[Bug 38787] Malwarebytes Anti-Malware Premium: 64-bit filter driver 'seikf.sys' crashes on load (access to KI_USER_SHARED_DATA range 0xfffff78000000000)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=38787

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
                URL|                            |https://www.malwarebytes.or
                   |                            |g/mwb-download/
           Keywords|                            |download
          Component|-unknown                    |ntdll
                 CC|                            |focht at gmx.net
         Resolution|---                         |DUPLICATE
            Summary|The program crashes at      |Malwarebytes Anti-Malware
                   |unexpected intervals even   |Premium: 64-bit filter
                   |though not in use.          |driver 'seikf.sys' crashes
                   |                            |on load (access to
                   |                            |KI_USER_SHARED_DATA range
                   |                            |0xfffff78000000000)
           Severity|major                       |normal

--- Comment #1 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

dupe of bug 33849

--- snip ---
Unhandled exception: page fault on read access to 0xfffff78000000320 in 64-bit
code (0x0000000000454034).
Register dump:
 rip:0000000000454034 rsp:000000000043dfe8 rbp:0000000000011ac0 eflags:00010246
(  R- --  I  Z- -P- )
 rax:fffff78000000320 rbx:000000000043e060 rcx:0000000000452100
rdx:00002b992ddfa232
 rsi:0000000000440000 rdi:00007effc54e5580  r8:000000000043e060 
r9:00007effc54e5600 r10:0000000000000000
 r11:0000000000000000 r12:0000000000454064 r13:0000000000011ac0
r14:000000000000000a r15:000000000043f700
Stack dump:
...
Backtrace:
=>0 0x0000000000454034 in seikf.sys (+0x14034) (0x0000000000011ac0)
  1 0x0000000000454073 in seikf.sys (+0x14072) (0x0000000000011ac0)
  2 0x00007effc52e324e in winedevice (+0x324d) (0x0000000000011ac0)
  3 0x00007effc52e388f in winedevice (+0x388e) (0x0000000000010d70)
  4 0x00007effc509f56d in advapi32 (+0x3f56c) (0x0000000000010d70)
  5 0x00007effc69ab0be call_thread_func+0x6d() in ntdll (0x00007fffff7e17d0)
  6 0x00007effc69a46ea RtlRaiseException+0x7d() in ntdll (0x00007fffff7e17d0)
  7 0x00007effc69b3599 in ntdll (+0x73598) (0x00007fffff7e17d0)
  8 0x00007effc71e7182 start_thread+0xc1() in libpthread.so.0
...
0x0000000000454034: movq    (%rax),%rax
Modules:
Module    Address                    Debug info    Name (28 modules)
PE              440000-          456000    Export          seikf.sys
ELF            7b800000-        7bc6f000    Deferred        kernel32<elf>
  \-PE            7b820000-        7bc6f000    \               kernel32
ELF            7be00000-        7c103000    Deferred        <wine-loader>
...
Threads:
process  tid      prio (all id:s are in hex)
...
00000012 (D) C:\windows\system32\winedevice.exe
    00000018    0 <==
    00000017    0
    00000013    0
--- snip ---

File system filter drivers (layered drivers) are not supported in Wine hence
this app won't work anyway if it relies on this functionality.
Wine is not an operating system.

Regards

*** This bug has been marked as a duplicate of bug 33849 ***

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.