Symptoms
Assume that you select the Display pointer trails option in the Mouse Properties dialog box on a computer that is running Windows 8, Windows RT, or Windows Server 2012. When you restart, shut down, or log off from the computer, the computer may crash.
Note This issue usually occurs when you use a touch screen. The following image shows the Display pointer trails option.Cause
This issue occurs because the Win32k.sys driver leaks session pool memory.
Resolution
To resolve this issue, install update rollup 2862768. For more information about how to obtain this update rollup package, click the following article number to view the article in the Microsoft Knowledge Base:
2862768 Windows RT, Windows 8, and Windows Server 2012 update rollup: August 2013
More Information
The following stack trace is generated when this issue occurs:
fffff901`0087c730 fffff960`00386cfc win32k!AllocateObject+0x2f313c
fffff901`0087c738 fffff960`001b76d1 win32k!hspCreateDwmSpriteObj+0x51 fffff901`0087c740 fffff960`001b7b82 win32k!GreCreateSpriteInternal+0xd2 fffff901`0087c748 fffff960`002cbd86 win32k!EngSetPointerShape+0x1a6 fffff901`0087c750 fffff960`0037976d win32k!vSetPointer+0x2075ed fffff901`0087c758 fffff960`001720a8 win32k!GreSetPointer+0x158 fffff901`0087c760 fffff960`00094072 win32k!zzzUpdateCursorImage+0x162 fffff901`0087c768 fffff960`000906d3 win32k!xxxDWP_SetCursor+0x293 ] fffff901`0087c770 fffff960`000bd79c win32k!xxxRealDefWindowProc+0x15c fffff901`0087c778 fffff960`000c2c1c win32k!xxxWrapRealDefWindowProc+0x5c fffff901`0087c780 fffff960`00094dc7 win32k!NtUserMessageCall+0x1c7 fffff901`0087c788 fffff802`d58cc453 nt!KiSystemServiceCopyEnd+0x13