Windows error 0x000000F7, 247

Detailed Error Information

DRIVER_OVERRAN_STACK_BUFFER[1]

This is a Blue Screen of Death stop code. More information is available in the Knowledge Base article Bug Check 0xF7: DRIVER_OVERRAN_STACK_BUFFER.

HRESULT analysis[2]

This is probably not the correct interpretation of this error. The Win32 error above is more likely to indicate the actual problem.
FlagsSeveritySuccess

This code indicates success, rather than an error. This may not be the correct interpretation of this code, or possibly the program is handling errors incorrectly.

Reserved (R)false
OriginMicrosoft
NTSTATUSfalse
Reserved (X)false
FacilityCode0 (0x000)
NameFACILITY_NULL[2][3]
DescriptionThe default facility code.[2][3]
Error Code247 (0x00f7)

Possible solutions

1

Windows 7 Blue Screen 0x000000f7

windows-7
firefox
drivers
bsod
malware

The new dump also shows hardware issues. Here the Instruction Pointer is MISALIGNED.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and bugcheck call is the one that overran its local
variable(s).
Arguments:
Arg1: 000000000e728077, Actual security check cookie from the stack
Arg2: 0000f960003387ed, Expected security check cookie
Arg3: ffff069fffcc7812, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------


BIOS_DATE:  02/24/2009

BASEBOARD_PRODUCT:  EP45T-UD3LR

BASEBOARD_VERSION:  x.x

BUGCHECK_P1: e728077

BUGCHECK_P2: f960003387ed

BUGCHECK_P3: ffff069fffcc7812

BUGCHECK_P4: 0

SECURITY_COOKIE:  Expected 0000f960003387ed found 000000000e728077

CPU_COUNT: 4

CPU_MHZ: 91d

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 17

CPU_STEPPING: a

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xF7

PROCESS_NAME:  Audiosurf2.exe

CURRENT_IRQL:  0

ANALYSIS_VERSION: 10.0.10069.9 amd64fre

EXCEPTION_RECORD:  fffff8800b5a6198 -- (.exr 0xfffff8800b5a6198)
ExceptionAddress: fffff96000113c70 (win32k!SfnINLPCREATESTRUCT+0x0000000000000678)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000


STACK_TEXT:  
00 nt!KeBugCheckEx
01 win32k!_report_gsfailure
02 win32k!_GSHandlerCheck_SEH
03 nt!RtlpExecuteHandlerForException
04 nt!RtlDispatchException
05 nt!KiDispatchException
06 nt!KiExceptionDispatch
07 nt!KiPageFault
08 win32k!SfnINLPCREATESTRUCT
09 0x0
0a 0x0
0b 0x0
0c 0x0
0d 0x0
0e 0x0
0f 0x0
10 dxgkrnl!DxgkPresent
11 win32k!NtGdiDdDDIPresent
12 nt!KiSystemServiceCopyEnd


SYMBOL_NAME:  dxgkrnl!DxgkPresent+543

MODULE_NAME: hardware

BUCKET_ID:  X64_IP_MISALIGNED

PRIMARY_PROBLEM_CLASS:  X64_IP_MISALIGNED

So, test your RAM for errors with memtest86+ and stress / torture test your CPU with Prime95.

Also try to update the BIOS to Version F12E. You still use BIOS F5.

answered on Super User Jun 13, 2015 by magicandre1981

Comments

Leave a comment

(plain text only)

Sources

  1. https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/bug-check-code-reference2
  2. https://msdn.microsoft.com/en-us/library/cc231198.aspx
  3. winerror.h from Windows SDK 10.0.14393.0

User contributions licensed under CC BY-SA 3.0