What does NTSTATUS 0xC0220028 (STATUS_FWP_OUT_OF_BOUNDS) mean?

 
Previous Next
STATUS_FWP_TYPE_MISMATCH STATUS_FWP_RESERVED

STATUS_FWP_OUT_OF_BOUNDS

A numeric policy value is syntactically present but outside its legal domain

STATUS_FWP_OUT_OF_BOUNDS signals a range violation after WFP has identified the relevant field. It is broader than STATUS_FWP_INVALID_WEIGHT: the offending value may be a filter option, condition operand, count, identifier component, or another bounded field rather than the filter priority.

Preserve the original numeric value and the structure field name in diagnostics. Clamping values automatically is risky: a policy priority, port range, or object count changed to a boundary value can have a different security effect from the requested value.

What to inspect

  • The exact structure field, value, signedness, and width before conversion.
  • The documented minimum and maximum for that field and the target OS version.
  • Any narrowing cast from a larger application value into a WFP type.
  • The separate validation status if the field also carries an incompatible type or match operation.

References


Looking for a different code? Search another status or error code.