KVR Studio Manager • Re: KSM Current Version - 0.1.7.2

Instant crash when scanning Cardinal.clap (23.10 - latest version) with KSM 0.1.7.2

Crashed on second scan at the same point too, so I deleted all KSM logs and my settings file and tried to scan again from scratch. Instant crash when reading Cardinal.clap.

Code:

0:008> !analyze -v*** Exception Analysis*** WARNING: Unable to verify checksum for KVR Studio Manager.exeKEY_VALUES_STRING: 1    Key  : AV.Dereference    Value: NullPtr    Key  : AV.Fault    Value: Read    Key  : Analysis.CPU.Sec    Value: 1    Key  : Analysis.DebugAnalysisProvider.CPP    Value: Create: 8007007e on SKARO    Key  : Analysis.DebugData    Value: CreateObject    Key  : Analysis.DebugModel    Value: CreateObject    Key  : Analysis.Elapsed.Sec    Value: 30    Key  : Analysis.Memory.CommitPeak.Mb    Value: 242    Key  : Analysis.System    Value: CreateObject    Key  : Timeline.Process.Start.DeltaSec    Value: 323NTGLOBALFLAG:  0PROCESS_BAM_CURRENT_THROTTLED: 0PROCESS_BAM_PREVIOUS_THROTTLED: 0APPLICATION_VERIFIER_FLAGS:  0CONTEXT:  (.ecxr)rax=0000000000000000 rbx=0000000000000000 rcx=00007ffaa6892e60rdx=0000000000000002 rsi=000000bd877ff6e8 rdi=000000bd877ff320rip=00007ffaa45b0b3c rsp=000000bd877ff150 rbp=0000000000000000 r8=00007ff79c390250  r9=000000030bda5588 r10=7efefefeff78716er11=8101010101010100 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei pl nz na pe nccs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202Cardinal!DllMain+0x58239c:00007ffa`a45b0b3c 488b08          mov     rcx,qword ptr [rax] ds:00000000`00000000=????????????????Resetting default scopeEXCEPTION_RECORD:  (.exr -1)ExceptionAddress: 00007ffaa45b0b3c (Cardinal!DllMain+0x000000000058239c)ExceptionCode: c0000005 (Access violation)ExceptionFlags: 00000000NumberParameters: 2   Parameter[0]: 0000000000000000   Parameter[1]: 0000000000000000Attempt to read from address 0000000000000000PROCESS_NAME:  KVR Studio Manager.exeREAD_ADDRESS:  0000000000000000 ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.EXCEPTION_CODE_STR:  c0000005EXCEPTION_PARAMETER1:  0000000000000000EXCEPTION_PARAMETER2:  0000000000000000STACK_TEXT:  000000bd`877ff150 00007ff7`9b494901 : 000000bd`877ff298 000000bd`877ff298 000000bd`877ff298 00000000`00000000 : Cardinal!DllMain+0x58239c000000bd`877ff190 00007ff7`9b494733 : 00007ffa`a8654bc0 000000bd`877ff298 000000bd`877ff258 00000206`0ad10200 : KVR_Studio_Manager+0x1d4901000000bd`877ff200 00007ff7`9b49424d : 000000bd`877ff5f8 00000206`0b221870 00000206`0b221870 000000bd`877ff700 : KVR_Studio_Manager+0x1d4733000000bd`877ff330 00007ff7`9bad9a62 : 00000206`0b293418 40c38800`00000000 00000000`00000000 00007ffb`35590e64 : KVR_Studio_Manager+0x1d424d000000bd`877ff8d0 00007ff7`9bad96c4 : 00000206`0b293418 00000000`00000000 00000000`00000000 00000206`04320d40 : KVR_Studio_Manager+0x819a62000000bd`877ff950 00007ff7`9bb10d5f : 00000206`0b293418 00000000`00000000 00000000`00000000 00000000`00000000 : KVR_Studio_Manager+0x8196c4000000bd`877ff980 00007ffa`d7c92d20 : 00000206`0b293418 00000000`00000000 00000000`00000000 00000000`00000000 : KVR_Studio_Manager+0x850d5f000000bd`877ff9c0 00007ffb`33f97344 : 00000206`0aa98310 00000000`00000000 00000000`00000000 00000000`00000000 : ucrtbased!thread_start<unsigned int (__cdecl*)(void *),1>+0xb0000000bd`877ffa20 00007ffb`355426b1 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14000000bd`877ffa50 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21SYMBOL_NAME:  Cardinal!DllMain+58239cMODULE_NAME: CardinalIMAGE_NAME:  Cardinal.clapSTACK_COMMAND:  ~8s ; .ecxr ; kbFAILURE_BUCKET_ID:  NULL_POINTER_READ_c0000005_Cardinal.clap!DllMainOS_VERSION:  10.0.19041.1BUILDLAB_STR:  vb_releaseOSPLATFORM_TYPE:  x64OSNAME:  Windows 10FAILURE_ID_HASH:  {666ace31-d90c-bb96-b385-4387c9c550bd}

Went back to KSM 0.1.6.1 and it's working as expected.

Statistics: Posted by NWSM — Sun Mar 24, 2024 12:59 am