io.A failed: query was blocked by upstream DNS resolver 6bc6a4.dns.nextdns.io (dot://6bc6a4.dns.nextdns.io:853#config) 230824 13:21:43.912 er/resolve:317 > WARN 022 resolver: async query for api.segment.io.A failed: query was blocked by upstream DNS resolver 6bc6a4.dns.nextdns.io (dot://6bc6a4.dns.nextdns.io:853#config) 230824 13:21:50.391 er/resolve:317 > WARN 024 resolver: async query for api.segment.io.A failed: query was blocked by upstream DNS resolver 6bc6a4.dns.nextdns.io (dot://6bc6a4.dns.nextdns.io:853#config) 230824 13:21:56.909 er/resolve:317 > WARN 026 resolver: async query for api.segment.io.A failed: query was blocked by upstream DNS resolver 6bc6a4.dns.nextdns.io (dot://6bc6a4.dns.nextdns.io:853#config) 230824 13:27:22.988 er/resolve:453 > WARN 028 resolver: query to dns://170.158.1.155:53#config failed: dial udp :62568->170.158.1.155:53: bind: An attempt was made to access a socket in a way forbidden by its access permissions. 230824 13:41:23.253 er/resolve:453 > WARN 030 resolver: query to dot://6bc6a4.dns.nextdns.io:853#config failed: query failed: failed to connect to 6bc6a4.dns.nextdns.io (dot://6bc6a4.dns.nextdns.io:853#config): dial tcp :52558->162.220.223.23:853: bind: An attempt was made to access a socket in a way forbidden by its access permissions. 230824 13:41:53.912 er/resolve:317 > WARN 032 resolver: async query for api.segment.io.A failed: query was blocked by upstream DNS resolver 6bc6a4.dns.nextdns.io (dot://6bc6a4.dns.nextdns.io:853#config) 230824 13:49:01.592 le/profile:496 > WARN 034 profile: error while getting binary name for C:\ProgramData\chocolatey\choco.exe: failed to get file properties of C:\ProgramData\chocolatey\choco.exe: command succeeded with empty output 230824 13:57:04.767 ry_handler:105 > ERRO 036 failed to encode JSON response: write tcp 127.0.0.1:817->127.0.0.1:58059: wsasend: An established connection was aborted by the software in your host machine. 230824 13:57:14.471 CURRENT TIME ```

Status: Trusted

``` ActiveSecurityLevel: Trusted SelectedSecurityLevel: Off ThreatMitigationLevel: Trusted CaptivePortal: OnlineStatus: Online ```

SPN: disabled (module disabled)

``` HomeHubID: HomeHubName: HomeHubIP: Transport: --- Client: true PublicHub: false HubHasIPv4: false HubHasIPv6: false ```

Resolvers: 5/5

``` 6bc6a4.dns.nextdns.io (dot://6bc6a4.dns.nextdns.io:853#config) dot://6bc6a4.dns.nextdns.io:853#config Failing: false 170.158.1.155 (dns://170.158.1.155:53#config) dns://170.158.1.155:53#config Failing: false 170.158.1.156 (dns://170.158.1.156:53#config) dns://170.158.1.156:53#config Failing: false 170.158.1.155 (dns://170.158.1.155:53#system) dns://170.158.1.155:53#system Failing: false 170.158.1.156 (dns://170.158.1.156:53#system) dns://170.158.1.156:53#system Failing: false ```

Config: 10

``` core/enableNetworkRating: true core/expertiseLevel: expert core/useSystemNotifications: true dns/nameservers: [redacted] dns/useStaleCache: true filter/blockInbound: 6 filter/blockP2P: 4 filter/endpoints: [redacted] filter/lists: [TRAC MAL DECEP BAD NSFW UNBREAK] filter/serviceEndpoints: [redacted] ```

Updates: stable (12/30)

``` Active: all/intel/geoip/geoipv4.mmdb.gz: 20230102.9.32 all/intel/geoip/geoipv6.mmdb.gz: 20230102.13.14 all/intel/lists/base.dsdl: 20230701.0.6 all/intel/lists/index.dsd: 2023.6.13 all/intel/lists/intermediate.dsdl: 20230820.0.6 all/intel/lists/urgent.dsdl: 20230824.15.13 all/intel/portmaster/notifications.yaml: 20230821.9.6 all/ui/modules/assets.zip: 0.3.1 all/ui/modules/portmaster.zip: 0.7.4 windows_amd64/core/portmaster-core.exe: 1.4.3 windows_amd64/kext/portmaster-kext.sys: 1.1.2 windows_amd64/start/portmaster-start.exe: 1.0.13 Selected: all/dashboards/hubs.json: 0.0.2 all/intel/geoip/geoipv4.mmdb.gz: 20230102.9.32 all/intel/geoip/geoipv4.mmdb: 20230102.9.32 all/intel/geoip/geoipv6.mmdb.gz: 20230102.13.14 all/intel/geoip/geoipv6.mmdb: 20230102.13.14 all/intel/lists/base.dsdl: 20230701.0.6 all/intel/lists/index.dsd: 2023.6.13 all/intel/lists/intermediate.dsdl: 20230820.0.6 all/intel/lists/urgent.dsdl: 20230824.15.13 all/intel/portmaster/notifications.yaml: 20230821.9.6 all/intel/spn/main-intel.yaml: 20230822.8.30 all/ui/modules/assets.zip: 0.3.1 all/ui/modules/base.zip: 0.2.11 all/ui/modules/console.zip: 0.1.11 all/ui/modules/monitor.zip: 0.2.4 all/ui/modules/portmaster.zip: 0.7.4 all/ui/modules/profilemgr.zip: 0.1.7 all/ui/modules/settings.zip: 0.1.8 windows_amd64/app/portmaster-app.zip: 0.2.5 windows_amd64/core/portmaster-core.exe: 1.4.3 windows_amd64/hub/spn-hub.exe: 0.6.6 windows_amd64/jess/jess.exe: 0.3.1 windows_amd64/kext/portmaster-kext.dll: 1.0.14 windows_amd64/kext/portmaster-kext.pdb: 1.1.2 windows_amd64/kext/portmaster-kext.sys: 1.1.2 windows_amd64/notifier/portmaster-notifier.exe: 0.3.5 windows_amd64/notifier/portmaster-snoretoast.exe: 0.6.0 windows_amd64/notifier/portmaster-wintoast.dll: 0.1.4 windows_amd64/packages/portmaster-installer.exe: 1.0.13 windows_amd64/start/portmaster-start.exe: 1.0.13 ```

Compatibility: WFP State (68)

``` CrowdStrike Provider CsAgent {dd00a9d2-2593-497a-b84e-a1c47ab952d5} DatagramV4Callout Callout This callout is used to handle datagram data for IPv4. {a6be3096-66bf-4959-8629-1c3a4c40c31e} [no provider key] FWPM_LAYER_DATAGRAM_DATA_V4 DatagramV4Filter Filter The filter is used for handling datagram data for IPv4. {81a588f6-3be4-4600-b030-602beee3ae8c} [no provider key] FWPM_LAYER_DATAGRAM_DATA_V4 {a87fb472-fc68-4805-8559-c6ae774773e0} DatagramV6Callout Callout This callout is used to handle datagram data for IPv6. {d55cb395-29a1-4716-8cb1-65c888995f54} [no provider key] FWPM_LAYER_DATAGRAM_DATA_V6 DatagramV6Filter Filter The filter is used for handling datagram data for IPv6. {8c9ba721-4e49-46b0-81c9-c0245d8c30b1} [no provider key] FWPM_LAYER_DATAGRAM_DATA_V6 {a87fb472-fc68-4805-8559-c6ae774773e0} Edge traversal Teredo Authorization Sublayer SubLayer Edge traversal Teredo Authorization Sublayer {7b6b11f6-cbb5-433c-ae06-6a4f0076e49e} IPxlat Forward IPv4 filter Callout Filters forwarded IPv4 packets into synthetic IPv6 packets {b255c296-7e0c-4115-95f3-b7f24a8a1162} [no provider key] FWPM_LAYER_IPFORWARD_V4 IPxlat Forward IPv4 sub layer SubLayer Sub layer for filtering forwarded IPv4 packets into synthetic IPv6 packets {4351e497-5d8b-46bc-86d9-abccdb868d6d} IPxlat Inbound IPv6 filter Callout Filters incoming IPv6 packets into synthetic IPv4 packets {93bb703d-0502-42e2-8e30-a14576e5085d} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V6 IPxlat Inbound IPv6 sub layer SubLayer Sub layer for filtering incoming IPv6 packets into synthetic IPv4 packets {dfb035ca-c2a7-4684-97b6-4dbc57c63590} IPxlat Outbound IPv4 filter Callout Filters outgoing IPv4 packets into synthetic IPv6 packets {66d52657-1979-4e58-b3f7-4756434c4880} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V4 IPxlat Outbound IPv4 sub layer SubLayer Sub layer for filtering outgoing IPv4 packets into synthetic IPv6 packets {d3e70856-fc90-4c0a-b9b2-a6f73e20b5cc} NgcSock ALE Accept Callout V4 Callout Monitors socket accept attempts {11d277f8-73e4-437a-a28c-4c0730f88de6} [no provider key] FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 NgcSock ALE Accept Callout V4 Filter Monitors socket accept attempts {fdee709b-a334-462a-bbfb-7edde515c826} [no provider key] FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Accept Callout V6 Callout Monitors socket accept attempts {9a90c980-86c1-46dc-8eb7-d6f7ac79facb} [no provider key] FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 NgcSock ALE Accept Callout V6 Filter Monitors socket accept attempts {86a26217-4d9e-4b45-a80a-47971949d80a} [no provider key] FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Connect Callout V4 Callout Monitors socket connect attempts {04eda0e1-f1fc-4fc5-921c-6137a70ca141} [no provider key] FWPM_LAYER_ALE_AUTH_CONNECT_V4 NgcSock ALE Connect Callout V4 Filter Monitors socket connect attempts {3a627b67-24c2-413c-8101-6dd634666ad8} [no provider key] FWPM_LAYER_ALE_AUTH_CONNECT_V4 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Connect Callout V6 Callout Monitors socket connect attempts {e0896e2c-312e-4701-b370-de256aacd276} [no provider key] FWPM_LAYER_ALE_AUTH_CONNECT_V6 NgcSock ALE Connect Callout V6 Filter Monitors socket connect attempts {c4cc464b-14da-478a-8491-4c82c2439efc} [no provider key] FWPM_LAYER_ALE_AUTH_CONNECT_V6 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Connect Redirect Callout V4 Callout Monitors socket connect attempts {1004f838-c3bf-4ed7-93d8-8b9d829dfd9d} [no provider key] FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 NgcSock ALE Connect Redirect Callout V4 Filter Monitors socket connect attempts {f077bd74-9463-41a7-9261-f6c17654e9af} [no provider key] FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Connect Redirect Callout V6 Callout Monitors socket connect attempts {66540394-adee-46d2-a93f-ca088a526d9f} [no provider key] FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 NgcSock ALE Connect Redirect Callout V6 Filter Monitors socket connect attempts {db67bebd-105a-42fd-b221-77add47ea30d} [no provider key] FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Endpoint Closure Callout V4 Callout Monitors endpoint closure attempts {94e52e0d-cc68-4bfb-b9a6-3a916438f50a} [no provider key] FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 NgcSock ALE Endpoint Closure Callout V4 Filter Monitors endpoint closure attempts {961a6dea-ade5-4b14-8bbe-3e1e7cfbb80e} [no provider key] FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Endpoint Closure Callout V6 Callout Monitors endpoint closure attempts {25e64ce2-b779-4024-ae49-086390348ad1} [no provider key] FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 NgcSock ALE Endpoint Closure Callout V6 Filter Monitors endpoint closure attempts {78d750ce-01c2-48bb-b12a-b6dd6ce26d8c} [no provider key] FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Resource Assign Callout V4 Callout Monitors socket open attempts {3e65c544-4eb3-45f2-b625-44376572ab63} [no provider key] FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 NgcSock ALE Resource Assign Callout V4 Filter Monitors socket open attempts {5104da83-8553-4d60-9aa5-5afe26931073} [no provider key] FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Resource Assign Callout V6 Callout Monitors socket open attempts {b8bfc9f3-c4de-4253-8cbe-0259c7c4b115} [no provider key] FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 NgcSock ALE Resource Assign Callout V6 Filter Monitors socket open attempts {f0814af2-ff4d-43a1-8432-1cbb996f1fb1} [no provider key] FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Resource Release Callout V4 Callout Monitors socket close attempts {feaf2b1d-3957-43ea-a24e-a874c16a9ed9} [no provider key] FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 NgcSock ALE Resource Release Callout V4 Filter Monitors socket close attempts {871de18c-edc1-4cbb-836a-2911fef05f9f} [no provider key] FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock ALE Resource Release Callout V6 Callout Monitors socket close attempts {ccd3d143-13e3-4f73-b4f1-54262acc7241} [no provider key] FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 NgcSock ALE Resource Release Callout V6 Filter Monitors socket close attempts {c5555731-ef80-4bbb-974f-96509d45db25} [no provider key] FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock Datagram Callout V4 Callout Monitors socket udp send/recv attempts {ff3a24d5-1eff-4f5f-a5eb-cdb8c24aa78c} [no provider key] FWPM_LAYER_DATAGRAM_DATA_V4 NgcSock Datagram Callout V4 Filter Monitors socket udp send/recv attempts {b7195715-0102-4e4d-88c8-50b30f0c26b9} [no provider key] FWPM_LAYER_DATAGRAM_DATA_V4 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock Datagram Callout V6 Callout Monitors socket udp send/recv attempts {6c9e1bb3-f43b-4371-921d-bab35bf23ee2} [no provider key] FWPM_LAYER_DATAGRAM_DATA_V6 NgcSock Datagram Callout V6 Filter Monitors socket udp send/recv attempts {fdedebfb-600a-4290-acfd-42535a773b3f} [no provider key] FWPM_LAYER_DATAGRAM_DATA_V6 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock Stream Callout V4 Callout Monitors socket tcp send/recv attempts {f94db164-fcb4-401b-9b4d-06ae5c1dbfd5} [no provider key] FWPM_LAYER_STREAM_V4 NgcSock Stream Callout V4 Filter Monitors socket tcp send/recv attempts {11deabbc-e21a-4446-b29a-ef0a0937dc3d} [no provider key] FWPM_LAYER_STREAM_V4 {fe743896-381f-4ef8-a94b-a42e3a65d322} NgcSock Stream Callout V6 Callout Monitors socket tcp send/recv attempts {deffc630-d3c2-4c9b-8a1e-b8f008f54e1b} [no provider key] FWPM_LAYER_STREAM_V6 NgcSock Stream Callout V6 Filter Monitors socket tcp send/recv attempts {675ea237-3712-4ca8-9c3b-469a589a16b5} [no provider key] FWPM_LAYER_STREAM_V6 {fe743896-381f-4ef8-a94b-a42e3a65d322} PortmasterALEInboundV4Callout Callout This callout is used by the Portmaster to monitor outbound IPv4 traffic before the connection is established. {e36216c5-7b33-40ee-b054-fb1bc7decc19} [no provider key] FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 PortmasterALEInboundV4Filter Filter This filter is used by the Portmaster to monitor inbound IPv4 traffic before the connection is established. {b32ecc03-c0e9-49e7-aa19-f565109e34e4} [no provider key] FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterALEInboundV6Callout Callout This callout is used by the Portmaster to monitor outbound IPv6 traffic before the connection is established. {77ea9927-66e7-4cf8-9ea2-941edf2fae63} [no provider key] FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 PortmasterALEInboundV6Filter Filter This filter is used by the Portmaster to monitor inbound IPv6 traffic before the connection is established. {dc017f3c-fc84-4273-bd1f-fdb8b224c2ee} [no provider key] FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterALEOutboundV4Callout Callout This callout is used by the Portmaster to montiror outbound IPv4 traffic before the connection is established. {029819fe-97d9-4e5f-a0fb-78ef5cef8ac4} [no provider key] FWPM_LAYER_ALE_AUTH_CONNECT_V4 PortmasterALEOutboundV4Filter Filter This filter is used by the Portmaster to monitor outbound IPv4 traffic before the connection is established. {6f60aeda-6150-4649-a895-870aa9f3107f} [no provider key] FWPM_LAYER_ALE_AUTH_CONNECT_V4 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterALEOutboundV6Callout Callout This callout is used by the Portmaster to monitor outbound IPv6 traffic before the connection is established. {d6b0213a-337a-4cc6-84c0-cc60731b9e2a} [no provider key] FWPM_LAYER_ALE_AUTH_CONNECT_V6 PortmasterALEOutboundV6Filter Filter This filter is used by the Portmaster to monitor outbound IPv6 traffic before the connection is established. {531d4e3b-abd0-4961-9d19-eedb618247ed} [no provider key] FWPM_LAYER_ALE_AUTH_CONNECT_V6 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterInboundV4Callout Callout This callout is used by the Portmaster to intercept inbound IPv4 traffic. {05c55149-4732-4857-8d10-f178f3a06f8c} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V4 PortmasterInboundV4Filter Filter This filter is used by the Portmaster to intercept inbound IPv4 traffic. {d9eb71ef-4b6e-431e-989f-40182cb9f1e8} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V4 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterInboundV6Callout Callout This callout is used by the Portmaster to intercept inbound IPv6 traffic. {ceff1df7-2baa-44c5-a6e5-73a95849bcff} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V6 PortmasterInboundV6Filter Filter This filter is used by the Portmaster to intercept inbound IPv6 traffic. {edb1aed8-2f21-41e7-916d-383010dacd9b} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V6 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterOutboundV4Callout Callout This callout is used by the Portmaster to intercept outbound IPv4 traffic. {41162b9e-8473-4b88-a5eb-04cf1d276b06} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V4 PortmasterOutboundV4Filter Filter This filter is used by the Portmaster to intercept outbound IPv4 traffic. {0f9c97fa-6391-4054-8b17-0dd9973ffdcc} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V4 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterOutboundV6Callout Callout This callout is used by the Portmaster to intercept outbound IPv6 traffic. {32bad112-6af4-4109-809b-c07570ba01b4} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V6 PortmasterOutboundV6Filter Filter This filter is used by the Portmaster to intercept outbound IPv6 traffic. {f5cf7475-3c83-4064-ba99-238157fe6928} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V6 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterSublayer SubLayer The Portmaster sublayer holds all it's filters. {a87fb472-fc68-4805-8559-c6ae774773e0} StreamV4Callout Callout This callout is used to handle stream data for IPv4. {525dac52-65de-4a6f-b546-2b1f3bc226db} [no provider key] FWPM_LAYER_STREAM_V4 StreamV4Filter Filter The filter is used for handling stream data for IPv4. {099f2353-aebd-4b57-b3b0-56282a0cd3cd} [no provider key] FWPM_LAYER_STREAM_V4 {a87fb472-fc68-4805-8559-c6ae774773e0} StreamV6Callout Callout This callout is used to handle stream data for IPv6. {4321ddf9-57b2-4391-8fc5-c5b46c655587} [no provider key] FWPM_LAYER_STREAM_V6 StreamV6Filter Filter The filter is used for handling stream data for IPv6. {af71bb1a-a35e-42a8-a54e-44e1b8cdd088} [no provider key] FWPM_LAYER_STREAM_V6 {a87fb472-fc68-4805-8559-c6ae774773e0} Teredo socket option opt out block filter Filter [no description] {85c3278e-2fd7-44b0-81ef-688889ee60ba} {257af15d-a4ba-445d-8965-1828587db450} FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 {7b6b11f6-cbb5-433c-ae06-6a4f0076e49e} ngcsock transport provider Provider provider for use by ngcsock callouts {5c6145c7-239f-4028-bcff-4be580cc0dee} ngcsock transport sub-layer SubLayer sub-layer for use by ngcsock callouts {fe743896-381f-4ef8-a94b-a42e3a65d322} ```

Goroutine Stack

``` goroutine profile: total 162 59 @ 0x19bfb6 0x1abc7e 0x7e169f 0x4eb7b3 0x4ead57 0x4eab4a 0x1ca861 # 0x7e169e github.com/safing/portmaster/network.(*Connection).packetHandlerWorker+0xfe /home/user/git/safing/portmaster/network/connection.go:888 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4ead56 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x4eab49 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 43 @ 0x19bfb6 0x1abc7e 0x527da6 0x528396 0x1ca861 # 0x527da5 github.com/safing/portbase/api.(*DatabaseAPI).processSub+0x225 /home/user/git/safing/portbase/api/database.go:449 # 0x528395 github.com/safing/portbase/api.(*DatabaseAPI).handleQsub+0xd5 /home/user/git/safing/portbase/api/database.go:512 7 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x232358 0x298a29 0x2a8625 0x3adc1d 0x26dd78 0x3ade05 0x3ab2f6 0x3b0eef 0x3b0ef0 0x2045da 0x27c288 0x27c289 0x5ba947 0x5ba707 0x7b8148 0x4eb7b3 0x4ead57 0x4eab4a 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x232357 internal/poll.(*FD).Read+0x2b7 /usr/local/go/src/internal/poll/fd_windows.go:436 # 0x298a28 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0x2a8624 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x3adc1c crypto/tls.(*atLeastReader).Read+0x3c /usr/local/go/src/crypto/tls/conn.go:788 # 0x26dd77 bytes.(*Buffer).ReadFrom+0x97 /usr/local/go/src/bytes/buffer.go:202 # 0x3ade04 crypto/tls.(*Conn).readFromUntil+0xe4 /usr/local/go/src/crypto/tls/conn.go:810 # 0x3ab2f5 crypto/tls.(*Conn).readRecordOrCCS+0x115 /usr/local/go/src/crypto/tls/conn.go:617 # 0x3b0eee crypto/tls.(*Conn).readRecord+0x16e /usr/local/go/src/crypto/tls/conn.go:583 # 0x3b0eef crypto/tls.(*Conn).Read+0x16f /usr/local/go/src/crypto/tls/conn.go:1288 # 0x2045d9 io.ReadAtLeast+0x99 /usr/local/go/src/io/io.go:332 # 0x27c287 io.ReadFull+0xc7 /usr/local/go/src/io/io.go:351 # 0x27c288 encoding/binary.Read+0xc8 /usr/local/go/src/encoding/binary/binary.go:233 # 0x5ba946 github.com/miekg/dns.(*Conn).ReadMsgHeader+0x126 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.55/client.go:287 # 0x5ba706 github.com/miekg/dns.(*Conn).ReadMsg+0x26 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.55/client.go:249 # 0x7b8147 github.com/safing/portmaster/resolver.(*tcpResolverConn).reader+0x67 /home/user/git/safing/portmaster/resolver/resolver-tcp.go:423 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4ead56 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x4eab49 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 7 @ 0x19bfb6 0x1abc7e 0x7b7965 0x4eb7b3 0x4ead57 0x4eab4a 0x1ca861 # 0x7b7964 github.com/safing/portmaster/resolver.(*tcpResolverConn).handler+0x224 /home/user/git/safing/portmaster/resolver/resolver-tcp.go:299 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4ead56 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x4eab49 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 2 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x232358 0x298a29 0x2a8625 0x444e71 0x2c80bf 0x2c821d 0x44ad3c 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x232357 internal/poll.(*FD).Read+0x2b7 /usr/local/go/src/internal/poll/fd_windows.go:436 # 0x298a28 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0x2a8624 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x444e70 net/http.(*connReader).Read+0x170 /usr/local/go/src/net/http/server.go:782 # 0x2c80be bufio.(*Reader).fill+0xfe /usr/local/go/src/bufio/bufio.go:106 # 0x2c821c bufio.(*Reader).Peek+0x5c /usr/local/go/src/bufio/bufio.go:144 # 0x44ad3b net/http.(*conn).serve+0x77b /usr/local/go/src/net/http/server.go:2030 2 @ 0x19bfb6 0x1abc7e 0x4dbbe5 0x4eb7b3 0x4eb196 0x1ca861 # 0x4dbbe4 github.com/safing/portbase/database.(*Interface).DelayedCacheWriter+0x184 /home/user/git/safing/portbase/database/interface_cache.go:34 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 2 @ 0x19bfb6 0x1abc7e 0x512c66 0x4eb7b3 0x4eb196 0x1ca861 # 0x512c65 github.com/safing/portbase/rng.(*Feeder).run+0x165 /home/user/git/safing/portbase/rng/entropy.go:117 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 2 @ 0x19bfb6 0x1abc7e 0x527da6 0x5279d2 0x1ca861 # 0x527da5 github.com/safing/portbase/api.(*DatabaseAPI).processSub+0x225 /home/user/git/safing/portbase/api/database.go:449 # 0x5279d1 github.com/safing/portbase/api.(*DatabaseAPI).handleSub+0x91 /home/user/git/safing/portbase/api/database.go:421 1 @ 0x16462a 0x1c7369 0x1c6ff0 0x210c94 0x20aad3 0x20aac6 0x232265 0x23bf9e 0x23bf96 0x2ca656 0x53fb45 0x1ca861 # 0x1c7368 syscall.SyscallN+0x108 /usr/local/go/src/runtime/syscall_windows.go:557 # 0x1c6fef syscall.Syscall6+0x4f /usr/local/go/src/runtime/syscall_windows.go:501 # 0x210c93 syscall.readFile+0x93 /usr/local/go/src/syscall/zsyscall_windows.go:1024 # 0x20aad2 syscall.ReadFile+0x32 /usr/local/go/src/syscall/syscall_windows.go:404 # 0x20aac5 syscall.Read+0x25 /usr/local/go/src/syscall/syscall_windows.go:383 # 0x232264 internal/poll.(*FD).Read+0x1c4 /usr/local/go/src/internal/poll/fd_windows.go:422 # 0x23bf9d os.(*File).read+0x5d /usr/local/go/src/os/file_posix.go:31 # 0x23bf95 os.(*File).Read+0x55 /usr/local/go/src/os/file.go:118 # 0x2ca655 bufio.(*Scanner).Scan+0x875 /usr/local/go/src/bufio/scan.go:214 # 0x53fb44 github.com/safing/portbase/run.inputSignals+0x84 /home/user/git/safing/portbase/run/main.go:126 1 @ 0x16462a 0x1c7369 0x1c7078 0x2bccf3 0xa021e5 0xa022ab 0x9ff697 0x9fe7b3 0xa02987 0x4eb7b3 0x4eb196 0x1ca861 # 0x1c7368 syscall.SyscallN+0x108 /usr/local/go/src/runtime/syscall_windows.go:557 # 0x1c7077 syscall.Syscall9+0x77 /usr/local/go/src/runtime/syscall_windows.go:507 # 0x2bccf2 golang.org/x/sys/windows.DeviceIoControl+0xd2 /home/user/go/pkg/mod/golang.org/x/sys@v0.11.0/windows/zsyscall_windows.go:1809 # 0xa021e4 github.com/safing/portmaster/firewall/interception/windowskext.deviceIOControlAsync+0xa4 /home/user/git/safing/portmaster/firewall/interception/windowskext/syscall.go:48 # 0xa022aa github.com/safing/portmaster/firewall/interception/windowskext.deviceIOControl+0x2a /home/user/git/safing/portmaster/firewall/interception/windowskext/syscall.go:63 # 0x9ff696 github.com/safing/portmaster/firewall/interception/windowskext.RecvVerdictRequest+0x136 /home/user/git/safing/portmaster/firewall/interception/windowskext/kext.go:138 # 0x9fe7b2 github.com/safing/portmaster/firewall/interception/windowskext.Handler+0x32 /home/user/git/safing/portmaster/firewall/interception/windowskext/handler.go:102 # 0xa02986 github.com/safing/portmaster/firewall/interception.startInterception.func1+0x26 /home/user/git/safing/portmaster/firewall/interception/interception_windows.go:33 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x16c61c 0x1c5e6f 0x53f439 0x1ca861 # 0x1c5e6e os/signal.signal_recv+0x2e /usr/local/go/src/runtime/sigqueue.go:152 # 0x53f438 os/signal.loop+0x18 /usr/local/go/src/os/signal/signal_unix.go:23 1 @ 0x18eef6 0x1c3ba5 0x4f2815 0x4f262d 0x4ef3cb 0x4fc965 0x9fb0ef 0x52b472 0x52aca9 0x52fe53 0x52ea09 0x4eb7b3 0x4ead57 0x52e98d 0x44e9d6 0x44abd2 0x1ca861 # 0x1c3ba4 runtime/pprof.runtime_goroutineProfileWithLabels+0x24 /usr/local/go/src/runtime/mprof.go:844 # 0x4f2814 runtime/pprof.writeRuntimeProfile+0xb4 /usr/local/go/src/runtime/pprof/pprof.go:734 # 0x4f262c runtime/pprof.writeGoroutine+0x4c /usr/local/go/src/runtime/pprof/pprof.go:694 # 0x4ef3ca runtime/pprof.(*Profile).WriteTo+0x14a /usr/local/go/src/runtime/pprof/pprof.go:329 # 0x4fc964 github.com/safing/portbase/utils/debug.(*Info).AddGoroutineStack+0x64 /home/user/git/safing/portbase/utils/debug/debug.go:97 # 0x9fb0ee github.com/safing/portmaster/core.debugInfo+0x12e /home/user/git/safing/portmaster/core/api.go:158 # 0x52b471 github.com/safing/portbase/api.(*Endpoint).ServeHTTP+0x751 /home/user/git/safing/portbase/api/endpoints.go:454 # 0x52aca8 github.com/safing/portbase/api.(*endpointHandler).ServeHTTP+0x48 /home/user/git/safing/portbase/api/endpoints.go:370 # 0x52fe52 github.com/safing/portbase/api.(*mainHandler).handle+0x1432 /home/user/git/safing/portbase/api/router.go:308 # 0x52ea08 github.com/safing/portbase/api.(*mainHandler).ServeHTTP.func1+0x28 /home/user/git/safing/portbase/api/router.go:110 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4ead56 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x52e98c github.com/safing/portbase/api.(*mainHandler).ServeHTTP+0x6c /home/user/git/safing/portbase/api/router.go:109 # 0x44e9d5 net/http.serverHandler.ServeHTTP+0x315 /usr/local/go/src/net/http/server.go:2936 # 0x44abd1 net/http.(*conn).serve+0x611 /usr/local/go/src/net/http/server.go:1995 1 @ 0x19bfb6 0x166b7d 0x166678 0x7b2c7a 0x4eb7b3 0x4eb196 0x1ca861 # 0x7b2c79 github.com/safing/portmaster/resolver.listenToMDNS+0x619 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:146 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x232358 0x298a29 0x2a8625 0x2c80bf 0x2c821d 0x5160ac 0x5181db 0x5191cc 0x5197d9 0x5252f7 0x4eb7b3 0x4ead57 0x4eab4a 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x232357 internal/poll.(*FD).Read+0x2b7 /usr/local/go/src/internal/poll/fd_windows.go:436 # 0x298a28 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0x2a8624 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x2c80be bufio.(*Reader).fill+0xfe /usr/local/go/src/bufio/bufio.go:106 # 0x2c821c bufio.(*Reader).Peek+0x5c /usr/local/go/src/bufio/bufio.go:144 # 0x5160ab github.com/gorilla/websocket.(*Conn).read+0x2b /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.5.0/conn.go:371 # 0x5181da github.com/gorilla/websocket.(*Conn).advanceFrame+0x7a /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.5.0/conn.go:809 # 0x5191cb github.com/gorilla/websocket.(*Conn).NextReader+0xcb /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.5.0/conn.go:1009 # 0x5197d8 github.com/gorilla/websocket.(*Conn).ReadMessage+0x18 /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.5.0/conn.go:1093 # 0x5252f6 github.com/safing/portbase/api.(*DatabaseWebsocketAPI).handler+0x76 /home/user/git/safing/portbase/api/database.go:137 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4ead56 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x4eab49 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x232358 0x298a29 0x2a8625 0x3adc1d 0x26dd78 0x3ade05 0x3ab2f6 0x3b0eef 0x3b0ef0 0x2c869b 0x2045da 0x4139ee 0x4139a8 0x414175 0x4351ee 0x43470f 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x232357 internal/poll.(*FD).Read+0x2b7 /usr/local/go/src/internal/poll/fd_windows.go:436 # 0x298a28 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0x2a8624 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x3adc1c crypto/tls.(*atLeastReader).Read+0x3c /usr/local/go/src/crypto/tls/conn.go:788 # 0x26dd77 bytes.(*Buffer).ReadFrom+0x97 /usr/local/go/src/bytes/buffer.go:202 # 0x3ade04 crypto/tls.(*Conn).readFromUntil+0xe4 /usr/local/go/src/crypto/tls/conn.go:810 # 0x3ab2f5 crypto/tls.(*Conn).readRecordOrCCS+0x115 /usr/local/go/src/crypto/tls/conn.go:617 # 0x3b0eee crypto/tls.(*Conn).readRecord+0x16e /usr/local/go/src/crypto/tls/conn.go:583 # 0x3b0eef crypto/tls.(*Conn).Read+0x16f /usr/local/go/src/crypto/tls/conn.go:1288 # 0x2c869a bufio.(*Reader).Read+0x1ba /usr/local/go/src/bufio/bufio.go:237 # 0x2045d9 io.ReadAtLeast+0x99 /usr/local/go/src/io/io.go:332 # 0x4139ed io.ReadFull+0x6d /usr/local/go/src/io/io.go:351 # 0x4139a7 net/http.http2readFrameHeader+0x27 /usr/local/go/src/net/http/h2_bundle.go:1567 # 0x414174 net/http.(*http2Framer).ReadFrame+0x94 /usr/local/go/src/net/http/h2_bundle.go:1831 # 0x4351ed net/http.(*http2clientConnReadLoop).run+0x12d /usr/local/go/src/net/http/h2_bundle.go:9187 # 0x43470e net/http.(*http2ClientConn).readLoop+0x6e /usr/local/go/src/net/http/h2_bundle.go:9082 1 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x232358 0x298a29 0x2a8625 0x4449ff 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x232357 internal/poll.(*FD).Read+0x2b7 /usr/local/go/src/internal/poll/fd_windows.go:436 # 0x298a28 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0x2a8624 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x4449fe net/http.(*connReader).backgroundRead+0x3e /usr/local/go/src/net/http/server.go:674 1 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x232358 0x298a29 0x2a8625 0x7b4b05 0x7b2dce 0x4eb7b3 0x4eb196 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x232357 internal/poll.(*FD).Read+0x2b7 /usr/local/go/src/internal/poll/fd_windows.go:436 # 0x298a28 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0x2a8624 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x7b4b04 github.com/safing/portmaster/resolver.listenForDNSPackets+0x84 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:342 # 0x7b2dcd github.com/safing/portmaster/resolver.listenToMDNS.func7+0x2d /home/user/git/safing/portmaster/resolver/resolver-mdns.go:130 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x232358 0x298a29 0x2a8625 0x7b4b05 0x7b2e8e 0x4eb7b3 0x4eb196 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x232357 internal/poll.(*FD).Read+0x2b7 /usr/local/go/src/internal/poll/fd_windows.go:436 # 0x298a28 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0x2a8624 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x7b4b04 github.com/safing/portmaster/resolver.listenForDNSPackets+0x84 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:342 # 0x7b2e8d github.com/safing/portmaster/resolver.listenToMDNS.func3+0x2d /home/user/git/safing/portmaster/resolver/resolver-mdns.go:103 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x232358 0x298a29 0x2a8625 0x7b4b05 0x7b2eee 0x4eb7b3 0x4eb196 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x232357 internal/poll.(*FD).Read+0x2b7 /usr/local/go/src/internal/poll/fd_windows.go:436 # 0x298a28 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0x2a8624 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x7b4b04 github.com/safing/portmaster/resolver.listenForDNSPackets+0x84 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:342 # 0x7b2eed github.com/safing/portmaster/resolver.listenToMDNS.func1+0x2d /home/user/git/safing/portmaster/resolver/resolver-mdns.go:90 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x233850 0x298d69 0x2b3525 0x2b18b1 0x2b1a70 0x5f9945 0x5e83b0 0x5e5a99 0x5e70c9 0x5e61ab 0xa14f8b 0x4eb7b3 0x4eb196 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x23384f internal/poll.(*FD).ReadFromInet6+0x14f /usr/local/go/src/internal/poll/fd_windows.go:633 # 0x298d68 net.(*netFD).readFromInet6+0x28 /usr/local/go/src/net/fd_posix.go:72 # 0x2b3524 net.(*UDPConn).readFrom+0x84 /usr/local/go/src/net/udpsock_posix.go:59 # 0x2b18b0 net.(*UDPConn).readFromUDP+0x30 /usr/local/go/src/net/udpsock.go:149 # 0x2b1a6f net.(*UDPConn).ReadFrom+0x4f /usr/local/go/src/net/udpsock.go:158 # 0x5f9944 github.com/miekg/dns.ReadFromSessionUDP+0x24 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.55/udp_windows.go:22 # 0x5e83af github.com/miekg/dns.(*Server).readUDP+0x10f /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.55/server.go:695 # 0x5e5a98 github.com/miekg/dns.defaultReader.ReadUDP+0x18 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.55/server.go:174 # 0x5e70c8 github.com/miekg/dns.(*Server).serveUDP+0x2a8 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.55/server.go:513 # 0x5e61aa github.com/miekg/dns.(*Server).ListenAndServe+0x46a /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.55/server.go:342 # 0xa14f8a github.com/safing/portmaster/nameserver.startListener.func1+0x24a /home/user/git/safing/portmaster/nameserver/module.go:147 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x192417 0x1c3fa9 0x230332 0x231657 0x235ead 0x236216 0x29a725 0x2b0d85 0x2afb5d 0x44ef45 0x44eb7d 0x530645 0x4eb7b3 0x4ead57 0x52e8a5 0x4eb7b3 0x4eb196 0x1ca861 # 0x1c3fa8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:306 # 0x230331 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0x231656 internal/poll.execIO+0xf6 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0x235eac internal/poll.(*FD).acceptOne+0x6c /usr/local/go/src/internal/poll/fd_windows.go:936 # 0x236215 internal/poll.(*FD).Accept+0x1d5 /usr/local/go/src/internal/poll/fd_windows.go:970 # 0x29a724 net.(*netFD).accept+0x64 /usr/local/go/src/net/fd_windows.go:139 # 0x2b0d84 net.(*TCPListener).accept+0x24 /usr/local/go/src/net/tcpsock_posix.go:148 # 0x2afb5c net.(*TCPListener).Accept+0x3c /usr/local/go/src/net/tcpsock.go:297 # 0x44ef44 net/http.(*Server).Serve+0x384 /usr/local/go/src/net/http/server.go:3059 # 0x44eb7c net/http.(*Server).ListenAndServe+0x7c /usr/local/go/src/net/http/server.go:2988 # 0x530644 github.com/safing/portbase/api.serverManager.func1+0x24 /home/user/git/safing/portbase/api/router.go:92 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4ead56 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x52e8a4 github.com/safing/portbase/api.serverManager+0xe4 /home/user/git/safing/portbase/api/router.go:91 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x30ee46 0x30ecaa 0x1ca861 # 0x30ee45 github.com/safing/portbase/log.writer+0xe5 /home/user/git/safing/portbase/log/output.go:154 # 0x30eca9 github.com/safing/portbase/log.writerManager+0x89 /home/user/git/safing/portbase/log/output.go:113 1 @ 0x19bfb6 0x1abc7e 0x4e2a46 0x1ca861 # 0x4e2a45 github.com/safing/portbase/modules.microTaskScheduler+0x2a5 /home/user/git/safing/portbase/modules/microtasks.go:292 1 @ 0x19bfb6 0x1abc7e 0x4ea505 0x1ca861 # 0x4ea504 github.com/safing/portbase/modules.taskQueueHandler+0x84 /home/user/git/safing/portbase/modules/tasks.go:468 1 @ 0x19bfb6 0x1abc7e 0x4ea894 0x1ca861 # 0x4ea893 github.com/safing/portbase/modules.taskScheduleHandler+0x133 /home/user/git/safing/portbase/modules/tasks.go:528 1 @ 0x19bfb6 0x1abc7e 0x51304e 0x4eb7b3 0x4eb196 0x1ca861 # 0x51304d github.com/safing/portbase/rng.fullFeeder+0x8d /home/user/git/safing/portbase/rng/fullfeed.go:24 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x513a7e 0x4eb7b3 0x4eb196 0x1ca861 # 0x513a7d github.com/safing/portbase/rng.osFeeder+0x17d /home/user/git/safing/portbase/rng/osfeeder.go:26 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x5142bf 0x4eb7b3 0x4eb196 0x1ca861 # 0x5142be github.com/safing/portbase/rng.tickFeeder+0x23e /home/user/git/safing/portbase/rng/tickfeeder.go:58 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x5254ee 0x4eb7b3 0x4ead57 0x4eab4a 0x1ca861 # 0x5254ed github.com/safing/portbase/api.(*DatabaseWebsocketAPI).writer+0x12d /home/user/git/safing/portbase/api/database.go:155 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4ead56 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x4eab49 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0x19bfb6 0x1abc7e 0x53f845 0xa1a4d1 0x19bb97 0x1ca861 # 0x53f844 github.com/safing/portbase/run.Run+0x284 /home/user/git/safing/portbase/run/main.go:76 # 0xa1a4d0 main.main+0x170 /home/user/git/safing/portmaster/cmds/portmaster-core/main.go:42 # 0x19bb96 runtime.main+0x1f6 /usr/local/go/src/runtime/proc.go:250 1 @ 0x19bfb6 0x1abc7e 0x5a6b05 0x4eb7b3 0x4eb196 0x1ca861 # 0x5a6b04 github.com/safing/portbase/notifications.cleaner+0x104 /home/user/git/safing/portbase/notifications/cleaner.go:13 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x694e9d 0x4eb7b3 0x4eb196 0x1ca861 # 0x694e9c github.com/safing/portmaster/intel/geoip.(*updateWorker).run+0x17c /home/user/git/safing/portmaster/intel/geoip/database.go:173 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x69c55d 0x4eb7b3 0x4eb196 0x1ca861 # 0x69c55c github.com/safing/portmaster/netenv.monitorNetworkChanges+0xfc /home/user/git/safing/portmaster/netenv/network-change.go:52 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x69d866 0x4eb7b3 0x4eb196 0x1ca861 # 0x69d865 github.com/safing/portmaster/netenv.monitorOnlineStatus+0xe5 /home/user/git/safing/portmaster/netenv/online-status.go:362 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x6a83a5 0x4eb7b3 0x4ead57 0x4eab4a 0x1ca861 # 0x6a83a4 github.com/safing/portmaster/status.autoPilot+0x84 /home/user/git/safing/portmaster/status/autopilot.go:16 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4ead56 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x4eab49 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0x19bfb6 0x1abc7e 0x78f4eb 0x4eb7b3 0x4eb196 0x1ca861 # 0x78f4ea github.com/safing/portmaster/profile.cleanActiveProfiles+0xaa /home/user/git/safing/portmaster/profile/active.go:58 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x7a014e 0x4eb7b3 0x4eb196 0x1ca861 # 0x7a014d github.com/safing/portmaster/profile.startProfileUpdateChecker.func1+0x1ed /home/user/git/safing/portmaster/profile/database.go:54 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x7b2fe6 0x7b2d67 0x4eb7b3 0x4eb196 0x1ca861 # 0x7b2fe5 github.com/safing/portmaster/resolver.handleMDNSMessages+0xc5 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:152 # 0x7b2d66 github.com/safing/portmaster/resolver.listenToMDNS.func9+0x26 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:142 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x7dd7a5 0x4eb7b3 0x4eb196 0x1ca861 # 0x7dd7a4 github.com/safing/portmaster/network.connectionCleaner+0xc4 /home/user/git/safing/portmaster/network/clean.go:30 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x7e4ba9 0x4eb7b3 0x4eb196 0x1ca861 # 0x7e4ba8 github.com/safing/portmaster/network.openDNSRequestWriter+0x108 /home/user/git/safing/portmaster/network/dns.go:181 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x9eb1d9 0x9edb78 0x4eb7b3 0x4eb196 0x1ca861 # 0x9eb1d8 github.com/safing/portmaster/netquery.(*Manager).HandleFeed+0xb8 /home/user/git/safing/portmaster/netquery/manager.go:101 # 0x9edb77 github.com/safing/portmaster/netquery.(*module).start.func2+0x37 /home/user/git/safing/portmaster/netquery/module_api.go:205 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x9ed9f1 0x4eb7b3 0x4eb196 0x1ca861 # 0x9ed9f0 github.com/safing/portmaster/netquery.(*module).start.func3+0xb0 /home/user/git/safing/portmaster/netquery/module_api.go:211 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x9ede0b 0x4eb7b3 0x4eb196 0x1ca861 # 0x9ede0a github.com/safing/portmaster/netquery.(*module).start.func1+0x24a /home/user/git/safing/portmaster/netquery/module_api.go:184 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0x9fe1ef 0xa0418f 0x4eb7b3 0x4eb196 0x1ca861 # 0x9fe1ee github.com/safing/portmaster/firewall/interception/windowskext.BandwidthStatsWorker+0xee /home/user/git/safing/portmaster/firewall/interception/windowskext/bandwidth_stats.go:39 # 0xa0418e github.com/safing/portmaster/firewall/interception.startInterception.func2+0x2e /home/user/git/safing/portmaster/firewall/interception/interception_windows.go:39 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0xa0f4ed 0x4eb7b3 0x4eb196 0x1ca861 # 0xa0f4ec github.com/safing/portmaster/firewall.packetHandler+0x8c /home/user/git/safing/portmaster/firewall/packet_handler.go:631 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0x19bfb6 0x1abc7e 0xa0f614 0x4eb7b3 0x4eb196 0x1ca861 # 0xa0f613 github.com/safing/portmaster/firewall.bandwidthUpdateHandler+0x93 /home/user/git/safing/portmaster/firewall/packet_handler.go:646 # 0x4eb7b2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x4eb195 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 ```

vlabo commented 1 year ago

Thanks for the report. Are you able to consistently reproduce the crash? I was not able to reproduce it with the steps you provided. Since it says that the crash comes from ntoskrnl.exe, this is a generic error that does not show that the problem is in portmaster (it could be).

You can try updating to the beta version and see if this resolves the issue.

selfagency commented 1 year ago

what would be a good file to watch while i'm triggering the bug so that if i'm recording video of the crash you'll see what you need to know

vlabo commented 1 year ago

No need to record a video, just send the last minidump file when it happens. I will try to investigate it.

Marc05 commented 1 year ago

I believe I ran into the same issue. Attached is the windbg output.

dump_details.txt

theGPU commented 11 months ago

Same problem. It happens randomly, but most often right after starting the program. Today it took 4 tries and on the 5th I just turned off its startup

101223-21406-01.dmp 101423-27390-01.dmp 100723-23656-01.dmp

AdamTmHun commented 9 months ago

+1. It happens to me when I start my torrent client. I have multiple hundred gigabytes worth of downloads, and the client announces the seeded files on client start. That's when it crashes. (I have 47 torrents hosted, and 3 torrent trackers I am hosting to.) When I completely kill all Portmaster processes, it works just as intended. If I restart Portmaster after I started the qBittorrent client, it also works as intended. Here's my dump file.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_MODE_HEAP_CORRUPTION (13a)
The kernel mode heap manager has detected corruption in a heap.
Arguments:
Arg1: 0000000000000011, Type of corruption detected
Arg2: ffff928a9dc00100, Address of the heap that reported the corruption
Arg3: ffff928a9dbfdf00, Address at which the corruption was detected
Arg4: 0000000000000000

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 23124

    Key  : Analysis.Elapsed.mSec
    Value: 24034

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 24

    Key  : Analysis.Init.CPU.mSec
    Value: 655

    Key  : Analysis.Init.Elapsed.mSec
    Value: 30319

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 98

    Key  : Bugcheck.Code.KiBugCheckData
    Value: 0x13a

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x13a

    Key  : Failure.Bucket
    Value: 0x13a_11_PMas_portmaster_kext_v1_1_2!unknown_function

    Key  : Failure.Hash
    Value: {38f08178-bf1c-fabf-7c9b-d78dd082202e}

    Key  : Hypervisor.Enlightenments.Value
    Value: 0

    Key  : Hypervisor.Enlightenments.ValueHex
    Value: 0

    Key  : Hypervisor.Flags.AnyHypervisorPresent
    Value: 0

    Key  : Hypervisor.Flags.ApicEnlightened
    Value: 0

    Key  : Hypervisor.Flags.ApicVirtualizationAvailable
    Value: 0

    Key  : Hypervisor.Flags.AsyncMemoryHint
    Value: 0

    Key  : Hypervisor.Flags.CoreSchedulerRequested
    Value: 0

    Key  : Hypervisor.Flags.CpuManager
    Value: 0

    Key  : Hypervisor.Flags.DeprecateAutoEoi
    Value: 0

    Key  : Hypervisor.Flags.DynamicCpuDisabled
    Value: 0

    Key  : Hypervisor.Flags.Epf
    Value: 0

    Key  : Hypervisor.Flags.ExtendedProcessorMasks
    Value: 0

    Key  : Hypervisor.Flags.HardwareMbecAvailable
    Value: 1

    Key  : Hypervisor.Flags.MaxBankNumber
    Value: 0

    Key  : Hypervisor.Flags.MemoryZeroingControl
    Value: 0

    Key  : Hypervisor.Flags.NoExtendedRangeFlush
    Value: 0

    Key  : Hypervisor.Flags.NoNonArchCoreSharing
    Value: 0

    Key  : Hypervisor.Flags.Phase0InitDone
    Value: 0

    Key  : Hypervisor.Flags.PowerSchedulerQos
    Value: 0

    Key  : Hypervisor.Flags.RootScheduler
    Value: 0

    Key  : Hypervisor.Flags.SynicAvailable
    Value: 0

    Key  : Hypervisor.Flags.UseQpcBias
    Value: 0

    Key  : Hypervisor.Flags.Value
    Value: 131072

    Key  : Hypervisor.Flags.ValueHex
    Value: 20000

    Key  : Hypervisor.Flags.VpAssistPage
    Value: 0

    Key  : Hypervisor.Flags.VsmAvailable
    Value: 0

    Key  : Hypervisor.RootFlags.AccessStats
    Value: 0

    Key  : Hypervisor.RootFlags.CrashdumpEnlightened
    Value: 0

    Key  : Hypervisor.RootFlags.CreateVirtualProcessor
    Value: 0

    Key  : Hypervisor.RootFlags.DisableHyperthreading
    Value: 0

    Key  : Hypervisor.RootFlags.HostTimelineSync
    Value: 0

    Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
    Value: 0

    Key  : Hypervisor.RootFlags.IsHyperV
    Value: 0

    Key  : Hypervisor.RootFlags.LivedumpEnlightened
    Value: 0

    Key  : Hypervisor.RootFlags.MapDeviceInterrupt
    Value: 0

    Key  : Hypervisor.RootFlags.MceEnlightened
    Value: 0

    Key  : Hypervisor.RootFlags.Nested
    Value: 0

    Key  : Hypervisor.RootFlags.StartLogicalProcessor
    Value: 0

    Key  : Hypervisor.RootFlags.Value
    Value: 0

    Key  : Hypervisor.RootFlags.ValueHex
    Value: 0

    Key  : SecureKernel.HalpHvciEnabled
    Value: 0

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Version
    Value: 10.0.19041.1

BUGCHECK_CODE:  13a

BUGCHECK_P1: 11

BUGCHECK_P2: ffff928a9dc00100

BUGCHECK_P3: ffff928a9dbfdf00

BUGCHECK_P4: 0

FILE_IN_CAB:  MEMORY.DMP

POOL_ADDRESS:  ffff928a9dbfdf00 Nonpaged pool

FREED_POOL_TAG:  PMas

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

PROCESS_NAME:  portmaster-core_v1-5-1.exe

STACK_TEXT:  
ffffee82`d808f408 fffff807`4af93bac     : 00000000`0000013a 00000000`00000011 ffff928a`9dc00100 ffff928a`9dbfdf00 : nt!KeBugCheckEx
ffffee82`d808f410 fffff807`4af93c0c     : 00000000`00000011 00000000`00000000 ffff928a`9dc00100 01000000`00100000 : nt!RtlpHeapHandleError+0x40
ffffee82`d808f450 fffff807`4af93839     : 00000000`00000060 ffff928a`9dbf6000 ffff928a`b0369a88 ffff928a`b00268d0 : nt!RtlpHpHeapHandleError+0x58
ffffee82`d808f480 fffff807`4ae4954e     : ffff928a`b0369a88 fffff807`4ac3d88d 00000000`00000000 ffff928a`b0369a88 : nt!RtlpLogHeapFailure+0x45
ffffee82`d808f4b0 fffff807`4ac3c3b2     : ffff928a`9dc00340 00000000`000000ff 00000000`00000000 ffff928a`00000000 : nt!RtlpHpLfhSubsegmentFreeBlock+0x1a9f2e
ffffee82`d808f560 fffff807`4b3b60b9     : ffff928a`00000000 00000000`00000000 ffff928a`aff44b50 01000000`00100000 : nt!ExFreeHeapPool+0x362
ffffee82`d808f640 fffff807`5a568ec4     : ffff928a`b0369a10 fffff807`00000000 ffffee82`d808f6b8 00000000`00000001 : nt!ExFreePool+0x9
ffffee82`d808f670 fffff807`5a5666d7     : 00000000`000000c8 fffff807`4b0452c1 00000000`00000001 ffff928a`a3308080 : portmaster_kext_v1_1_2+0x8ec4
ffffee82`d808f6a0 fffff807`4ac35cf5     : 00000000`00000002 ffff928a`b0369b28 ffffee82`20206f49 00000000`00000000 : portmaster_kext_v1_1_2+0x66d7
ffffee82`d808f6f0 fffff807`4b0442ac     : 00000000`00000002 00000000`00000000 ffff928a`b00268d0 ffff928a`afe6a080 : nt!IofCallDriver+0x55
ffffee82`d808f730 fffff807`4b043f03     : 00000000`9c40e008 ffffee82`d808fa80 00000000`00040005 00000000`9c40e008 : nt!IopSynchronousServiceTail+0x34c
ffffee82`d808f7d0 fffff807`4b0431d6     : 00000000`00000000 00000000`00000000 00000000`00000000 000000c0`01389880 : nt!IopXxxControlFile+0xd13
ffffee82`d808f920 fffff807`4ae10ef5     : 00000000`00000000 00000000`00000000 00000000`00000000 ffff928a`afd45560 : nt!NtDeviceIoControlFile+0x56
ffffee82`d808f990 00007ffa`e27cd0c4     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
0000001e`72dff6d8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffa`e27cd0c4

SYMBOL_NAME:  portmaster_kext_v1_1_2+8ec4

MODULE_NAME: portmaster_kext_v1_1_2

IMAGE_NAME:  portmaster-kext_v1-1-2.sys

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  8ec4

FAILURE_BUCKET_ID:  0x13a_11_PMas_portmaster_kext_v1_1_2!unknown_function

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {38f08178-bf1c-fabf-7c9b-d78dd082202e}

Followup:     MachineOwner
---------

Reg1oxeN commented 9 months ago

Same issue, but only occurs under heavy system load during compilation in Visual Studio.

KERNEL_MODE_HEAP_CORRUPTION (13a)
The kernel mode heap manager has detected corruption in a heap.
Arguments:
Arg1: 0000000000000011, Type of corruption detected
Arg2: ffffbc8f50e00100, Address of the heap that reported the corruption
Arg3: ffffbc8f5ee7bf50, Address at which the corruption was detected
Arg4: 0000000000000000

Debugging Details:
------------------
BUGCHECK_CODE:  13a
BUGCHECK_P1: 11
BUGCHECK_P2: ffffbc8f50e00100
BUGCHECK_P3: ffffbc8f5ee7bf50
BUGCHECK_P4: 0

PROCESS_NAME:  portmaster-core_v1-5-1.exe

STACK_TEXT:  
ffffab0d`81a2eca8 fffff804`4a993bac : 00000000`0000013a 00000000`00000011 ffffbc8f`50e00100 ffffbc8f`5ee7bf50 : nt!KeBugCheckEx
ffffab0d`81a2ecb0 fffff804`4a993c0c : 00000000`00000011 00000000`00000000 ffffbc8f`50e00100 00000000`00000000 : nt!RtlpHeapHandleError+0x40
ffffab0d`81a2ecf0 fffff804`4a993839 : 00000000`00000060 ffffbc8f`5ee7b000 00000000`00000000 00000000`00000000 : nt!RtlpHpHeapHandleError+0x58
ffffab0d`81a2ed20 fffff804`4a84954e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!RtlpLogHeapFailure+0x45
ffffab0d`81a2ed50 fffff804`4a63c3b2 : ffffbc8f`50e00340 00000000`000000ff 00000000`00000000 00000000`00000000 : nt!RtlpHpLfhSubsegmentFreeBlock+0x1a9f2e
ffffab0d`81a2ee00 fffff804`4adb60b9 : 00000000`00000000 ffffbc8f`680cfce0 ffffbc8f`88623260 01000000`00100000 : nt!ExFreeHeapPool+0x362
ffffab0d`81a2eee0 fffff804`c3a48ec4 : fffff804`4e957a90 ffffbc8f`680cfce0 ffffbc8f`5ee7bf60 00000000`00000000 : nt!ExFreePool+0x9
ffffab0d`81a2ef10 fffff804`4e957a8f : ffffbc8f`680cfce0 ffffbc8f`5ee7bf60 00000000`00000000 ffffbc8f`5e7cde20 : portmaster_kext_v1_1_2+0x8ec4
ffffab0d`81a2ef18 ffffbc8f`680cfce0 : ffffbc8f`5ee7bf60 00000000`00000000 ffffbc8f`5e7cde20 fffff804`c3a46b78 : fwpkclnt!FwppCleanupPreparedL2Nbls+0x3f
ffffab0d`81a2ef20 ffffbc8f`5ee7bf60 : 00000000`00000000 ffffbc8f`5e7cde20 fffff804`c3a46b78 badbadfa`badbadfa : 0xffffbc8f`680cfce0
ffffab0d`81a2ef28 00000000`00000000 : ffffbc8f`5e7cde20 fffff804`c3a46b78 badbadfa`badbadfa 00000000`00000000 : 0xffffbc8f`5ee7bf60

SYMBOL_NAME:  portmaster_kext_v1_1_2+8ec4
MODULE_NAME: portmaster_kext_v1_1_2
IMAGE_NAME:  portmaster-kext_v1-1-2.sys
STACK_COMMAND:  .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET:  8ec4
FAILURE_BUCKET_ID:  0x13a_11_PMas_portmaster_kext_v1_1_2!unknown_function
OS_VERSION:  10.0.19041.1
BUILDLAB_STR:  vb_release
OSPLATFORM_TYPE:  x64
OSNAME:  Windows 10

github-actions[bot] commented 7 months ago

This issue has been automatically marked as inactive because it has not had activity in the past two months.

If no further activity occurs, this issue will be automatically closed in one week in order to increase our focus on active topics.

lightproof commented 7 months ago

I'm experiencing the same issue when I'm seeding more than just a couple of torrents (I'm using qbittorrent if it matters). If I start the torrents one by one pausing between each start, then everything works fine. But if I start them all at once or in a rapid succession, then I get the BSOD.

My experience is pretty much in line with @AdamTmHun's description, with the only difference being that I don't host any trackers and I get the BSOD with only several torrents running.

Happens with PortMaster 1.6.5 stable.

AdamTmHun commented 7 months ago

In regards to @lightproof I host a ton of torrents (like 80 or so) and when I start the torrent client all of them start seeding at the same time. And thats when it crashes. However if I shut down portmaster, start the torrent client, and then start portmaster again, it works.

My assumption is that the lot of network traffic created in a vers short time by announcing the seeding to the trackers puts a strain on the portmaster process. If after successfully starting qbittorrent with portmaster as explained above, and had all of the seeded torrents start sending data to peers at the same time, it would probbably do the same.

lightproof commented 7 months ago

If after successfully starting qbittorrent with portmaster as explained above, and had all of the seeded torrents start sending data to peers at the same time, it would probbably do the same.

Yes, looks like it. My case just illustrates that you don't need a ton of torrents and/or hosting trackers to encounter the issue. All it takes is just several torrents announcing at the same time (that's most likely why starting them in rapid succession also triggers a BSOD — the announce process is not instantaneous).

alechkos commented 7 months ago

The same here, after the start of `npm install` got BSOD with `KERNEL_MODE_HEAD_CORRUPTION` on Windows 11

### The log of minidump file (click to expand)

```bash KERNEL_MODE_HEAP_CORRUPTION (13a) The kernel mode heap manager has detected corruption in a heap. Arguments: Arg1: 0000000000000011, Type of corruption detected Arg2: ffff8a021a010140, Address of the heap that reported the corruption Arg3: ffff8a02618144f0, Address at which the corruption was detected Arg4: 0000000000000000 Debugging Details: ------------------ *** WARNING: Unable to verify timestamp for portmaster-kext_v1-1-2.sys fffff8000f31d470: Unable to get MiVisibleState Unable to get NonPagedPoolStart Unable to get NonPagedPoolEnd Unable to get PagedPoolStart Unable to get PagedPoolEnd HeapDbgInitExtension Failed KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 3155 Key : Analysis.DebugAnalysisManager Value: Create Key : Analysis.Elapsed.mSec Value: 17259 Key : Analysis.Init.CPU.mSec Value: 155 Key : Analysis.Init.Elapsed.mSec Value: 7791 Key : Analysis.Memory.CommitPeak.Mb Value: 88 Key : WER.OS.Branch Value: ni_release_svc_prod3 Key : WER.OS.Timestamp Value: 2023-10-18T18:09:00Z Key : WER.OS.Version Value: 10.0.22621.2506 FILE_IN_CAB: 012824-23828-01.dmp TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b BUGCHECK_CODE: 13a BUGCHECK_P1: 11 BUGCHECK_P2: ffff8a021a010140 BUGCHECK_P3: ffff8a02618144f0 BUGCHECK_P4: 0 POOL_ADDRESS: Unable to get NonPagedPoolStart Unable to get NonPagedPoolEnd Unable to get PagedPoolStart Unable to get PagedPoolEnd unable to get nt!MmSpecialPagesInUse ffff8a02618144f0 FREED_POOL_TAG: PMas BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXPNP: 1 (!blackboxpnp) BLACKBOXWINLOGON: 1 CUSTOMER_CRASH_COUNT: 1 PROCESS_NAME: portmaster-core_v1-6-5.exe STACK_TEXT: fffffd8a`38a2f378 fffff800`0ebb2b84 : 00000000`0000013a 00000000`00000011 ffff8a02`1a010140 ffff8a02`618144f0 : nt!KeBugCheckEx fffffd8a`38a2f380 fffff800`0ebb2be4 : 00000000`00000011 00000000`00000000 ffff8a02`1a010140 ffff8a02`58f49680 : nt!RtlpHeapHandleError+0x40 fffffd8a`38a2f3c0 fffff800`0ebb2801 : 00000000`01d00060 ffffffff`ffffffff 00000000`00000000 ffffffff`ffffffff : nt!RtlpHpHeapHandleError+0x58 fffffd8a`38a2f3f0 fffff800`0eaad7d0 : ffff8a02`58f49680 fffff800`0e87e4ac ffff8a02`00000001 fffffd8a`38a2f579 : nt!RtlpLogHeapFailure+0x45 fffffd8a`38a2f420 fffff800`0e87f219 : ffff8a02`1a010380 ffff8a02`2fe9a1ff 00000000`00000000 00000000`00000000 : nt!RtlpHpLfhSubsegmentFreeBlock+0x1b35b0 fffffd8a`38a2f4b0 fffff800`0f0ac2b0 : ffff8a02`618144f0 00000000`00000002 00000000`00000001 00000000`00000001 : nt!RtlpHpFreeHeap+0x159 fffffd8a`38a2f550 fffff800`7f708ec4 : ffff8a02`73614d50 00000000`00000000 ffff8a02`00000002 00000000`00000060 : nt!ExFreePoolWithTag+0x1a0 fffffd8a`38a2f5e0 ffff8a02`73614d50 : 00000000`00000000 ffff8a02`00000002 00000000`00000060 fffffd8a`38a2f700 : portmaster_kext_v1_1_2+0x8ec4 fffffd8a`38a2f5e8 00000000`00000000 : ffff8a02`00000002 00000000`00000060 fffffd8a`38a2f700 fffff800`7f7066d7 : 0xffff8a02`73614d50 SYMBOL_NAME: portmaster_kext_v1_1_2+8ec4 MODULE_NAME: portmaster_kext_v1_1_2 IMAGE_NAME: portmaster-kext_v1-1-2.sys STACK_COMMAND: .cxr; .ecxr ; kb BUCKET_ID_FUNC_OFFSET: 8ec4 FAILURE_BUCKET_ID: 0x13a_11_PMas_portmaster_kext_v1_1_2!unknown_function OS_VERSION: 10.0.22621.2506 BUILDLAB_STR: ni_release_svc_prod3 OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {38f08178-bf1c-fabf-7c9b-d78dd082202e} Followup: MachineOwner --------- ```

krax1337 commented 6 months ago

Hi there! Same here, right after starting the Portmaster.

0x0000013a

ausgray10 commented 6 months ago

Have been crashing constantly and couldn't figure it out. I now believe it's portmaster causing the issues based on the dump file.

Analyzed Dump

******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_MODE_HEAP_CORRUPTION (13a) The kernel mode heap manager has detected corruption in a heap. Arguments: Arg1: 0000000000000011, Type of corruption detected Arg2: ffffa40d7f010140, Address of the heap that reported the corruption Arg3: ffffa40dabb7b910, Address at which the corruption was detected Arg4: 0000000000000000 Debugging Details: ------------------ fffff8071491c470: Unable to get MiVisibleState Unable to get NonPagedPoolStart Unable to get NonPagedPoolEnd Unable to get PagedPoolStart Unable to get PagedPoolEnd HeapDbgInitExtension Failed KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 2593 Key : Analysis.Elapsed.mSec Value: 5320 Key : Analysis.IO.Other.Mb Value: 0 Key : Analysis.IO.Read.Mb Value: 0 Key : Analysis.IO.Write.Mb Value: 1 Key : Analysis.Init.CPU.mSec Value: 140 Key : Analysis.Init.Elapsed.mSec Value: 27729 Key : Analysis.Memory.CommitPeak.Mb Value: 100 Key : Bugcheck.Code.LegacyAPI Value: 0x13a Key : Dump.Attributes.AsUlong Value: 1808 Key : Dump.Attributes.DiagDataWrittenToHeader Value: 1 Key : Dump.Attributes.ErrorCode Value: 0 Key : Dump.Attributes.KernelGeneratedTriageDump Value: 1 Key : Dump.Attributes.LastLine Value: Dump completed successfully. Key : Dump.Attributes.ProgressPercentage Value: 0 Key : Failure.Bucket Value: 0x13a_11_IoSB_portmaster_kext_v1_1_2!unknown_function Key : Failure.Hash Value: {4146a5fa-ae40-5dbb-a11b-4ff688a82d90} Key : Hypervisor.Enlightenments.ValueHex Value: 1497cf94 Key : Hypervisor.Flags.AnyHypervisorPresent Value: 1 Key : Hypervisor.Flags.ApicEnlightened Value: 1 Key : Hypervisor.Flags.ApicVirtualizationAvailable Value: 0 Key : Hypervisor.Flags.AsyncMemoryHint Value: 0 Key : Hypervisor.Flags.CoreSchedulerRequested Value: 0 Key : Hypervisor.Flags.CpuManager Value: 1 Key : Hypervisor.Flags.DeprecateAutoEoi Value: 0 Key : Hypervisor.Flags.DynamicCpuDisabled Value: 1 Key : Hypervisor.Flags.Epf Value: 0 Key : Hypervisor.Flags.ExtendedProcessorMasks Value: 1 Key : Hypervisor.Flags.HardwareMbecAvailable Value: 1 Key : Hypervisor.Flags.MaxBankNumber Value: 0 Key : Hypervisor.Flags.MemoryZeroingControl Value: 0 Key : Hypervisor.Flags.NoExtendedRangeFlush Value: 0 Key : Hypervisor.Flags.NoNonArchCoreSharing Value: 1 Key : Hypervisor.Flags.Phase0InitDone Value: 1 Key : Hypervisor.Flags.PowerSchedulerQos Value: 0 Key : Hypervisor.Flags.RootScheduler Value: 0 Key : Hypervisor.Flags.SynicAvailable Value: 1 Key : Hypervisor.Flags.UseQpcBias Value: 0 Key : Hypervisor.Flags.Value Value: 4853999 Key : Hypervisor.Flags.ValueHex Value: 4a10ef Key : Hypervisor.Flags.VpAssistPage Value: 1 Key : Hypervisor.Flags.VsmAvailable Value: 1 Key : Hypervisor.RootFlags.AccessStats Value: 1 Key : Hypervisor.RootFlags.CrashdumpEnlightened Value: 1 Key : Hypervisor.RootFlags.CreateVirtualProcessor Value: 1 Key : Hypervisor.RootFlags.DisableHyperthreading Value: 0 Key : Hypervisor.RootFlags.HostTimelineSync Value: 1 Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled Value: 0 Key : Hypervisor.RootFlags.IsHyperV Value: 1 Key : Hypervisor.RootFlags.LivedumpEnlightened Value: 1 Key : Hypervisor.RootFlags.MapDeviceInterrupt Value: 1 Key : Hypervisor.RootFlags.MceEnlightened Value: 1 Key : Hypervisor.RootFlags.Nested Value: 0 Key : Hypervisor.RootFlags.StartLogicalProcessor Value: 1 Key : Hypervisor.RootFlags.Value Value: 1015 Key : Hypervisor.RootFlags.ValueHex Value: 3f7 BUGCHECK_CODE: 13a BUGCHECK_P1: 11 BUGCHECK_P2: ffffa40d7f010140 BUGCHECK_P3: ffffa40dabb7b910 BUGCHECK_P4: 0 FILE_IN_CAB: 022224-16656-01.dmp TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b DUMP_FILE_ATTRIBUTES: 0x1808 Kernel Generated Triage Dump POOL_ADDRESS: Unable to get NonPagedPoolStart Unable to get NonPagedPoolEnd Unable to get PagedPoolStart Unable to get PagedPoolEnd unable to get nt!MmSpecialPagesInUse ffffa40dabb7b910 FREED_POOL_TAG: IoSB BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXPNP: 1 (!blackboxpnp) BLACKBOXWINLOGON: 1 CUSTOMER_CRASH_COUNT: 1 PROCESS_NAME: portmaster-cor STACK_TEXT: ffffcb09`9fe5edb8 fffff807`141b2954 : 00000000`0000013a 00000000`00000011 ffffa40d`7f010140 ffffa40d`abb7b910 : nt!KeBugCheckEx ffffcb09`9fe5edc0 fffff807`141b29b4 : 00000000`00000011 00000000`00000000 ffffa40d`7f010140 ffffa40d`972f5d80 : nt!RtlpHeapHandleError+0x40 ffffcb09`9fe5ee00 fffff807`141b25d1 : 00000000`01d00060 ffffffff`ffffffff 00000000`00000000 ffffffff`ffffffff : nt!RtlpHpHeapHandleError+0x58 ffffcb09`9fe5ee30 fffff807`140ad59e : ffffa40d`972f5d80 fffff807`13e7e4ac ffffa40d`00000001 ffffcb09`9fe5efb9 : nt!RtlpLogHeapFailure+0x45 ffffcb09`9fe5ee60 fffff807`13e7f219 : ffffa40d`7f010380 ffffa40e`11a021ff 00000000`00000000 00000000`00000000 : nt!RtlpHpLfhSubsegmentFreeBlock+0x1b31ce ffffcb09`9fe5eef0 fffff807`146ac2b0 : ffffa40d`abb7b910 00000000`0000000e 00000000`00000060 00000000`00000001 : nt!RtlpHpFreeHeap+0x159 ffffcb09`9fe5ef90 fffff807`7d2b8ec4 : ffffa40d`42536f49 00000000`00000000 ffffa40d`0000000e 00000000`00000060 : nt!ExFreePoolWithTag+0x1a0 ffffcb09`9fe5f020 ffffa40d`42536f49 : 00000000`00000000 ffffa40d`0000000e 00000000`00000060 00000000`00040286 : portmaster_kext_v1_1_2+0x8ec4 ffffcb09`9fe5f028 00000000`00000000 : ffffa40d`0000000e 00000000`00000060 00000000`00040286 fffff807`7d2b66d7 : 0xffffa40d`42536f49 SYMBOL_NAME: portmaster_kext_v1_1_2+8ec4 MODULE_NAME: portmaster_kext_v1_1_2 IMAGE_NAME: portmaster-kext_v1-1-2.sys STACK_COMMAND: .cxr; .ecxr ; kb BUCKET_ID_FUNC_OFFSET: 8ec4 FAILURE_BUCKET_ID: 0x13a_11_IoSB_portmaster_kext_v1_1_2!unknown_function OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {4146a5fa-ae40-5dbb-a11b-4ff688a82d90}

I can't really tell you what I was doing beforehand that caused the BSOD as it has been so incredibly random that I simply don't know what to say. I've had recent times where the computer awakes from sleep mode that immediately opens to BSOD. I've had BSOD seconds after loading back into windows after a BSOD. both dump files point to the same analysis above.

Hopefully this can be of help.

edit: Wanted to add on that people above are talking about with "under heavy load", and when thinking about it, most of my crashes were with high memory usage. I wonder if it may be due to portmaster trying to request memory that has been moved to the pagefile?

dhaavi commented 6 months ago

Thanks for the additional reports!

edit: Wanted to add on that people above are talking about with "under heavy load", and when thinking about it, most of my crashes were with high memory usage. I wonder if it may be due to portmaster trying to request memory that has been moved to the pagefile?

Iirc, pagefiles are handled transparently by the system and this is nothing you can influence in the first place. Also, the driver might be using non-paged memory from the get go.

Anyway, we are having good progress on the new kernel extension, written in Rust, which we have started testing. It won't be long until we can start public testing! (Can't put a date on it yet, though.)

AdamTmHun commented 6 months ago

I wonder if it may be due to portmaster trying to request memory that has been moved to the pagefile?

I am not exactly sure about how pagefiles work, however I have 28 gigs of ram, and while pretty much only running portmaster and qbittorrent, I doubt that anything should be moved out of memory because of space issues.

I am thrilled to hear that a new kernel driver is being built - especially with rust - I hope that it will fix the issue. It is pretty annoying to keep remembering that I have to shut off portmaster first.

Raphty commented 6 months ago

@dhaavi I again see a correlation with torrent and BSOD.

Pleas if you come here with a BSOD let us know if you torrented and what client you used. thanks

joshcybsec commented 6 months ago

I am have the BSOD memory heap issue as well, believe it triggered is likely due to heavy load for memory or portmaster not being able to handle multiple connections concurrently? qBittorrent seems to be the trigger (when loading from magnet link), VMware running & opera/chromium with multiple tabs. This happened on 2 different days, turning off portmaster seems to fix this.

031124-9453-01.dmp 031024-9406-01.dmp

ineedbots commented 5 months ago

I am able to reliably recreate the issue 100% of the time. Using the https://github.com/iw4x/iw4x-client and selecting the local servers, it'll BSOD.

031824-13031-01.dmp 031824-12125-01.dmp 031824-12593-01.dmp

https://github.com/safing/portmaster/assets/751729/5011c0db-8f82-4ff2-8147-0d966a73965c

No application specific setting set for the app.

Raphty commented 5 months ago

@ineedbots can you also send a debug info of your Portmaster setup

ineedbots commented 5 months ago

@ineedbots can you also send a debug info of your Portmaster setup

sure, details.txt

melMass commented 5 months ago

In my minidump I get: portmaster_kext_v1_1_2!unknown_function. As reported in this thread it happens under heavy load (when filling my vram) on a "beefy" machine. My first BSOD ever on this 2-year-old machine and I have been using Portmaster for a year. I just "Cleared DNS" that had 40K entries and will report if it happens again.

ziomek64 commented 4 months ago

I also got this one just today. Same BSOD error, also leading to portmaster. Happened when I tried to open magnet link with my torrent client. (qbittorrent) I was worried about the computer.

dazu89 commented 3 months ago

Very annoying. On Windows 10, Version 10.0.19045 I am experiencing hard crashes since September 2023 (BugcheckCodes 314 and 340). The crashes and subsequent shutdowns occurred during or shortly after waking from sleep mode (no torrenting involved). The mini- and memory dumps look very similar to the ones uploaded to this thread. I wonder: Have potential culprits been identified or has the search stalled due to development of the new kernel extension? What additional information is needed here to further the analysis of the problem?

Raphty commented 3 months ago

we are almost done with the kext and we are going to start testing it soon.

we will look into this after/with the new kext - we expect this to be solved, but if not then we will have to tackle it with the new one anyway

Raphty commented 3 months ago

@dazu89 kext is now in beta! https://github.com/safing/portmaster/releases/tag/v1.6.11

dhaavi commented 3 months ago

Small correction: The new kext will go into Beta on Monday due to release windows.

UnholySheep commented 2 months ago

@dazu89 kext is now in beta! https://github.com/safing/portmaster/releases/tag/v1.6.11

I'm sorry if this is off topic but, for the non-tech savy people, how do you install this? You drop it into portmaster's instalation folder? I uninstalled portmaster because of BSOD issues, do I have to reinstall it normally then drop the files?

Edit: Found it, enable advanced interface in the top right corner then scroll down to core-updates, and select in Release Channel 'beta'.

dazu89 commented 2 months ago

Thank you, @Raphty, for addressing the BSOD issue. I have just installed the update with 1.6.12 from the beta release channel and will report back on the issue in the coming weeks. Up to now, a reliable way on my machine to trigger the BSOD was to make changes to the network configuration, e.g. connect to another WLAN network (adapter Intel(R) Dual Band Wireless-AC 8260 with Intel Driver 20.70.32.1).

dazu89 commented 2 months ago

It has been over a week since I installed update 1.6.12. With this new version, none of the previous triggers has led to a BSOD. Thank you, @Raphty, for this release, which has ended a sequence of annoying moments!

Raphty commented 2 months ago

@dazu89 did you update to 6.13 as well? there are some additional fixes in there as well.

safing / portmaster