Hi,
I need some help with analysing a dump file from a DebugDiag, since I
do not know enough to do this myself yet.

Basic description:
In an ASP.NET application I have a page that simply loads a lot of
records into a dropdownlist when you click on the one button on the
page. This is all that happens on the page - I created it to reproduce
a similar problem in a much bigger system in our production
environment. It appears to crash when the page is reloaded (postback)
when I click on the button.
First indication of something wrong is that the page appears to freeze
for a few seconds (less than 10).
When I run the app from VS.NET IDE, I then get a Microsoft Development
Environment messagebox with the message "An unhandled exception of type
'System.StackOverflowException' occurred in mscorlib.dll", with Break
and Continue buttons.
Either way, I then get presented with the "connect to ..." inputbox
where I get prompted for my username and password.
Whatever I do then, the browser ends up displaying a "You are not
authorised to view this page" message =3D> HTTP Error 401.1 -
Unauthorized: Access is denied due to invalid credentials. Internet
Information Services (IIS)



Environment:
Windows Server 2003
Visual Studio .NET 2003
Debug Diagnostics Tool v1.0
Windows 2000 domain with Active Directory.

Steps:
I created a Crash rule for all IIS related processes, opened the
problematic page, and went through the process described above to get
the page to crash.
I have also set the rule to capture First Change exceptions.
So I got three dmp files, and the Analysed result is shown below:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D

Analysis Summary
Type Description Recommendation
Error In
w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance
exception 0XC00000FD.dmp the assembly instruction at
mscorwks!FieldDesc::GetAddress+1b in
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll from
Microsoft Corporation has caused a stack overflow exception
(0xC00000FD) when trying to write to memory location 0x01822ffc on
thread 16
Please follow up with the vendor Microsoft Corporation for
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll

Error In
w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First chance
exception 0XE0434F4D.dmp the assembly instruction at
kernel32!RaiseException+51 in C:\WINDOWS\system32\kernel32.dll from
Microsoft Corporation has caused an unknown exception (0xe0434f4d) on
thread 16



This exception originated from mscorwks!RaiseTheException+a0. Review
the faulting call stack for thread 16 to determine root cause for the
exception.





Please follow up with vendor Microsoft Corporation for problem
resolution concerning the following file:
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll.
Error In
inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First
chance exception 0X800706BF.dmp the assembly instruction at
kernel32!RaiseException+51 in C:\WINDOWS\system32\kernel32.dll from
Microsoft Corporation has caused an unknown exception (0x800706bf) on
thread 4



This exception originated from rpcrt4!RpcpRaiseException+1d. Review
the faulting call stack for thread 4 to determine root cause for the
exception.





Please follow up with vendor Microsoft Corporation for problem
resolution concerning the following file:
C:\WINDOWS\system32\rpcrt4.dll.
Information DebugDiag determined that this dump file
(w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First chance
exception 0XE0434F4D.dmp) is a crash dump and did not perform any hang
analysis. If you wish to enable combined crash and hang analysis for
crash dumps, edit the IISAnalysis.asp script (located in the
DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to
True.
Information DebugDiag determined that this dump file
(w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance
exception 0XC00000FD.dmp) is a crash dump and did not perform any hang
analysis. If you wish to enable combined crash and hang analysis for
crash dumps, edit the IISAnalysis.asp script (located in the
DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to
True.
Information DebugDiag determined that this dump file
(inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First
chance exception 0X800706BF.dmp) is a crash dump and did not perform
any hang analysis. If you wish to enable combined crash and hang
analysis for crash dumps, edit the IISAnalysis.asp script (located in
the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant
to True.





Analysis Details
Table Of Contents
inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First
chance exception 0X800706BF.dmp

Faulting Thread

Faulting Module Information



w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First chance
exception 0XE0434F4D.dmp

Faulting Thread

Faulting Module Information



w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance
exception 0XC00000FD.dmp

Faulting Thread

Faulting Module Information




Report for
inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First
chance exception 0X800706BF.dmp
Type of Analysis Performed Crash Analysis
Machine Name TASC0716
Operating System Windows Server 2003
Number Of Processors 1
Process ID 552
Process Image C:\WINDOWS\system32\inetsrv\inetinfo.exe
System Up-Time 0 day(s) 01:34:03
Process Up-Time 0 day(s) 00:27:53


Thread 4 - System ID 568
Entry point ntdll!RtlpWorkerThread
Create time 26/07/2006 5:02:08 PM
Time spent in user mode 0 Days 0:0:0.0
Time spent in kernel mode 0 Days 0:0:0.31






Function Arg 1 Arg 2 Arg 3 Source
kernel32!RaiseException+51 800706bf 00000001 00000000
rpcrt4!RpcpRaiseException+1d 800706bf 00135a54 00a7fb60
rpcrt4!NdrProxySendReceive+5e 00135a54 800706bf 06000169

rpcrt4!NdrClientCall2+1bc 7716b2d8 771a2af0 00a7fb98
rpcrt4!ObjectStublessClient+89 00000010 00000005 00a7fba8

rpcrt4!ObjectStubless+f 00135a54 00000002 00121610
ole32!RemoteReleaseRifRefHelper+82 00135a54 000d9028
00000002
ole32!RemoteReleaseRifRef+72 00135a54 000d9028 00000002
ole32!CStdMarshal::DisconnectCliIPIDs+23f 001322f4 001322f0
00000000
ole32!CStdMarshal::Disconnect+191 00000002 00132398
001322f0
ole32!CStdIdentity::~CStdIdentity+87 001322f0 7718a021
00000001
ole32!CStdIdentity::`vector deleting destructor'+8 00000001
ffffffff 0008b8f8
ole32!CStdIdentity::CInternalUnk::Release+69 80000000 771a659d
00132394
ole32!ReleaseCallback+a 00132394 ffffffff 0008f1cc
ole32!PerformCallback+15 0008b8f8 771a6505 00132394
ole32!CObjectContext::InternalContextCallback+140 0008b8f8
771a6505 00132394
ole32!CGIPTable::RevokeInterfaceFromGlobal+293 77272618
00000401 00000000
ole32!CGIPTable::RevokeInterfaceFromGlobal+109 77272618
00000401 00000001
coadmin!COConnectionPoint::Terminate+42 00bdcf8c 00000000
00bdcf10
coadmin!CADMCOMW::Terminate+35 00bdcf10 6e0b61b6 00bdcf10

coadmin!CADMCOMW::~CADMCOMW+e 00bdcf10 00bdcf10 6e0b9517

coadmin!CADMCOMW::Release+49 00bdcf10 00000001 00bdcf68
coadmin!CADMCOMW::RemoveObjectFromList+62 00000000 771cfdc9
00bdcf10
coadmin!CADMCOMW::Release+38 00bdcf10 00a7fed4 00000000
coadmin!CADMCOMW::DisconnectOrphaned+51 6e0b608b 77f5da92
00bdcf10
coadmin!CADMCOMW::CallerWatchWaitOrTimerCallback+4e 00bdcf10
00136e00 00136ed8
ntdll!RtlpWaitOrTimerCallout+74 6e0b608b 00bdcf10 00136e00

ntdll!RtlpAsyncWaitCallbackCompletion+23 00136ed8 77fc3040
000de210
ntdll!RtlpWorkerCallout+71 77f5e9f9 00136ed8 00000000
ntdll!RtlpExecuteWorkerRequest+3d 00000000 00136ed8
000de210
ntdll!RtlpApcCallout+10 77f5dcba 00000000 00136ed8
ntdll!RtlpWorkerThread+5f 00000000 00000000 00000000
kernel32!BaseThreadStart+34 77f7e673 00000000 00000000




In inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First
chance exception 0X800706BF.dmp the assembly instruction at
kernel32!RaiseException+51 in C:\WINDOWS\system32\kernel32.dll from
Microsoft Corporation has caused an unknown exception (0x800706bf) on
thread 4



This exception originated from rpcrt4!RpcpRaiseException+1d. Module
Information
Image Name: C:\WINDOWS\system32\kernel32.dll Symbol Type: PDB
Base address: 0x77e40000 Time Stamp: Tue Mar 25 11:42:44 2003
Checksum: 0x000f488c Comments:
COM DLL: False Company Name: Microsoft Corporation
ISAPIExtension: False File Description: Windows NT BASE API Client
DLL
ISAPIFilter: False File Version: 5.2.3790.0 (srv03_rtm.030324-2048)
Managed DLL: False Internal Name: kernel32
VB DLL: False Legal Copyright: =A9 Microsoft Corporation. All rights
reserved.
Loaded Image Name: kernel32.dll Legal Trademarks:
Mapped Image Name: Original filename: kernel32
Module name: kernel32 Private Build:
Single Threaded: False Product Name: Microsoft=AE Windows=AE
Operating System
Module Size: 976.00 KBytes Product Version: 5.2.3790.0
Symbol File Name: c:\symcache\kernel32.pdb\3E8016FF2\kernel32.pdb
Special Build: &





Report for
w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First chance
exception 0XE0434F4D.dmp
Type of Analysis Performed Crash Analysis
Machine Name TASC0716
Operating System Windows Server 2003
Number Of Processors 1
Process ID 1832
Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe
System Up-Time 0 day(s) 01:33:36
Process Up-Time 0 day(s) 00:00:54


Thread 16 - System ID 3992
Entry point mscorwks!ThreadpoolMgr::WorkerThreadStart
Create time 26/07/2006 5:28:38 PM
Time spent in user mode 0 Days 0:0:0.921
Time spent in kernel mode 0 Days 0:0:0.203






Function Arg 1 Arg 2 Arg 3 Source
kernel32!RaiseException+51 e0434f4d 00000001 00000000
mscorwks!RaiseTheException+a0 062c321c 00000000 062c321c

mscorwks!JIT_Throw+4d 060414c4 06041284 060414c4
mscorlib_79980000+b99b 00000001 060414c4 062c2c98
809b8aa 0185f920 060414c4 060414c4
809b811 00000005 00530062 00760061




In w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First
chance exception 0XE0434F4D.dmp the assembly instruction at
kernel32!RaiseException+51 in C:\WINDOWS\system32\kernel32.dll from
Microsoft Corporation has caused an unknown exception (0xe0434f4d) on
thread 16



This exception originated from mscorwks!RaiseTheException+a0. Module
Information
Image Name: C:\WINDOWS\system32\kernel32.dll Symbol Type: PDB
Base address: 0x77e40000 Time Stamp: Tue Mar 25 11:42:44 2003
Checksum: 0x000f488c Comments:
COM DLL: False Company Name: Microsoft Corporation
ISAPIExtension: False File Description: Windows NT BASE API Client
DLL
ISAPIFilter: False File Version: 5.2.3790.0 (srv03_rtm.030324-2048)
Managed DLL: False Internal Name: kernel32
VB DLL: False Legal Copyright: =A9 Microsoft Corporation. All rights
reserved.
Loaded Image Name: kernel32.dll Legal Trademarks:
Mapped Image Name: Original filename: kernel32
Module name: kernel32 Private Build:
Single Threaded: False Product Name: Microsoft=AE Windows=AE
Operating System
Module Size: 976.00 KBytes Product Version: 5.2.3790.0
Symbol File Name: c:\symcache\kernel32.pdb\3E8016FF2\kernel32.pdb
Special Build: &





Report for
w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance
exception 0XC00000FD.dmp
Type of Analysis Performed Crash Analysis
Machine Name TASC0716
Operating System Windows Server 2003
Number Of Processors 1
Process ID 1832
Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe
System Up-Time 0 day(s) 01:33:58
Process Up-Time 0 day(s) 00:01:17


Thread 16 - System ID 3992
Entry point mscorwks!ThreadpoolMgr::WorkerThreadStart
Create time 26/07/2006 5:28:38 PM
Time spent in user mode 0 Days 0:0:17.46
Time spent in kernel mode 0 Days 0:0:0.984






Function Arg 1 Arg 2 Arg 3 Source
mscorwks!FieldDesc::GetAddress+1b 094aa1ec 094aa1ec
79b8067c
mscorwks!FieldDesc::GetInstanceField+3f 094aa1ec 01823060
087b2053
mscorwks!FieldDesc::GetRefValue+2b 094aa1ec 0185fbec
018230c0
mscorwks!COMDelegate::GetMethodDesc+3a 018230c0 79210d25
79210d2f
mscorwks!COMDelegate::InternalFindMethodInfo+11 018230a4
094aa1ec 000c0000
1ca630e 0632371c 0601a7e4 0601a7e4
88c2444 0632371c 0601a7e4 0601a7e4
88c2197 0632371c 0601a7e4 05fade78
88a4d9f 0632371c 0632371c 05fae62c
849afaf 05fc1344 0849a9f4 060a25dc
849aa1b 0185faa4 060a25dc 05fd1188
7ff9a73 0185fb20 060a25dc 05fd1188
7ff994b 05f62290 060a26f8 01b82f75
1b86358 01b82f10 0185fca4 000f8ab0
mscorwks!ComCallMLStubCache::CompileMLStub+1af 0185fc50
791b3ce4 0185fcc8
mscorwks!Thread::DoADCallBack+5c 000f8ab0 792fd84c 0185fc50

mscorwks!ComCallMLStubCache::CompileMLStub+2c2 000d82b8
0185fcc8 0185ff58
18ea0bd 000a25e0 000a25e0 0185fd90
mscorwks!EEHashTable<void *,EEPtrHashTableHelper<void
*,0>,0>::FindItem+e 000a25e0 0185fdb0 7929817e
mscorwks!EEHashTable<void *,EEPtrHashTableHelper<void
*,0>,0>::GetValue+b 000a25e0 0185fdac 000d82b8
mscorwks!Thread::SetStaticData+5c 000a25e0 00000000
79298299
mscorwks!Thread::SafeSetStaticData+63 56533357 2f312f43
746f6f52
2f4d4c2f 00000000 00000000 00000000




MSCORWKS!FIELDDESC::GETADDRESS+1BIn
w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance
exception 0XC00000FD.dmp the assembly instruction at
mscorwks!FieldDesc::GetAddress+1b in
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll from