| 3 | Crash stack for 4.3.16 x64 OSE, on the same PC:[[br]] |
| 4 | {{{ |
| 5 | VBoxDD!ASMAtomicCmpXchgU32(unsigned int * pu32 = 0x00000000`28720f40, unsigned int u32New = 3, unsigned int u32Old = 2)+0x3a [c:\work_x64\vbox\include\iprt\asm.h @ 749] |
| 6 | VBoxDD!ahciCancelActiveTasks(struct AHCIPort * pAhciPort = 0x00000000`188ba6d0, struct AHCIREQ * pAhciReqExcept = 0x00000000`28810f40)+0xde [c:\work_x64\vbox\src\vbox\devices\storage\devahci.cpp @ 5695] |
| 7 | VBoxDD!ahciProcessCmd(struct AHCIPort * pAhciPort = 0x00000000`188ba6d0, struct AHCIREQ * pAhciReq = 0x00000000`28810f40, unsigned char * pCmdFis = 0x00000000`28810f74 "'???")+0xabd [c:\work_x64\vbox\src\vbox\devices\storage\devahci.cpp @ 6419] |
| 8 | VBoxDD!ahciAsyncIOLoop(struct PDMDEVINS * pDevIns = 0x00000000`188b9f60, struct PDMTHREAD * pThread = 0x00000000`1f18ef90)+0x960 [c:\work_x64\vbox\src\vbox\devices\storage\devahci.cpp @ 6729] |
| 9 | VBoxVMM!pdmR3ThreadMain(struct RTTHREADINT * Thread = 0x00000000`1f580730, void * pvUser = 0x00000000`1f18ef90)+0x105 [c:\work_x64\vbox\src\vbox\vmm\vmmr3\pdmthread.cpp @ 779] |
| 10 | VBoxRT!rtThreadMain(struct RTTHREADINT * pThread = 0x00000000`1f580730, unsigned int64 NativeThread = 0xbc8, char * pszThreadName = 0x00000000`1f580ff0 "Port1")+0xc2 [c:\work_x64\vbox\src\vbox\runtime\common\misc\thread.cpp @ 712] |
| 11 | 00000000`213df720 00000000`501d1d9f VBoxRT!rtThreadNativeMain(void * pvArgs = 0x00000000`1f580730)+0xae [c:\work_x64\vbox\src\vbox\runtime\r3\win\thread-win.cpp @ 211] |
| 12 | MSVCR100!_callthreadstartex+0x17 |
| 13 | MSVCR100!_threadstartex+0x7f |
| 14 | KERNEL32!BaseThreadInitThunk+0xd |
| 15 | ntdll!RtlUserThreadStart+0x1d |
| 16 | }}} |
| 17 | |
| 18 | The PAHCIREQ pointer (0x28720f40) has been freed here: |
| 19 | {{{ |
| 20 | ntdll!RtlDebugFreeHeap+0x0000000000000034 |
| 21 | ntdll!RtlpFreeHeap+0x000000000007908f |
| 22 | ntdll!RtlFreeHeap+0x0000000000000428 |
| 23 | MSVCR100!free+0x000000000000001c |
| 24 | VBoxRT!RTMemFree+0x000000000000001c [c:\work_x64\vbox\src\vbox\runtime\r3\alloc.cpp @ 221] |
| 25 | VBoxDD!ahciProcessCmd+0x0000000000000aa8 [c:\work_x64\vbox\src\vbox\devices\storage\devahci.cpp @ 6419] |
| 26 | VBoxDD!ahciAsyncIOLoop+0x0000000000000960 [c:\work_x64\vbox\src\vbox\devices\storage\devahci.cpp @ 6729] |
| 27 | VBoxVMM!pdmR3ThreadMain+0x0000000000000105 [c:\work_x64\vbox\src\vbox\vmm\vmmr3\pdmthread.cpp @ 779] |
| 28 | VBoxRT!rtThreadMain+0x00000000000000c2 [c:\work_x64\vbox\src\vbox\runtime\common\misc\thread.cpp @ 712] |
| 29 | VBoxRT!rtThreadNativeMain+0x00000000000000ae [c:\work_x64\vbox\src\vbox\runtime\r3\win\thread-win.cpp @ 211] |
| 30 | MSVCR100!_callthreadstartex+0x0000000000000017 |
| 31 | MSVCR100!_threadstartex+0x000000000000007f |
| 32 | KERNEL32!BaseThreadInitThunk+0x000000000000000d |
| 33 | ntdll!RtlUserThreadStart+0x000000000000001d |
| 34 | }}} |