Bug check
Encyclopedia
A fatal system error, also known as a system crash, stop error, kernel error, or bug check, is when an operating system
halts the moment it reaches a condition where it cannot operate safely.
In Microsoft Windows
, a fatal system error can be deliberately caused from a kernel-mode driver with either the KeBugCheck or KeBugCheckEx function. However, this should only be done as a last option when a critical driver has corrupted data and it is impossible to recover from the problem. This is a design based on the Unix-like
way of kernel panicking
and logging. Windows is not the first operating system to use the term Bugcheck for this function. For example, Hewlett-Packard's OpenVMS
Operating system used this terminology several years before Windows was developed. Facilities such as these help in debugging error conditions from which the operating system cannot, or decides that it should not attempt to, recover.
If the user has enabled it, the system will write an entry to the system event log. The log entry contains information about the bug check (including the bug check code and its parameters) as well as a link which will report the bug to Microsoft and provide the user with prescriptive suggestions if the cause of the check is definitive and well-known.
Next, if a kernel debugger is connected and active when the bug check occurs, the system will break into the debugger where the cause of the crash can be investigated. If no debugger is attached, then a blue text screen is displayed that contains information about why the error occurred, which is called a blue screen
or bug check screen.
The user will only see the blue screen if the system is not configured to Automatically Restart (which became the default setting in Windows XP SP2). Otherwise, it appears as though the system simply rebooted (though a blue screen might be visible for just an instant).
Note that bug checks are only supported by the Windows NT kernel. The corresponding system routine in Windows 9x, named SHELL_SYSMODAL_Message, doesn't halt the system like bug checks do; it just displays a BSoD and allows the user to continue execution.
The Windows DDK
and the WinDbg documentation both have isipid reference information about most bug checks. The WinDbg
package is available as a free download and can be installed by most users. The Windows DDK is larger and more complicated to install.
Operating system
An operating system is a set of programs that manage computer hardware resources and provide common services for application software. The operating system is the most important type of system software in a computer system...
halts the moment it reaches a condition where it cannot operate safely.
In Microsoft Windows
Microsoft Windows
Microsoft Windows is a series of operating systems produced by Microsoft.Microsoft introduced an operating environment named Windows on November 20, 1985 as an add-on to MS-DOS in response to the growing interest in graphical user interfaces . Microsoft Windows came to dominate the world's personal...
, a fatal system error can be deliberately caused from a kernel-mode driver with either the KeBugCheck or KeBugCheckEx function. However, this should only be done as a last option when a critical driver has corrupted data and it is impossible to recover from the problem. This is a design based on the Unix-like
Unix-like
A Unix-like operating system is one that behaves in a manner similar to a Unix system, while not necessarily conforming to or being certified to any version of the Single UNIX Specification....
way of kernel panicking
Kernel panic
A kernel panic is an action taken by an operating system upon detecting an internal fatal error from which it cannot safely recover. The term is largely specific to Unix and Unix-like systems; for Microsoft Windows operating systems the equivalent term is "Bug check" .The kernel routines that...
and logging. Windows is not the first operating system to use the term Bugcheck for this function. For example, Hewlett-Packard's OpenVMS
OpenVMS
OpenVMS , previously known as VAX-11/VMS, VAX/VMS or VMS, is a computer server operating system that runs on VAX, Alpha and Itanium-based families of computers. Contrary to what its name suggests, OpenVMS is not open source software; however, the source listings are available for purchase...
Operating system used this terminology several years before Windows was developed. Facilities such as these help in debugging error conditions from which the operating system cannot, or decides that it should not attempt to, recover.
Overview
When a bug check is issued a crash dump file will be created if the system is configured to create them. This file contains a snapshot of useful low-level information about the system that can be used to debug the root cause of the problem.If the user has enabled it, the system will write an entry to the system event log. The log entry contains information about the bug check (including the bug check code and its parameters) as well as a link which will report the bug to Microsoft and provide the user with prescriptive suggestions if the cause of the check is definitive and well-known.
Next, if a kernel debugger is connected and active when the bug check occurs, the system will break into the debugger where the cause of the crash can be investigated. If no debugger is attached, then a blue text screen is displayed that contains information about why the error occurred, which is called a blue screen
Blue Screen of Death
To forse a BSOD Open regedit.exe,Then search: HKLM\SYSTEM\CurrentControlSet\services\i8042prt\ParametersThen make a new DWORD called "CrashOnCtrlScroll" And set the value to 1....
or bug check screen.
The user will only see the blue screen if the system is not configured to Automatically Restart (which became the default setting in Windows XP SP2). Otherwise, it appears as though the system simply rebooted (though a blue screen might be visible for just an instant).
Note that bug checks are only supported by the Windows NT kernel. The corresponding system routine in Windows 9x, named SHELL_SYSMODAL_Message, doesn't halt the system like bug checks do; it just displays a BSoD and allows the user to continue execution.
The Windows DDK
Windows DDK
The Windows Driver Kit is a software toolset from Microsoft that enables the development of device drivers for the Microsoft Windows platform. It includes documentation, samples, build environments, and tools for driver developers.-History of WDK:...
and the WinDbg documentation both have isipid reference information about most bug checks. The WinDbg
WinDbg
WinDbg is a multipurposed debugger for Microsoft Windows, distributed on the web by Microsoft. It can be used to debug user mode applications, drivers, and the operating system itself in kernel mode...
package is available as a free download and can be installed by most users. The Windows DDK is larger and more complicated to install.