Comments (3)
DarthTon
commented on August 21, 2024
Any BSOD memory dump will be good, full or minidump. Also try disabling EPT initialization by setting _Data->Features.EPT and g_Data->Features.VPID to false in VmxCheckFeatures.
from hyperbone.
Hykni
commented on August 21, 2024
I had the same issue on Windows 8.1 build 9600 (DPC_WATCHDOG_TIMEOUT, 0x133)
Disabling EPT solved the issue. The BSOD showed all CPUs were stalled in the MmAllocateContiguousMemorySpecifyCache call from EptpAllocatePage (tracing back from VmxSubvertCPU->EptBuildIdentityMap->EptpFillTable->EptUpdateTableRecursive).
From my understanding, allocating a single page is guaranteed to be contiguous in physical address space anyway? I'm not sure, but using ExAllocatePoolWithTag solved the DPC timeout. I added a call to KeInvalidateAllCaches() at the end of PHHook() since it's no longer noncached memory, but my TestPageHook() still fails. Any ideas why?
I also made sure to change the MmFreeContiguousMemory to ExFreePoolWithTag when freeing the ept pages in EptFreeIdentityMap, but the system just hangs with no bsod when trying to unload. Not sure why that would be?
from hyperbone.
Hykni
commented on August 21, 2024
Nevermind, TestPageHook() actually works. The compiler was evaluating the result of TestFn() at compile-time and not making any call.
Still unsure about the hang on unload.
from hyperbone.
Related Issues (20)
- reserved identifier violation HOT 3
- A hypervisor feature is not available to the user. HOT 1
- Crashing upon startup HOT 3
- CRASH on PHRestore HOT 1
- __vmx_vmlaunch return 1 HOT 4
- Performance Issue HOT 5
- Dead Lock on DriverUnload HOT 1
- Hook MSR with another method
- Kernel security check failure - on load HOT 2
- Kernel Security Check Failure - On Driver Load
- Bugcheck 139 Kernel Security Check Failed - On Driver Load
- Bugcheck 1E On call to StartHv() HOT 2
- NMI_HARDWARE_FAILURE - On Driver Load
- DPC_WATCHDOG_VIOLATION HOT 2
- Nesting is not supported? HOT 1
- KiSystemServiceCopyEnd Sig
- Windows 10 2004 VMLAUNCH failed HOT 1
- FIX DPC_WATCHDOG_VIOLATION HOT 4
- SyscallEntryPoint
- vmware win7 x64 unload BSOD
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from hyperbone.