| Previous | Next |
| STATUS_SECTION_NOT_IMAGE | STATUS_THREAD_IS_TERMINATING |
STATUS_SUSPEND_COUNT_EXCEEDED
The thread suspend count is already at its maximum
Thread suspension is counted: each successful suspend increments the suspend count, and ResumeThread decrements it. A thread runs only when the count reaches zero. This status means another suspension would overflow the supported count rather than adding one more nested suspend.
The diagnostic target is unmatched suspension, not processor load. Record the previous counts returned by suspend and resume operations and identify every subsystem that can suspend the same thread. Debuggers, crash capture, watchdogs and application code can otherwise stack independent suspends. Repeatedly calling ResumeThread without ownership tracking is also unsafe because it can release another component's suspension.
What to inspect
- Log previous suspend counts returned by SuspendThread and ResumeThread.
- Identify all components allowed to suspend the target thread.
- Pair each owned suspend with one resume instead of forcing the count to zero blindly.
References
- Microsoft: SuspendThread
- Microsoft: ResumeThread
- Microsoft: Suspending thread execution
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.