I have Glasswire Basic and after installing ReHIPS I started getting the above BSODs.
I sent ReCrypt the kernel dump, and they determined the culprit was gwdrv.sys.
The asked for a copy of the aforementioned driver and this is their response:
We looked into this issue. And it looks like ReHIPS has nothing to do with it. On the other hand they have several issues.
- They try to allocate memory in a cycle. If allocation failed, they allocate again. So if for some reason allocation can’t succeed (like system is running out of memory or some parameter is wrong) it’ll get into infinite cycle. No error checking, nothing, just infinite cycle. This’ll lead to either hang thread (and probably system) or BSOD (on high IRQL windows will detect too long DPC execution and will BSOD).
- They don’t properly check NET_BUFFER-s for inspection. They get NET_BUFFER_DATA with zero CurrentMdl, CurrentMdlOffset and NbDataLength and still try to call NdisAdvanceNetBufferDataStart without any checking. It leads to negative signed (or very big unsigned) NbDataLength value. So they try to allocate 0xfffffff5 bytes of memory, failing and entering infinite cycle.
Is there something you can do to avoid this BSOD?