DRIVER_CORRUPTED_EXPOOL

Code: 0xc5 (197)

As HRESULT:As NTSTATUS:

Parameters

ParameterDescription
1Memory referenced
2IRQL at time of reference
3

0: Read

1: Write

4Address that referenced memory

Description

The DRIVER_CORRUPTED_EXPOOL bug check has a value of 0x000000C5. This indicates that the system attempted to access invalid memory at a process IRQL that was too high.

Important

This article is for programmers. If you're a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.

Cause

The kernel attempted to access pageable memory (or perhaps completely invalid memory) when the IRQL was too high. The ultimate cause of this problem is almost certainly a driver that has corrupted the system pool.

In most cases, this bug check results if a driver corrupts a small allocation (less than PAGE_SIZE). Larger allocations result in bug check 0xD0 (DRIVER_CORRUPTED_MMPOOL).

Resolution

The !analyze debug extension displays information about the bug check and can be helpful in determining the root cause. If you have recently installed any new software, check to see if it is properly installed. Check for updated drivers on the manufacturer's website.

To debug this error, use the special pool option of Driver Verifier. If this fails to reveal the driver that caused the error, use the Global Flags utility to enable the special pool by pool tag.

For information about the special pool, consult the Driver Verifier section of the Windows Driver Kit.

Article text from the Windows driver documentation (opens in a new tab), by Microsoft, under the CC BY 4.0 (opens in a new tab) licence.

Associated Modules

ModuleCodeFound inDescription
EventCreate.exe0xc578.11011%1
KernelBase.dll0xc578.1The operating system is not presently configured to run this application.
dsreg.dll0xc510MDM enrollment for Azure SecureVM failed. The device will be unjoined from Azure AD. MDM Enrollment URL: %1
dsreg.dll0xc511MDM enrollment for Microsoft Entra SecureVM failed. The device will be unjoined from Microsoft Entra. MDM Enrollment URL: %1
kernel32.dll0xc578.11011The operating system is not presently configured to run this application.
nslookup.exe0xc578.11011%1!d! min
webservices.dll0xc578.11011There was an error getting the accept function for the listen socket.
7 entries