Blog Post: Win2003/2008/2008R2: STOP 0x50 in MrxSmb SmbCopySendBufferForSecuritySignatures

Status: In Progress...

Update 110711: We now have a private binary that resolves the problem. To receive this, please create a support case with us and send me the SR#. A public hotfix to address the problem is planned, but not yet available.

Update 110705: I've received a dump with the instrumentation installed, and I've relayed this to engineering.

Update 110704: We have sent out instrumented packages to various customers to gather further information on the root cause of the crash.

After the recent security updates we're seeing various STOP 0x50 errors, with stacks resembling the ones below. We suspect this to be related to MS11-043 (KB2536276). If you experience this issue too, please let me know!

Windows Server 2003:
mrxsmb!SmbCopySendBufferForSecuritySignatures+0x76
mrxsmb!SmbCeTranceive+0x1a4
mrxsmb!SmbPseOrdinaryExchange+0x1c7
mrxsmb!SmbPseExchangeStart_Write+0x1cb
mrxsmb!SmbPseContinueOrdinaryExchange+0x15d
mrxsmb!SmbCeResumeOutstandingRequests+0x80
mrxsmb!SmbCeCompleteSessionEntryInitialization+0x1e8
mrxsmb!SmbCeReferenceSession+0x1cd
mrxsmb!SmbCeInitiateExchange+0xc0
mrxsmb!SmbCeEstablishConnection+0xaf
mrxsmb!SmbCeReconnect+0x9c
mrxsmb!SmbCeReconnectDispatchTarget+0x10
rdbss!RxWorkItemDispatcher+0xf
rdbss!RxpWorkerThreadDispatcher+0x93
rdbss!RxWorkerThreadDispatcher+0x1a
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16

Windows Server 2008 & 2008 R2:
mrxsmb10!memcpy+0x1e5
mrxsmb10!SmbCopySendBufferForSecuritySignatures+0xac
mrxsmb10!SmbCeTranceive+0x1c7
mrxsmb10!SmbPseOrdinaryExchange+0x293
mrxsmb10!SmbPseExchangeStart_Write+0x1f8
mrxsmb10!SmbPseContinueOrdinaryExchange+0x20a
mrxsmb10!SmbCeResumeOutstandingRequests+0x13c
mrxsmb10!SmbCeCompleteSessionEntryInitialization+0x3b1
mrxsmb10!SmbCeReferenceSession+0x33e
mrxsmb10!SmbCeInitiateExchange+0x19e
mrxsmb10!SmbCeEstablishConnection+0xb4
mrxsmb10!SmbCeReconnect+0xae
rdbss!RxWorkItemDispatcher+0x58
rdbss!RxpWorkerThreadDispatcher+0x199
nt!PspSystemThreadStartup+0x57
nt!KxStartSystemThread+0x16

We have a high priority issue filed for this with Engineering. I'll update this space when further information is available.

DISCOVER FINANCIAL SERVICES DIODES INORATED DIEBOLD DELL CYPRESS SEMICONDUCTOR