CRITICAL_STRUCTURE_CORRUPTION

Code: 0x109 (265)

As HRESULT:As NTSTATUS:

Parameters

ParameterDescription
1Reserved
2Reserved
3Reserved
4The type of the corrupted region. (See the following table later on this page.)

Description

The CRITICAL_STRUCTURE_CORRUPTION bug check has a value of 0x00000109. This indicates that the kernel has detected critical kernel code or data corruption.

Important

This article is for programmers. If you're a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.

Cause

There are generally three different causes for this bug check:

  1. A driver has inadvertently, or deliberately, modified critical kernel code or data. Microsoft Windows Server 2003 with Service Pack 1 (SP1) and later versions of Windows for x64-based computers do not allow the kernel to be patched except through authorized Microsoft-originated hot patches.
  2. A developer attempted to set a normal kernel breakpoint using a kernel debugger that was not attached when the system was started. Normal breakpoints (bp) can only be set if the debugger is attached at start time. Processor breakpoints (ba) can be set at any time.
  3. A hardware corruption occurred. For example, the kernel code or data could have been stored in memory that failed.

Resolution

The !analyze debug extension displays information about the bug check and can be helpful in determining the root cause.

To start, examine the stack trace using the k, kb, kc, kd, kp, kP, kv (Display Stack Backtrace) command. You can specify the processor number to examine the stacks on all processors.

You can also set a breakpoint in the code leading up to this stop code and attempt to single step forward into the faulting code.

For more information see the following topics:

Crash dump analysis using the Windows debuggers (WinDbg)

If you are not equipped to use the Windows debugger to work on this problem, you can use some basic troubleshooting techniques.

Article text from the Windows driver documentation (opens in a new tab), by Microsoft, under the CC BY 4.0 (opens in a new tab) licence.

Associated Modules

ModuleCodeFound inDescription
EventCreate.exe0x10978.11011%1
mispace.dll0x1091011Modifying short file name support is not supported for the specified file system.
ntdll.dll0x10978.11011A new volume has been mounted by a file system.
storagewmi.dll0x1098.11011Modifying short file name support is not supported for the specified file system.
webservices.dll0x10978.11011A thread could not be created.
5 entries