[Bug 52312] Dokan file system driver 'dokan1.sys' kernel driver crashes

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=52312

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
                 CC|                            |focht at gmx.net
     Ever confirmed|0                           |1
            Summary|page fault on read access   |Dokan file system driver
                   |to 0xffffffffffffffff       |'dokan1.sys' kernel driver
                   |                            |crashes

--- Comment #5 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

the crash comes from a kernel driver 'dokan1.sys'. The questions is which app 
/ game bundled it?

I've found an open-source project 'Dokan' which contains a user mode libs and a
kernel mode file system driver 'dokan1.sys'.

https://github.com/dokan-dev/dokany

--- snip ---
Unhandled exception: page fault on read access to 0xffffffffffffffff in 64-bit
code (0x0000000140012523).
Register dump:
 rip:0000000140012523 rsp:0000000000c9f450 rbp:0000000000c9f4d8 eflags:00010297
(  R- --  I S -A-P-C)
 rax:0000000068c85308 rbx:0000000000c9f4e0 rcx:ed0d8d4828ec8348
rdx:0000000000000108
 rsi:000000014000e094 rdi:0000000000000006  r8:0000000000000000 
r9:0000000000000000 r10:0000000000000000
 r11:000000014000addb r12:000000014000e050 r13:0000000000000004
r14:00000000c000000d r15:000000014000c5d8
...
=>0 0x0000000140012523 in dokan1.sys (+0x12523) (0x0000000000c9f4d8)
0x0000000140012523: movq    (%rdx,%rcx,1),%rax
Modules:
Module    Address                    Debug info    Name (11 modules)
PE              400000-          422000    Deferred        winedevice
PE            61540000-        61663000    Deferred        advapi32
PE            62dc0000-        6306b000    Deferred        rpcrt4
PE            68c80000-        68da1000    Deferred        ntoskrnl
PE            6a080000-        6a365000    Deferred        msvcrt
PE            6ba00000-        6bac9000    Deferred        sechost
PE            70940000-        70ca6000    Deferred        ucrtbase
PE            7b000000-        7b3d1000    Deferred        kernelbase
PE            7b600000-        7b96c000    Deferred        kernel32
PE            7bc00000-        7bf88000    Deferred        ntdll
PE           140000000-       140017000    Export          dokan1.sys
Threads:
process  tid      prio (all id:s are in hex)
...
00000044 (D) C:\windows\system32\winedevice.exe
    00000048    0
    00000054    0 <==
    00000058    0
...
--- snip ---

I doubt you need that driver. You could disable it in registry.
Start regedit and navigate to:

'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services'

There should be a service called 'Dokan' or similar. Navigate to that key and
edit 'Start' (REG_DWORD). Set it to '3' (manual start) or '4' (disabled).

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.