XP SP3 32 bit
CIS 3.12.111745.560 - only firewall, Avast 4.8.1351
Firefox 3.5.3 or 3.5.2
Adobe Flash Player Plugin 10.0.32.18; Adobe Flash Player ActiveX 10.0.12.36; Java 6.0.13 (on the machine I've included dumps from)
BSOD 10000050. Happened several times on two different computers. Steps to reproduce: using flash-based apps (viewing video or listening audio) in Firefox. BSOD happens not just as I begin to do these, with a delay. Even if firewall and Defense+ are set to inactive.
kd log of last BSOD minidump:
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: e2fb00a8, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 80536c53, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000001, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
WRITE_ADDRESS: e2fb00a8
FAULTING_IP:
nt!memmove+33
80536c53 f3a5 rep movs dword ptr es:[edi],dword ptr [esi]
MM_INTERNAL_CODE: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: firefox.exe
LAST_CONTROL_TRANSFER: from bf836e95 to 80536c53
STACK_TEXT:
ba1af4ec bf836e95 e2fb00a8 03680000 00000458 nt!memmove+0x33
ba1af510 bf836b4e 0000000e ba1af774 e2f5a000 win32k!vSrcCopyS32D32Identity+0x5b
ba1af724 bf80a37e e2f5a010 00000000 00000000 win32k!EngCopyBits+0x51a
ba1af7b8 f3ec13d5 e2f5a000 e16073d8 e401c8e8 win32k!NtGdiBitBlt+0x51c
WARNING: Stack unwind information not available. Following frames may be wrong.
ba1af820 8053d638 b901139a 00000000 00000000 cmdguard+0x83d5
ba1af820 7c90e4f4 b901139a 00000000 00000000 nt!KiFastCallEntry+0xf8
0012e894 00000000 00000000 00000000 00000000 0x7c90e4f4
STACK_COMMAND: kb
FOLLOWUP_IP:
cmdguard+83d5
f3ec13d5 ??

SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: cmdguard+83d5
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: cmdguard
IMAGE_NAME: cmdguard.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ab12814
FAILURE_BUCKET_ID: 0x50_cmdguard+83d5
BUCKET_ID: 0x50_cmdguard+83d5
Followup: MachineOwner
---------
3 minidumps included.