O'Reilly logo

Memory Dump Analysis Anthology, Volume 7 by Dmitry Vostokov

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Memory Leak (I/O Completion Packets)

This is a specialization of Insufficient Memory (kernel pool) pattern (Volume 1, page 441). The currently unique diagnostics this pattern provides in comparison to other kernel pool tags is that the pool allocation entries show the leaking process:

0: kd> !poolused 3
Sorting by NonPaged Pool Consumed


Pool Used:
NonPaged                    Paged
Tag    Allocs    Frees     Diff     Used   Allocs    Frees     Diff     Used
Icp   1294074    42875  1251199 96642976        0        0        0        0 I/O completion packets
queue on a completion ports
[...]


0: kd> !poolfind Icp


Scanning large pool allocation table for Tag: Icp (fffffa8013e00000 : fffffa8014100000)


*fffffa800e188260 size: 50 previous size: 40 (Allocated) Icp Process: fffffa800899dc40 *fffffa800e1882e0 size: 50 previous size: ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required