#43410 [Opn]: SNMP cause "PHP has encountered an Access Violation" when wrong IP or CommStr

From:	andy_wolk at mail dot ru	Date:	Wed, 20 Feb 2008 14:06:16 +0000
Subject:	#43410 [Opn]: SNMP cause "PHP has encountered an Access Violation" when wrong IP or CommStr
References:	1	Groups:	php.bugs
Request:	Send a blank email to php-bugs+get-122501@lists.php.net to get a copy of this message

ID: 43410 User updated by: andy_wolk at mail dot ru Reported By: andy_wolk at mail dot ru Status: Open Bug Type: SNMP related Operating System: Windows 2003 Server Enterprise PHP Version: 5.2.5 New Comment: <link rel=STYLESHEET type=text/css href=res/default.css title=default>  <table border=0 cellpadding=0 cellspacing=0 class=mycustomContainer> <tr> <td valign=top width=50% style=padding-left:5px; padding-right:5px;> <table border=0 cellpadding=2 cellspacing=2 class=mycustomTable> <tr class=mycustomHeader> <td> <table border=0 cellpadding=2 cellspacing=0 bgcolor=#818181> <tr> <td><img id=Icon_Results src=res/bulletpoint.gif></td> </tr> </table> </td> <td width=100% style=padding-left:5px;> Analysis Summary </td> </tr> <tr id=Table_Results> <td width=15 class=mycustomText> </td> <td class=row> <table border=1 class=mycustomTable> <tr class=mycustomText> <th>Type</th> <th>Description</th> <th>Recommendation</th> </tr> <tr><td class=mycustomText align=center valign=middle nowrap><img border=0 src=res/error.png width=16 height=16>  Error</td><td class=mycustomText>In w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!ExpInterlockedPopEntrySListFault in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x20657355 on thread <a href='#4516:5910Thread3228'>10</a> Heap corruption was detected in heap <a href = '#4516:5910196608'>0x00030000</a>, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0</td><td class=mycustomText>An access violation exception thrown by a heap memory manager function indicates heap corruption. Please follow the steps outlined in the following Knowledge Base article: <a target='_blank' href='http://support.microsoft.com/?id=300966'> 300966 Howto debug heap corruption issues in Internet Information Services (IIS) </a></td></tr> <tr><td class=mycustomText align=center valign=middle nowrap><img border=0 src=res/error.png width=16 height=16>  Error</td><td class=mycustomText>In w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!RtlAllocateHeap+579 in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000000 on thread <a href='#7844:31129Thread1536'>54</a> Heap corruption was detected in heap <a href = '#7844:31129196608'>0x00030000</a>, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0</td><td class=mycustomText>An access violation exception thrown by a heap memory manager function indicates heap corruption. Please follow the steps outlined in the following Knowledge Base article: <a target='_blank' href='http://support.microsoft.com/?id=300966'> 300966 Howto debug heap corruption issues in Internet Information Services (IIS) </a></td></tr> <tr><td class=mycustomText align=center valign=middle nowrap><img border=0 src=res/error.png width=16 height=16>  Error</td><td class=mycustomText>In w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!ExpInterlockedPopEntrySListFault in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x64006f00 on thread <a href='#3460:3810Thread4592'>2</a> Heap corruption was detected in heap <a href = '#3460:3810196608'>0x00030000</a>, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0</td><td class=mycustomText>An access violation exception thrown by a heap memory manager function indicates heap corruption. Please follow the steps outlined in the following Knowledge Base article: <a target='_blank' href='http://support.microsoft.com/?id=300966'> 300966 Howto debug heap corruption issues in Internet Information Services (IIS) </a></td></tr> <tr><td class=mycustomText align=center valign=middle nowrap><img border=0 src=res/information.png width=16 height=16>  Information</td><td class=mycustomText>DebugDiag determined that this dump file (w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the CrashHangAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True.</td><td class=mycustomText> </td></tr> <tr><td class=mycustomText align=center valign=middle nowrap><img border=0 src=res/information.png width=16 height=16>  Information</td><td class=mycustomText>DebugDiag determined that this dump file (w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the CrashHangAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True.</td><td class=mycustomText> </td></tr> <tr><td class=mycustomText align=center valign=middle nowrap><img border=0 src=res/information.png width=16 height=16>  Information</td><td class=mycustomText>DebugDiag determined that this dump file (w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the CrashHangAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True.</td><td class=mycustomText> </td></tr> </table> </td> </tr> </table> </td> </tr> </table>   <table border=0 cellpadding=0 cellspacing=0 class=mycustomContainer> <tr> <td valign=top width=50% style=padding-left:5px; padding-right:5px;> <table border=0 cellpadding=2 cellspacing=2 class=mycustomTable> <tr class=mycustomHeader> <td> <table border=0 cellpadding=2 cellspacing=0 bgcolor=#818181> <tr> <td><img id=Icon_Data src=res/bulletpoint.gif></td> </tr> </table> </td> <td width=100% style=padding-left:5px;> Analysis Details </td> </tr> <tr id=Table_Data> <td width=15 class=mycustomText> </td> <td class=row> <script for=window event=onload language='JavaScript'> // initially collapse all 'ToggleStartCollapsed' sections for(i=0; i < document.anchors.length; i++) { var elem = document.anchors[i]; if (elem.className.toUpperCase() == "TOGGLESTARTCOLLAPSED") doToggle2(elem); } // invoke any additional togglers var togglers = (new VBArray(g_Togglers.Items())).toArray(); for (i in togglers) window.execScript(togglers[i] + '();', 'JScript'); </script> <script language="JavaScript"> var g_Togglers = new ActiveXObject("Scripting.Dictionary"); function AddToggler(togglerFunctionName) { g_Togglers.Add(togglerFunctionName, togglerFunctionName); } function doToggle() { var srcElement = window.event.srcElement; doToggle2(srcElement); } function doToggle2(srcElement) { var img, a, div, base if(srcElement == null) return; if (srcElement.className.substr(0, 6).toUpperCase() == "TOGGLE") { try { base = srcElement.id.substr(0, srcElement.id.length - 1); a = document.all(base + "t"); img = document.all(base + "i"); div = document.all(base + "s"); if (div != null) { if (div.style.display == "none") { div.style.display = "block"; if (img != null) { img.src = "res/up.png"; } } else { div.style.display = "none"; if (img != null) { img.src = "res/down.png"; } } } } catch(Ex){} } } </script> <a onclick='javascript:doToggle();return false;' id='ScriptOff-t' class='ToggleStartCollapsed' style='cursor:hand; '> </a> <div id='ScriptOff-s' style='DISPLAY: block'> <table cellpadding=5 cellspacing=0 class=myCustomText><tr><td><img src='res/information.png'></td><td>Your browser settings are currently prohibiting this report's scripts from running. This is preventing some features of this analysis report from displaying properly. To enable scripts to run, right-click the security warning above and choose "Allow Blocked Content..." or enable the "Allow active content to run in files on My Computer*" setting on the Advanced tab of your "Internet Options" dialog to avoid being prompted in the future</td></tr></table> </div> <h4>Table Of Contents</h4><a href='#Dump3460:3810-t'>w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp</a>    <a href='#3460:3810Thread4592'>Faulting Thread</a>    <a href='#3460:3810Module'>Faulting Module Information</a> <a href='#Dump7844:31129-t'>w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp</a>    <a href='#7844:31129Thread1536'>Faulting Thread</a>    <a href='#7844:31129Module'>Faulting Module Information</a> <a href='#Dump4516:5910-t'>w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp</a>    <a href='#4516:5910Thread3228'>Faulting Thread</a>    <a href='#4516:5910Module'>Faulting Module Information</a> <a onclick='javascript:doToggle();return false;' id='Dump3460:3810-t' class='ToggleStartExpanded' style='cursor:hand; '><IMG class='ToggleStartExpanded' align='bottom' src='res/up.png' id='Dump3460:3810-i'> Report for w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp</a> <div id='Dump3460:3810-s' style='DISPLAY: block'> <h1>Report for w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp</h1> <table cellpadding=0 cellspacing=0 border=0 class=myCustomText ID="Table1"> <tr><td>Type of Analysis Performed</td><td>  Crash Analysis</td></tr> <tr><td>Machine Name</td><td>  INETVPNSERVER</td></tr> <tr><td>Operating System</td><td>  Windows Server 2003 Service Pack 2</td></tr> <tr><td>Number Of Processors</td><td>  8</td></tr> <tr><td>Process ID</td><td>  3460</td></tr> <tr><td>Process Image</td><td>  c:\WINDOWS\system32\inetsrv\w3wp.exe</td></tr> <tr><td>System Up-Time</td><td>  61 day(s) 11:20:36</td></tr> <tr><td>Process Up-Time</td><td>  01:03:30</td></tr> </table> <h4><a name='3460:3810Thread4592'>Thread 2 - System ID 4592</a></h4> <table border=0 cellpadding=0 cellspacing=0 class=myCustomText><tr><td>Entry point</td><td>  ntdll!RtlpWorkerThread</td></tr><tr><td>Create time</td><td>  20.02.2008 15:53:09</td></tr><tr><td>Time spent in user mode</td><td>  0 Days 0:0:0.0</td></tr><tr><td>Time spent in kernel mode</td><td>  0 Days 0:0:0.0</td></tr></table> <table border=0 cellpadding=0 cellspacing=0 class=mycustomText> <tr> <th>Function</th> <th>    Arg 1</th> <th>    Arg 2</th> <th>    Arg 3</th> <th>  Source</th> </tr> <tr> <td nowrap>ntdll!ExpInterlockedPopEntrySListFault</td> <td nowrap>    00030718</td> <td nowrap>    00d0fde4</td> <td nowrap>    7c82a0b8</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlpAllocateFromHeapLookaside+13</td> <td nowrap>    00030718</td> <td nowrap>    00000010</td> <td nowrap>    000392b8</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlAllocateHeap+1dd</td> <td nowrap>    00030000</td> <td nowrap>    00000000</td> <td nowrap>    00000010</td> <td nowrap>  </td> </tr> <tr> <td nowrap>msvcrt!_heap_alloc+26</td> <td nowrap>    00000010</td> <td nowrap>    00000010</td> <td nowrap>    000392b8</td> <td nowrap>  </td> </tr> <tr> <td nowrap>msvcrt!operator new+24</td> <td nowrap>    00000010</td> <td nowrap>    00000000</td> <td nowrap>    000392b8</td> <td nowrap>  </td> </tr> <tr> <td nowrap>iisutil!IPM_MESSAGE_IMP::AllocateDataLength+12</td> <td nowrap>    00000010</td> <td nowrap>    000391d8</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> <tr> <td nowrap>iisutil!IPM_MESSAGE_PIPE::ReadMessage+9b</td> <td nowrap>    00000010</td> <td nowrap>    000392b8</td> <td nowrap>    64710045</td> <td nowrap>  </td> </tr> <tr> <td nowrap>iisutil!IPM_MESSAGE_PIPE::MessagePipeCompletion+31d</td> <td nowrap>    000392b8</td> <td nowrap>    000e1b00</td> <td nowrap>    000e1b90</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlpWaitOrTimerCallout+74</td> <td nowrap>    64710045</td> <td nowrap>    000392b8</td> <td nowrap>    000e1b00</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlpAsyncWaitCallbackCompletion+37</td> <td nowrap>    000e1b90</td> <td nowrap>    7c889080</td> <td nowrap>    00093d20</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlpWorkerCallout+71</td> <td nowrap>    7c83ca2b</td> <td nowrap>    000e1b90</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlpExecuteWorkerRequest+4f</td> <td nowrap>    00000000</td> <td nowrap>    000e1b90</td> <td nowrap>    00093d20</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlpApcCallout+11</td> <td nowrap>    7c83a9ca</td> <td nowrap>    00000000</td> <td nowrap>    000e1b90</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlpWorkerThread+61</td> <td nowrap>    00000000</td> <td nowrap>    00000000</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> <tr> <td nowrap>kernel32!BaseThreadStart+34</td> <td nowrap>    7c839efb</td> <td nowrap>    00000000</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> </table> NTDLL!EXPINTERLOCKEDPOPENTRYSLISTFAULT <h4>Detailed Info For Corrupt Heap</h4> <h4> <a name='#3460:3810196608'> Heap 3 - 0x00030000 </a> </h4> <table class=myCustomText ID="Table1"> <tr> <td>Heap Name</td> <td>  msvcrt!_crtheap</td> </tr> <tr> <td>Heap Description</td> <td>  This heap is used by msvcrt</td> </tr> <tr> <td>Reserved memory</td> <td>  7,06 MBytes</td> </tr> <tr> <td>Committed memory</td> <td>  4,75 MBytes (67,26% of reserved) </td> </tr> <tr> <td>Uncommitted memory</td> <td>  2,31 MBytes (32,74% of reserved) </td> </tr> <tr> <td>Number of heap segments</td> <td>  4 segments</td> </tr> <tr> <td>Number of uncommitted ranges</td> <td>  1 range(s)</td> </tr> <tr> <td>Size of largest uncommitted range</td> <td>  2,31 MBytes</td> </tr> <tr> <td>Calculated heap fragmentation</td> <td>  0,00%</td> </tr> </table> <h5>Segment Information</h5> <table class=myCustomText cellspacing=3 ID="Table2"> <tr> <th>Base Address</th> <th>Reserved Size</th> <th>Committed Size</th> <th>Uncommitted Size</th> <th>Number of uncommitted ranges</th> <th>Largest uncommitted block</th> <th>Calculated heap fragmentation</th> </tr> <tr> <td>0x00030640</td> <td>64,00 KBytes</td> <td>64,00 KBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x01c80000</td> <td>1à024,00 KBytes</td> <td>1à024,00 KBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x02c00000</td> <td>2,00 MBytes</td> <td>2,00 MBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x03510000</td> <td>4,00 MBytes</td> <td>1,69 MBytes</td> <td>2,31 MBytes</td> <td>1</td> <td>2,31 MBytes</td> <td>0,00%</td> </tr> </table> <h5>Top 5 allocations by size</h5> <table border=0><tr><td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> Allocation Size - 140</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 32</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 584</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 56</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 308</td></tr> </table></td><td> <table width=800 border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td bgcolor=#ccccc colspan=100> </td> </tr> <tr class=mycustomText><td bgcolor=#ccccff colspan=15> </td> <td colspan=85> </td> </tr> <tr class=mycustomText><td bgcolor=#ffcc00 colspan=11> </td> <td colspan=89> </td> </tr> <tr class=mycustomText><td bgcolor=#cccc00 colspan=8> </td> <td colspan=92> </td> </tr> <tr class=mycustomText><td bgcolor=#33ccff colspan=6> </td> <td colspan=94> </td> </tr> </table></td> <td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> 1,61 MBytes</td></tr> <tr class=mycustomText><td nowrap> 253,09 KBytes</td></tr> <tr class=mycustomText><td nowrap> 187,06 KBytes</td></tr> <tr class=mycustomText><td nowrap> 125,89 KBytes</td></tr> <tr class=mycustomText><td nowrap> 99,56 KBytes</td></tr> </table></td></tr></table> <h5>Top 5 allocations by count</h5> <table border=0><tr><td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> Allocation Size - 140</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 32</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 56</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 12</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 47</td></tr> </table></td><td> <table width=800 border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td bgcolor=#ccccc colspan=100> </td> </tr> <tr class=mycustomText><td bgcolor=#ccccff colspan=67> </td> <td colspan=33> </td> </tr> <tr class=mycustomText><td bgcolor=#ffcc00 colspan=19> </td> <td colspan=81> </td> </tr> <tr class=mycustomText><td bgcolor=#cccc00 colspan=15> </td> <td colspan=85> </td> </tr> <tr class=mycustomText><td bgcolor=#33ccff colspan=15> </td> <td colspan=85> </td> </tr> </table></td> <td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> 12064 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 8099 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 2302 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 1757 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 1756 allocation(s)</td></tr> </table></td></tr></table> <a href='#'>Back to Top</a> In w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!ExpInterlockedPopEntrySListFault in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x64006f00 on thread <a href='#3460:3810Thread4592'>2</a> Heap corruption was detected in heap <a href = '#3460:3810196608'>0x00030000</a>, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 <table cellpadding=0 cellspacing=0 border=0 class='myCustomText' ID="Table2"> <tr> <td><h2><a name='3460:3810Module'>Module Information</a></h2></td> </tr> <TR> <TD>Image Name:</TD> <td>C:\WINDOWS\system32\ntdll.dll</td> <TD>  Symbol Type: </TD> <td>PDB</td> </TR> <TR> <TD>Base address:</TD> <td>0x7c800000</td> <TD>  Time Stamp: </TD> <td>Sat Feb 17 17:02:00 2007 </td> </TR> <TR> <TD>Checksum:</TD> <td>0x000bd6f9</td> <TD>  Comments: </TD> <td></td> </TR> <TR> <TD>COM DLL:</TD> <td>False</td> <TD>  Company Name: </TD> <td>Microsoft Corporation</td> </TR> <TR> <TD>ISAPIExtension:</TD> <td>False</td> <TD>  File Description: </TD> <td>NT Layer DLL</td> </TR> <TR> <TD>ISAPIFilter:</TD> <td>False</td> <TD>  File Version: </TD> <td>5.2.3790.3959 (srv03_sp2_rtm.070216-1710)</td> </TR> <TR> <TD>Managed DLL:</TD> <td>False</td> <TD>  Internal Name: </TD> <td>ntdll.dll</td> </TR> <TR> <TD>VB DLL:</TD> <td>False</td> <TD>  Legal Copyright: </TD> <td>é Microsoft Corporation. All rights reserved.</td> </TR> <TR> <TD>Loaded Image Name: </TD> <td>ntdll.dll</td> <TD>  Legal Trademarks: </TD> <td></td> </TR> <TR> <TD>Mapped Image Name: </TD> <td></td> <TD>  Original filename: </TD> <td>ntdll.dll</td> </TR> <TR> <TD>Module name: </TD> <td>ntdll</td> <TD>  Private Build: </TD> <td></td> </TR> <TR> <TD>Single Threaded: </TD> <td>False</td> <TD>  Product Name: </TD> <td>Microsoftî Windowsî Operating System</td> </TR> <TR> <TD>Module Size: </TD> <td>768,00 KBytes</td> <TD>  Product Version: </TD> <td>5.2.3790.3959</td> </TR> <TR> <TD>Symbol File Name: </TD> <td>c:\symcache\ntdll.pdb\93E72E109DC84F16AA54797E4DA8C1682\ntdll.pdb</td> <TD>  Special Build: </TD> <td>&</td> </TR> </table> </div> <a onclick='javascript:doToggle();return false;' id='Dump7844:31129-t' class='ToggleStartExpanded' style='cursor:hand; '><IMG class='ToggleStartExpanded' align='bottom' src='res/up.png' id='Dump7844:31129-i'> Report for w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp</a> <div id='Dump7844:31129-s' style='DISPLAY: block'> <h1>Report for w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp</h1> <table cellpadding=0 cellspacing=0 border=0 class=myCustomText ID="Table1"> <tr><td>Type of Analysis Performed</td><td>  Crash Analysis</td></tr> <tr><td>Machine Name</td><td>  INETVPNSERVER</td></tr> <tr><td>Operating System</td><td>  Windows Server 2003 Service Pack 2</td></tr> <tr><td>Number Of Processors</td><td>  8</td></tr> <tr><td>Process ID</td><td>  7844</td></tr> <tr><td>Process Image</td><td>  c:\WINDOWS\system32\inetsrv\w3wp.exe</td></tr> <tr><td>System Up-Time</td><td>  59 day(s) 14:12:49</td></tr> <tr><td>Process Up-Time</td><td>  08:38:49</td></tr> </table> <h4><a name='7844:31129Thread1536'>Thread 54 - System ID 1536</a></h4> <table border=0 cellpadding=0 cellspacing=0 class=myCustomText><tr><td>Entry point</td><td>  w3tp!THREAD_MANAGER::ThreadManagerThread</td></tr><tr><td>Create time</td><td>  18.02.2008 19:37:07</td></tr><tr><td>Time spent in user mode</td><td>  0 Days 0:0:0.0</td></tr><tr><td>Time spent in kernel mode</td><td>  0 Days 0:0:2.515</td></tr></table> <table border=0 cellpadding=0 cellspacing=0 class=mycustomText> <tr> <th>Function</th> <th>    Arg 1</th> <th>    Arg 2</th> <th>    Arg 3</th> <th>  Source</th> </tr> <tr> <td nowrap>ntdll!RtlAllocateHeap+579</td> <td nowrap>    00030000</td> <td nowrap>    00000000</td> <td nowrap>    00000084</td> <td nowrap>  </td> </tr> <tr> <td nowrap>msvcrt!malloc+6c</td> <td nowrap>    00000084</td> <td nowrap>    00000010</td> <td nowrap>    083bf910</td> <td nowrap>  </td> </tr> <tr> <td nowrap>php5ts!ts_resource_ex+103</td> <td nowrap>    056359ec</td> <td nowrap>    00000600</td> <td nowrap>    1093f9c8</td> <td nowrap>  </td> </tr> <tr> <td nowrap>php5ts!ts_resource_ex+c4</td> <td nowrap>    00000000</td> <td nowrap>    00000600</td> <td nowrap>    083bf910</td> <td nowrap>  </td> </tr> <tr> <td nowrap>php5isapi!HttpFilterProc+b</td> <td nowrap>    1093fa1c</td> <td nowrap>    00004000</td> <td nowrap>    083bf910</td> <td nowrap>  </td> </tr> <tr> <td nowrap>w3core!W3_MAIN_CONTEXT::NotifyFilters+e0</td> <td nowrap>    a1000001</td> <td nowrap>    5a3de000</td> <td nowrap>    145d8b53</td> <td nowrap>  </td> </tr> <tr> <td nowrap>0x28ec81ec</td> <td nowrap>    8bfc4589</td> <td nowrap>    8b571045</td> <td nowrap>    8589087d</td> <td nowrap>  </td> </tr> <tr> <td nowrap>0x0c758b56</td> <td nowrap>    8b571045</td> <td nowrap>    8589087d</td> <td nowrap>    fffffed8</td> <td nowrap>  </td> </tr> <tr> <td nowrap>0x80000000`00000000</td> <td nowrap>    8589087d</td> <td nowrap>    fffffed8</td> <td nowrap>    00008068</td> <td nowrap>  </td> </tr> <tr> <td nowrap>0x80000000`00000000</td> <td nowrap>    fffffed8</td> <td nowrap>    00008068</td> <td nowrap>    3c858d00</td> <td nowrap>  </td> </tr> <tr> <td nowrap>0x80000000`00000000</td> <td nowrap>    00008068</td> <td nowrap>    3c858d00</td> <td nowrap>    50ffffff</td> <td nowrap>  </td> </tr> <tr> <td nowrap>0x80000000`00000000</td> <td nowrap>    3c858d00</td> <td nowrap>    50ffffff</td> <td nowrap>    ff0c8d8d</td> <td nowrap>  </td> </tr> </table> NTDLL!RTLALLOCATEHEAP+579 <h4>Detailed Info For Corrupt Heap</h4> <h4> <a name='#7844:31129196608'> Heap 3 - 0x00030000 </a> </h4> <table class=myCustomText ID="Table1"> <tr> <td>Heap Name</td> <td>  msvcrt!_crtheap</td> </tr> <tr> <td>Heap Description</td> <td>  This heap is used by msvcrt</td> </tr> <tr> <td>Reserved memory</td> <td>  63,06 MBytes</td> </tr> <tr> <td>Committed memory</td> <td>  39,68 MBytes (62,92% of reserved) </td> </tr> <tr> <td>Uncommitted memory</td> <td>  23,39 MBytes (37,08% of reserved) </td> </tr> <tr> <td>Number of heap segments</td> <td>  7 segments</td> </tr> <tr> <td>Number of uncommitted ranges</td> <td>  1 range(s)</td> </tr> <tr> <td>Size of largest uncommitted range</td> <td>  23,39 MBytes</td> </tr> <tr> <td>Calculated heap fragmentation</td> <td>  0,00%</td> </tr> </table> <h5>Segment Information</h5> <table class=myCustomText cellspacing=3 ID="Table2"> <tr> <th>Base Address</th> <th>Reserved Size</th> <th>Committed Size</th> <th>Uncommitted Size</th> <th>Number of uncommitted ranges</th> <th>Largest uncommitted block</th> <th>Calculated heap fragmentation</th> </tr> <tr> <td>0x00030640</td> <td>64,00 KBytes</td> <td>64,00 KBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x01c80000</td> <td>1à024,00 KBytes</td> <td>1à024,00 KBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x02c00000</td> <td>2,00 MBytes</td> <td>2,00 MBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x03640000</td> <td>4,00 MBytes</td> <td>4,00 MBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x055a0000</td> <td>8,00 MBytes</td> <td>8,00 MBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x08680000</td> <td>16,00 MBytes</td> <td>16,00 MBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x0d430000</td> <td>32,00 MBytes</td> <td>8,61 MBytes</td> <td>23,39 MBytes</td> <td>1</td> <td>23,39 MBytes</td> <td>0,00%</td> </tr> </table> <h5>Top 5 allocations by size</h5> <table border=0><tr><td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> Allocation Size - 584</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 308</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 140</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 32</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 56</td></tr> </table></td><td> <table width=800 border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td bgcolor=#ccccc colspan=100> </td> </tr> <tr class=mycustomText><td bgcolor=#ccccff colspan=57> </td> <td colspan=43> </td> </tr> <tr class=mycustomText><td bgcolor=#ffcc00 colspan=51> </td> <td colspan=49> </td> </tr> <tr class=mycustomText><td bgcolor=#cccc00 colspan=8> </td> <td colspan=92> </td> </tr> <tr class=mycustomText><td bgcolor=#33ccff colspan=4> </td> <td colspan=96> </td> </tr> </table></td> <td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> 13,24 MBytes</td></tr> <tr class=mycustomText><td nowrap> 7,60 MBytes</td></tr> <tr class=mycustomText><td nowrap> 6,74 MBytes</td></tr> <tr class=mycustomText><td nowrap> 1,08 MBytes</td></tr> <tr class=mycustomText><td nowrap> 568,42 KBytes</td></tr> </table></td></tr></table> <h5>Top 5 allocations by count</h5> <table border=0><tr><td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> Allocation Size - 140</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 32</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 12</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 308</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 584</td></tr> </table></td><td> <table width=800 border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td bgcolor=#ccccc colspan=100> </td> </tr> <tr class=mycustomText><td bgcolor=#ccccff colspan=70> </td> <td colspan=30> </td> </tr> <tr class=mycustomText><td bgcolor=#ffcc00 colspan=53> </td> <td colspan=47> </td> </tr> <tr class=mycustomText><td bgcolor=#cccc00 colspan=51> </td> <td colspan=49> </td> </tr> <tr class=mycustomText><td bgcolor=#33ccff colspan=47> </td> <td colspan=53> </td> </tr> </table></td> <td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> 50503 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 35387 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 26779 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 25874 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 23765 allocation(s)</td></tr> </table></td></tr></table> <a href='#'>Back to Top</a> In w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!RtlAllocateHeap+579 in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000000 on thread <a href='#7844:31129Thread1536'>54</a> Heap corruption was detected in heap <a href = '#7844:31129196608'>0x00030000</a>, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 <table cellpadding=0 cellspacing=0 border=0 class='myCustomText' ID="Table2"> <tr> <td><h2><a name='7844:31129Module'>Module Information</a></h2></td> </tr> <TR> <TD>Image Name:</TD> <td>C:\WINDOWS\system32\ntdll.dll</td> <TD>  Symbol Type: </TD> <td>PDB</td> </TR> <TR> <TD>Base address:</TD> <td>0x7c800000</td> <TD>  Time Stamp: </TD> <td>Sat Feb 17 17:02:00 2007 </td> </TR> <TR> <TD>Checksum:</TD> <td>0x000bd6f9</td> <TD>  Comments: </TD> <td></td> </TR> <TR> <TD>COM DLL:</TD> <td>False</td> <TD>  Company Name: </TD> <td>Microsoft Corporation</td> </TR> <TR> <TD>ISAPIExtension:</TD> <td>False</td> <TD>  File Description: </TD> <td>NT Layer DLL</td> </TR> <TR> <TD>ISAPIFilter:</TD> <td>False</td> <TD>  File Version: </TD> <td>5.2.3790.3959 (srv03_sp2_rtm.070216-1710)</td> </TR> <TR> <TD>Managed DLL:</TD> <td>False</td> <TD>  Internal Name: </TD> <td>ntdll.dll</td> </TR> <TR> <TD>VB DLL:</TD> <td>False</td> <TD>  Legal Copyright: </TD> <td>é Microsoft Corporation. All rights reserved.</td> </TR> <TR> <TD>Loaded Image Name: </TD> <td>ntdll.dll</td> <TD>  Legal Trademarks: </TD> <td></td> </TR> <TR> <TD>Mapped Image Name: </TD> <td></td> <TD>  Original filename: </TD> <td>ntdll.dll</td> </TR> <TR> <TD>Module name: </TD> <td>ntdll</td> <TD>  Private Build: </TD> <td></td> </TR> <TR> <TD>Single Threaded: </TD> <td>False</td> <TD>  Product Name: </TD> <td>Microsoftî Windowsî Operating System</td> </TR> <TR> <TD>Module Size: </TD> <td>768,00 KBytes</td> <TD>  Product Version: </TD> <td>5.2.3790.3959</td> </TR> <TR> <TD>Symbol File Name: </TD> <td>c:\symcache\ntdll.pdb\93E72E109DC84F16AA54797E4DA8C1682\ntdll.pdb</td> <TD>  Special Build: </TD> <td>&</td> </TR> </table> </div> <a onclick='javascript:doToggle();return false;' id='Dump4516:5910-t' class='ToggleStartExpanded' style='cursor:hand; '><IMG class='ToggleStartExpanded' align='bottom' src='res/up.png' id='Dump4516:5910-i'> Report for w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp</a> <div id='Dump4516:5910-s' style='DISPLAY: block'> <h1>Report for w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp</h1> <table cellpadding=0 cellspacing=0 border=0 class=myCustomText ID="Table1"> <tr><td>Type of Analysis Performed</td><td>  Crash Analysis</td></tr> <tr><td>Machine Name</td><td>  INETVPNSERVER</td></tr> <tr><td>Operating System</td><td>  Windows Server 2003 Service Pack 2</td></tr> <tr><td>Number Of Processors</td><td>  8</td></tr> <tr><td>Process ID</td><td>  4516</td></tr> <tr><td>Process Image</td><td>  c:\WINDOWS\system32\inetsrv\w3wp.exe</td></tr> <tr><td>System Up-Time</td><td>  59 day(s) 15:52:24</td></tr> <tr><td>Process Up-Time</td><td>  01:38:30</td></tr> </table> <h4><a name='4516:5910Thread3228'>Thread 10 - System ID 3228</a></h4> <table border=0 cellpadding=0 cellspacing=0 class=myCustomText><tr><td>Entry point</td><td>  w3tp!THREAD_MANAGER::ThreadManagerThread</td></tr><tr><td>Create time</td><td>  18.02.2008 19:49:57</td></tr><tr><td>Time spent in user mode</td><td>  0 Days 0:0:0.281</td></tr><tr><td>Time spent in kernel mode</td><td>  0 Days 0:0:0.171</td></tr></table> <table border=0 cellpadding=0 cellspacing=0 class=mycustomText> <tr> <th>Function</th> <th>    Arg 1</th> <th>    Arg 2</th> <th>    Arg 3</th> <th>  Source</th> </tr> <tr> <td nowrap>ntdll!ExpInterlockedPopEntrySListFault</td> <td nowrap>    00030838</td> <td nowrap>    0124fed0</td> <td nowrap>    7c82a0b8</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlpAllocateFromHeapLookaside+13</td> <td nowrap>    00030838</td> <td nowrap>    0000003c</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> <tr> <td nowrap>ntdll!RtlAllocateHeap+1dd</td> <td nowrap>    00030000</td> <td nowrap>    00000000</td> <td nowrap>    0000003c</td> <td nowrap>  </td> </tr> <tr> <td nowrap>msvcrt!_heap_alloc+26</td> <td nowrap>    0000003c</td> <td nowrap>    00000000</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> <tr> <td nowrap>msvcrt!operator new+24</td> <td nowrap>    0000003c</td> <td nowrap>    5a361d28</td> <td nowrap>    00000008</td> <td nowrap>  </td> </tr> <tr> <td nowrap>iisutil!IPM_MESSAGE_IMP::CreateMessage+1c</td> <td nowrap>    0124ff34</td> <td nowrap>    00039238</td> <td nowrap>    5a361d28</td> <td nowrap>  </td> </tr> <tr> <td nowrap>iisutil!IPM_MESSAGE_PIPE::WriteMessage+5e</td> <td nowrap>    00000002</td> <td nowrap>    00000000</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> <tr> <td nowrap>w3dt!WP_IPM::HandlePing+59</td> <td nowrap>    00000000</td> <td nowrap>    00000000</td> <td nowrap>    00038bb8</td> <td nowrap>  </td> </tr> <tr> <td nowrap>w3tp!THREAD_POOL_DATA::ThreadPoolThread+73</td> <td nowrap>    00000000</td> <td nowrap>    00038b78</td> <td nowrap>    5a300000</td> <td nowrap>  </td> </tr> <tr> <td nowrap>w3tp!THREAD_POOL_DATA::ThreadPoolThread+24</td> <td nowrap>    00000102</td> <td nowrap>    00000000</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> <tr> <td nowrap>w3tp!THREAD_MANAGER::ThreadManagerThread+39</td> <td nowrap>    00038b78</td> <td nowrap>    00000000</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> <tr> <td nowrap>kernel32!BaseThreadStart+34</td> <td nowrap>    5a301d70</td> <td nowrap>    00038b78</td> <td nowrap>    00000000</td> <td nowrap>  </td> </tr> </table> NTDLL!EXPINTERLOCKEDPOPENTRYSLISTFAULT <h4>Detailed Info For Corrupt Heap</h4> <h4> <a name='#4516:5910196608'> Heap 3 - 0x00030000 </a> </h4> <table class=myCustomText ID="Table1"> <tr> <td>Heap Name</td> <td>  msvcrt!_crtheap</td> </tr> <tr> <td>Heap Description</td> <td>  This heap is used by msvcrt</td> </tr> <tr> <td>Reserved memory</td> <td>  7,06 MBytes</td> </tr> <tr> <td>Committed memory</td> <td>  3,89 MBytes (55,14% of reserved) </td> </tr> <tr> <td>Uncommitted memory</td> <td>  3,17 MBytes (44,86% of reserved) </td> </tr> <tr> <td>Number of heap segments</td> <td>  4 segments</td> </tr> <tr> <td>Number of uncommitted ranges</td> <td>  1 range(s)</td> </tr> <tr> <td>Size of largest uncommitted range</td> <td>  3,17 MBytes</td> </tr> <tr> <td>Calculated heap fragmentation</td> <td>  0,00%</td> </tr> </table> <h5>Segment Information</h5> <table class=myCustomText cellspacing=3 ID="Table2"> <tr> <th>Base Address</th> <th>Reserved Size</th> <th>Committed Size</th> <th>Uncommitted Size</th> <th>Number of uncommitted ranges</th> <th>Largest uncommitted block</th> <th>Calculated heap fragmentation</th> </tr> <tr> <td>0x00030640</td> <td>64,00 KBytes</td> <td>64,00 KBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x01c80000</td> <td>1à024,00 KBytes</td> <td>1à024,00 KBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x02c00000</td> <td>2,00 MBytes</td> <td>2,00 MBytes</td> <td>0 Bytes</td> <td>0</td> <td>0 Bytes</td> <td>0,00%</td> </tr> <tr> <td>0x03920000</td> <td>4,00 MBytes</td> <td>852,00 KBytes</td> <td>3,17 MBytes</td> <td>1</td> <td>3,17 MBytes</td> <td>0,00%</td> </tr> </table> <h5>Top 5 allocations by size</h5> <table border=0><tr><td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> Allocation Size - 140</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 32</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 56</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 584</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 8192</td></tr> </table></td><td> <table width=800 border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td bgcolor=#ccccc colspan=100> </td> </tr> <tr class=mycustomText><td bgcolor=#ccccff colspan=15> </td> <td colspan=85> </td> </tr> <tr class=mycustomText><td bgcolor=#ffcc00 colspan=7> </td> <td colspan=93> </td> </tr> <tr class=mycustomText><td bgcolor=#cccc00 colspan=7> </td> <td colspan=93> </td> </tr> <tr class=mycustomText><td bgcolor=#33ccff colspan=6> </td> <td colspan=94> </td> </tr> </table></td> <td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> 1,32 MBytes</td></tr> <tr class=mycustomText><td nowrap> 205,84 KBytes</td></tr> <tr class=mycustomText><td nowrap> 101,12 KBytes</td></tr> <tr class=mycustomText><td nowrap> 97,52 KBytes</td></tr> <tr class=mycustomText><td nowrap> 80,00 KBytes</td></tr> </table></td></tr></table> <h5>Top 5 allocations by count</h5> <table border=0><tr><td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> Allocation Size - 140</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 32</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 56</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 12</td></tr> <tr class=mycustomText><td nowrap> Allocation Size - 47</td></tr> </table></td><td> <table width=800 border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td bgcolor=#ccccc colspan=100> </td> </tr> <tr class=mycustomText><td bgcolor=#ccccff colspan=67> </td> <td colspan=33> </td> </tr> <tr class=mycustomText><td bgcolor=#ffcc00 colspan=19> </td> <td colspan=81> </td> </tr> <tr class=mycustomText><td bgcolor=#cccc00 colspan=15> </td> <td colspan=85> </td> </tr> <tr class=mycustomText><td bgcolor=#33ccff colspan=15> </td> <td colspan=85> </td> </tr> </table></td> <td><table border=0 cellpadding=0 cellspacing=5> <tr class=mycustomText><td nowrap> 9895 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 6587 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 1849 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 1498 allocation(s)</td></tr> <tr class=mycustomText><td nowrap> 1462 allocation(s)</td></tr> </table></td></tr></table> <a href='#'>Back to Top</a> In w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!ExpInterlockedPopEntrySListFault in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x20657355 on thread <a href='#4516:5910Thread3228'>10</a> Heap corruption was detected in heap <a href = '#4516:5910196608'>0x00030000</a>, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 <table cellpadding=0 cellspacing=0 border=0 class='myCustomText' ID="Table2"> <tr> <td><h2><a name='4516:5910Module'>Module Information</a></h2></td> </tr> <TR> <TD>Image Name:</TD> <td>C:\WINDOWS\system32\ntdll.dll</td> <TD>  Symbol Type: </TD> <td>PDB</td> </TR> <TR> <TD>Base address:</TD> <td>0x7c800000</td> <TD>  Time Stamp: </TD> <td>Sat Feb 17 17:02:00 2007 </td> </TR> <TR> <TD>Checksum:</TD> <td>0x000bd6f9</td> <TD>  Comments: </TD> <td></td> </TR> <TR> <TD>COM DLL:</TD> <td>False</td> <TD>  Company Name: </TD> <td>Microsoft Corporation</td> </TR> <TR> <TD>ISAPIExtension:</TD> <td>False</td> <TD>  File Description: </TD> <td>NT Layer DLL</td> </TR> <TR> <TD>ISAPIFilter:</TD> <td>False</td> <TD>  File Version: </TD> <td>5.2.3790.3959 (srv03_sp2_rtm.070216-1710)</td> </TR> <TR> <TD>Managed DLL:</TD> <td>False</td> <TD>  Internal Name: </TD> <td>ntdll.dll</td> </TR> <TR> <TD>VB DLL:</TD> <td>False</td> <TD>  Legal Copyright: </TD> <td>é Microsoft Corporation. All rights reserved.</td> </TR> <TR> <TD>Loaded Image Name: </TD> <td>ntdll.dll</td> <TD>  Legal Trademarks: </TD> <td></td> </TR> <TR> <TD>Mapped Image Name: </TD> <td></td> <TD>  Original filename: </TD> <td>ntdll.dll</td> </TR> <TR> <TD>Module name: </TD> <td>ntdll</td> <TD>  Private Build: </TD> <td></td> </TR> <TR> <TD>Single Threaded: </TD> <td>False</td> <TD>  Product Name: </TD> <td>Microsoftî Windowsî Operating System</td> </TR> <TR> <TD>Module Size: </TD> <td>768,00 KBytes</td> <TD>  Product Version: </TD> <td>5.2.3790.3959</td> </TR> <TR> <TD>Symbol File Name: </TD> <td>c:\symcache\ntdll.pdb\93E72E109DC84F16AA54797E4DA8C1682\ntdll.pdb</td> <TD>  Special Build: </TD> <td>&</td> </TR> </table> </div> <script language='JavaScript'> AddToggler('doToggleCrashHangAnalysis'); function doToggleCrashHangAnalysis() { } </script> </td> </tr> </table> </td> </tr> </table>   <table border=0 cellpadding=0 cellspacing=0 class=mycustomContainer> <tr> <td valign=top width=50% style=padding-left:5px; padding-right:5px;> <table border=0 cellpadding=2 cellspacing=2 class=mycustomTable> <tr class=mycustomHeader> <td> <table border=0 cellpadding=2 cellspacing=0 bgcolor=#818181> <tr><td><img id=Icon_Summary src=res/bulletpoint.gif></td></tr> </table> </td> <td width=100% style=padding-left:5px;> Script Summary </td> </tr> <tr id=Table_Summary> <td width=15 class=mycustomText> </td> <td class=row> <table border=1 class=mycustomTable cellpadding=1 cellspacing=1> <tr class=mycustomText align=left> <th>Script Name</th> <th>Status</th> <th>Error Code</th> <th>Error Source</th> <th>Error Description</th> <th>Source Line</th> </tr><tr align=left><td class=mycustomText>CrashHangAnalysis.asp</td><td class=mycustomText>Completed</td><td class=mycustomText colspan='4'> </td></tr> </table> </td> </tr> </td> </tr> </table>  Previous Comments: ------------------------------------------------------------------------ [2008-02-20 14:04:36] andy_wolk at mail dot ru Analysis Summary Type Description Recommendation Error In w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!ExpInterlockedPopEntrySListFault in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x20657355 on thread 10 Heap corruption was detected in heap 0x00030000, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 An access violation exception thrown by a heap memory manager function indicates heap corruption. Please follow the steps outlined in the following Knowledge Base article: 300966 Howto debug heap corruption issues in Internet Information Services (IIS) Error In w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!RtlAllocateHeap+579 in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000000 on thread 54 Heap corruption was detected in heap 0x00030000, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 An access violation exception thrown by a heap memory manager function indicates heap corruption. Please follow the steps outlined in the following Knowledge Base article: 300966 Howto debug heap corruption issues in Internet Information Services (IIS) Error In w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!ExpInterlockedPopEntrySListFault in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x64006f00 on thread 2 Heap corruption was detected in heap 0x00030000, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 An access violation exception thrown by a heap memory manager function indicates heap corruption. Please follow the steps outlined in the following Knowledge Base article: 300966 Howto debug heap corruption issues in Internet Information Services (IIS) Information DebugDiag determined that this dump file (w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the CrashHangAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True. Information DebugDiag determined that this dump file (w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the CrashHangAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True. Information DebugDiag determined that this dump file (w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the CrashHangAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True. Analysis Details Your browser settings are currently prohibiting this report's scripts from running. This is preventing some features of this analysis report from displaying properly. To enable scripts to run, right-click the security warning above and choose "Allow Blocked Content..." or enable the "Allow active content to run in files on My Computer*" setting on the Advanced tab of your "Internet Options" dialog to avoid being prompted in the future Table Of Contents w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp Faulting Thread Faulting Module Information w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp Faulting Thread Faulting Module Information w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp Faulting Thread Faulting Module Information Report for w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp Report for w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp Type of Analysis Performed Crash Analysis Machine Name INETVPNSERVER Operating System Windows Server 2003 Service Pack 2 Number Of Processors 8 Process ID 3460 Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe System Up-Time 61 day(s) 11:20:36 Process Up-Time 01:03:30 Thread 2 - System ID 4592 Entry point ntdll!RtlpWorkerThread Create time 20.02.2008 15:53:09 Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Arg 1 Arg 2 Arg 3 Source ntdll!ExpInterlockedPopEntrySListFault 00030718 00d0fde4 7c82a0b8 ntdll!RtlpAllocateFromHeapLookaside+13 00030718 00000010 000392b8 ntdll!RtlAllocateHeap+1dd 00030000 00000000 00000010 msvcrt!_heap_alloc+26 00000010 00000010 000392b8 msvcrt!operator new+24 00000010 00000000 000392b8 iisutil!IPM_MESSAGE_IMP::AllocateDataLength+12 00000010 000391d8 00000000 iisutil!IPM_MESSAGE_PIPE::ReadMessage+9b 00000010 000392b8 64710045 iisutil!IPM_MESSAGE_PIPE::MessagePipeCompletion+31d 000392b8 000e1b00 000e1b90 ntdll!RtlpWaitOrTimerCallout+74 64710045 000392b8 000e1b00 ntdll!RtlpAsyncWaitCallbackCompletion+37 000e1b90 7c889080 00093d20 ntdll!RtlpWorkerCallout+71 7c83ca2b 000e1b90 00000000 ntdll!RtlpExecuteWorkerRequest+4f 00000000 000e1b90 00093d20 ntdll!RtlpApcCallout+11 7c83a9ca 00000000 000e1b90 ntdll!RtlpWorkerThread+61 00000000 00000000 00000000 kernel32!BaseThreadStart+34 7c839efb 00000000 00000000 NTDLL!EXPINTERLOCKEDPOPENTRYSLISTFAULT Detailed Info For Corrupt Heap Heap 3 - 0x00030000 Heap Name msvcrt!_crtheap Heap Description This heap is used by msvcrt Reserved memory 7,06 MBytes Committed memory 4,75 MBytes (67,26% of reserved) Uncommitted memory 2,31 MBytes (32,74% of reserved) Number of heap segments 4 segments Number of uncommitted ranges 1 range(s) Size of largest uncommitted range 2,31 MBytes Calculated heap fragmentation 0,00% Segment Information Base Address Reserved Size Committed Size Uncommitted Size Number of uncommitted ranges Largest uncommitted block Calculated heap fragmentation 0x00030640 64,00 KBytes 64,00 KBytes 0 Bytes 0 0 Bytes 0,00% 0x01c80000 1 024,00 KBytes 1 024,00 KBytes 0 Bytes 0 0 Bytes 0,00% 0x02c00000 2,00 MBytes 2,00 MBytes 0 Bytes 0 0 Bytes 0,00% 0x03510000 4,00 MBytes 1,69 MBytes 2,31 MBytes 1 2,31 MBytes 0,00% Top 5 allocations by size Allocation Size - 140 Allocation Size - 32 Allocation Size - 584 Allocation Size - 56 Allocation Size - 308 1,61 MBytes 253,09 KBytes 187,06 KBytes 125,89 KBytes 99,56 KBytes Top 5 allocations by count Allocation Size - 140 Allocation Size - 32 Allocation Size - 56 Allocation Size - 12 Allocation Size - 47 12064 allocation(s) 8099 allocation(s) 2302 allocation(s) 1757 allocation(s) 1756 allocation(s) Back to Top In w3wp__PID__3460__Date__02_20_2008__Time_04_56_39PM__556__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!ExpInterlockedPopEntrySListFault in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x64006f00 on thread 2 Heap corruption was detected in heap 0x00030000, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 Module Information Image Name: C:\WINDOWS\system32\ntdll.dll Symbol Type: PDB Base address: 0x7c800000 Time Stamp: Sat Feb 17 17:02:00 2007 Checksum: 0x000bd6f9 Comments: COM DLL: False Company Name: Microsoft Corporation ISAPIExtension: False File Description: NT Layer DLL ISAPIFilter: False File Version: 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) Managed DLL: False Internal Name: ntdll.dll VB DLL: False Legal Copyright: © Microsoft Corporation. All rights reserved. Loaded Image Name: ntdll.dll Legal Trademarks: Mapped Image Name: Original filename: ntdll.dll Module name: ntdll Private Build: Single Threaded: False Product Name: Microsoft® Windows® Operating System Module Size: 768,00 KBytes Product Version: 5.2.3790.3959 Symbol File Name: c:\symcache\ntdll.pdb\93E72E109DC84F16AA54797E4DA8C1682\ntdll.pdb Special Build: & Report for w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp Report for w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp Type of Analysis Performed Crash Analysis Machine Name INETVPNSERVER Operating System Windows Server 2003 Service Pack 2 Number Of Processors 8 Process ID 7844 Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe System Up-Time 59 day(s) 14:12:49 Process Up-Time 08:38:49 Thread 54 - System ID 1536 Entry point w3tp!THREAD_MANAGER::ThreadManagerThread Create time 18.02.2008 19:37:07 Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:2.515 Function Arg 1 Arg 2 Arg 3 Source ntdll!RtlAllocateHeap+579 00030000 00000000 00000084 msvcrt!malloc+6c 00000084 00000010 083bf910 php5ts!ts_resource_ex+103 056359ec 00000600 1093f9c8 php5ts!ts_resource_ex+c4 00000000 00000600 083bf910 php5isapi!HttpFilterProc+b 1093fa1c 00004000 083bf910 w3core!W3_MAIN_CONTEXT::NotifyFilters+e0 a1000001 5a3de000 145d8b53 0x28ec81ec 8bfc4589 8b571045 8589087d 0x0c758b56 8b571045 8589087d fffffed8 0x80000000`00000000 8589087d fffffed8 00008068 0x80000000`00000000 fffffed8 00008068 3c858d00 0x80000000`00000000 00008068 3c858d00 50ffffff 0x80000000`00000000 3c858d00 50ffffff ff0c8d8d NTDLL!RTLALLOCATEHEAP+579 Detailed Info For Corrupt Heap Heap 3 - 0x00030000 Heap Name msvcrt!_crtheap Heap Description This heap is used by msvcrt Reserved memory 63,06 MBytes Committed memory 39,68 MBytes (62,92% of reserved) Uncommitted memory 23,39 MBytes (37,08% of reserved) Number of heap segments 7 segments Number of uncommitted ranges 1 range(s) Size of largest uncommitted range 23,39 MBytes Calculated heap fragmentation 0,00% Segment Information Base Address Reserved Size Committed Size Uncommitted Size Number of uncommitted ranges Largest uncommitted block Calculated heap fragmentation 0x00030640 64,00 KBytes 64,00 KBytes 0 Bytes 0 0 Bytes 0,00% 0x01c80000 1 024,00 KBytes 1 024,00 KBytes 0 Bytes 0 0 Bytes 0,00% 0x02c00000 2,00 MBytes 2,00 MBytes 0 Bytes 0 0 Bytes 0,00% 0x03640000 4,00 MBytes 4,00 MBytes 0 Bytes 0 0 Bytes 0,00% 0x055a0000 8,00 MBytes 8,00 MBytes 0 Bytes 0 0 Bytes 0,00% 0x08680000 16,00 MBytes 16,00 MBytes 0 Bytes 0 0 Bytes 0,00% 0x0d430000 32,00 MBytes 8,61 MBytes 23,39 MBytes 1 23,39 MBytes 0,00% Top 5 allocations by size Allocation Size - 584 Allocation Size - 308 Allocation Size - 140 Allocation Size - 32 Allocation Size - 56 13,24 MBytes 7,60 MBytes 6,74 MBytes 1,08 MBytes 568,42 KBytes Top 5 allocations by count Allocation Size - 140 Allocation Size - 32 Allocation Size - 12 Allocation Size - 308 Allocation Size - 584 50503 allocation(s) 35387 allocation(s) 26779 allocation(s) 25874 allocation(s) 23765 allocation(s) Back to Top In w3wp__PID__7844__Date__02_18_2008__Time_07_48_46PM__213__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!RtlAllocateHeap+579 in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000000 on thread 54 Heap corruption was detected in heap 0x00030000, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 Module Information Image Name: C:\WINDOWS\system32\ntdll.dll Symbol Type: PDB Base address: 0x7c800000 Time Stamp: Sat Feb 17 17:02:00 2007 Checksum: 0x000bd6f9 Comments: COM DLL: False Company Name: Microsoft Corporation ISAPIExtension: False File Description: NT Layer DLL ISAPIFilter: False File Version: 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) Managed DLL: False Internal Name: ntdll.dll VB DLL: False Legal Copyright: © Microsoft Corporation. All rights reserved. Loaded Image Name: ntdll.dll Legal Trademarks: Mapped Image Name: Original filename: ntdll.dll Module name: ntdll Private Build: Single Threaded: False Product Name: Microsoft® Windows® Operating System Module Size: 768,00 KBytes Product Version: 5.2.3790.3959 Symbol File Name: c:\symcache\ntdll.pdb\93E72E109DC84F16AA54797E4DA8C1682\ntdll.pdb Special Build: & Report for w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp Report for w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp Type of Analysis Performed Crash Analysis Machine Name INETVPNSERVER Operating System Windows Server 2003 Service Pack 2 Number Of Processors 8 Process ID 4516 Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe System Up-Time 59 day(s) 15:52:24 Process Up-Time 01:38:30 Thread 10 - System ID 3228 Entry point w3tp!THREAD_MANAGER::ThreadManagerThread Create time 18.02.2008 19:49:57 Time spent in user mode 0 Days 0:0:0.281 Time spent in kernel mode 0 Days 0:0:0.171 Function Arg 1 Arg 2 Arg 3 Source ntdll!ExpInterlockedPopEntrySListFault 00030838 0124fed0 7c82a0b8 ntdll!RtlpAllocateFromHeapLookaside+13 00030838 0000003c 00000000 ntdll!RtlAllocateHeap+1dd 00030000 00000000 0000003c msvcrt!_heap_alloc+26 0000003c 00000000 00000000 msvcrt!operator new+24 0000003c 5a361d28 00000008 iisutil!IPM_MESSAGE_IMP::CreateMessage+1c 0124ff34 00039238 5a361d28 iisutil!IPM_MESSAGE_PIPE::WriteMessage+5e 00000002 00000000 00000000 w3dt!WP_IPM::HandlePing+59 00000000 00000000 00038bb8 w3tp!THREAD_POOL_DATA::ThreadPoolThread+73 00000000 00038b78 5a300000 w3tp!THREAD_POOL_DATA::ThreadPoolThread+24 00000102 00000000 00000000 w3tp!THREAD_MANAGER::ThreadManagerThread+39 00038b78 00000000 00000000 kernel32!BaseThreadStart+34 5a301d70 00038b78 00000000 NTDLL!EXPINTERLOCKEDPOPENTRYSLISTFAULT Detailed Info For Corrupt Heap Heap 3 - 0x00030000 Heap Name msvcrt!_crtheap Heap Description This heap is used by msvcrt Reserved memory 7,06 MBytes Committed memory 3,89 MBytes (55,14% of reserved) Uncommitted memory 3,17 MBytes (44,86% of reserved) Number of heap segments 4 segments Number of uncommitted ranges 1 range(s) Size of largest uncommitted range 3,17 MBytes Calculated heap fragmentation 0,00% Segment Information Base Address Reserved Size Committed Size Uncommitted Size Number of uncommitted ranges Largest uncommitted block Calculated heap fragmentation 0x00030640 64,00 KBytes 64,00 KBytes 0 Bytes 0 0 Bytes 0,00% 0x01c80000 1 024,00 KBytes 1 024,00 KBytes 0 Bytes 0 0 Bytes 0,00% 0x02c00000 2,00 MBytes 2,00 MBytes 0 Bytes 0 0 Bytes 0,00% 0x03920000 4,00 MBytes 852,00 KBytes 3,17 MBytes 1 3,17 MBytes 0,00% Top 5 allocations by size Allocation Size - 140 Allocation Size - 32 Allocation Size - 56 Allocation Size - 584 Allocation Size - 8192 1,32 MBytes 205,84 KBytes 101,12 KBytes 97,52 KBytes 80,00 KBytes Top 5 allocations by count Allocation Size - 140 Allocation Size - 32 Allocation Size - 56 Allocation Size - 12 Allocation Size - 47 9895 allocation(s) 6587 allocation(s) 1849 allocation(s) 1498 allocation(s) 1462 allocation(s) Back to Top In w3wp__PID__4516__Date__02_18_2008__Time_09_28_27PM__338__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!ExpInterlockedPopEntrySListFault in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x20657355 on thread 10 Heap corruption was detected in heap 0x00030000, however pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 Module Information Image Name: C:\WINDOWS\system32\ntdll.dll Symbol Type: PDB Base address: 0x7c800000 Time Stamp: Sat Feb 17 17:02:00 2007 Checksum: 0x000bd6f9 Comments: COM DLL: False Company Name: Microsoft Corporation ISAPIExtension: False File Description: NT Layer DLL ISAPIFilter: False File Version: 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) Managed DLL: False Internal Name: ntdll.dll VB DLL: False Legal Copyright: © Microsoft Corporation. All rights reserved. Loaded Image Name: ntdll.dll Legal Trademarks: Mapped Image Name: Original filename: ntdll.dll Module name: ntdll Private Build: Single Threaded: False Product Name: Microsoft® Windows® Operating System Module Size: 768,00 KBytes Product Version: 5.2.3790.3959 Symbol File Name: c:\symcache\ntdll.pdb\93E72E109DC84F16AA54797E4DA8C1682\ntdll.pdb Special Build: & Script Summary Script Name Status Error Code Error Source Error Description Source Line CrashHangAnalysis.asp Completed ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/43410 -- Edit this bug report at http://bugs.php.net/?id=43410&edit=1