Pat
Wed Nov 26 20:48:35 CST 2003
Well...
The symbols are right, so the functions are right. I think that this is
stack corruption, but in a consistent way. This type of problem is pretty
tough to debug (and is out of the scope of IISState).
I would recommend that you download the debugger pack
(www.microsoft.com/ddk/debugging) and run AD+ to get a full dump of the
crash. I would also recommend that you contact MS-Support and have them
review the dump file and see if they can tell you which DLL is at fault.
In the meantime, have you installed any ISAPI filters? If so, could you
disable them and see if the problem goes away?
Pat
"Mitchell" <anonymous@discussions.microsoft.com> wrote in message
news:5141FF5F-8151-4F42-9B2D-0822A05E44D1@microsoft.com...
> The problem just happened again. Here is a second log.
>
> Opened log file 'C:\iisstate\output\IISState-3472.log'
> ***********************
> Starting new log output
> IISState version 3.2
>
> Wed Nov 26 21:07:12 2003
>
> OS = Windows 2000
> Executable: inetinfo.exe
> PID = 3472
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
> IIS has crashed...
> Beginning Analysis
> DLL (!FunctionName) that failed: ntdll!RtlGetFullPathName_Ustr
>
>
>
>
> Thread ID: 18
> System Thread ID: d28
> Kernel Time: 0:0:0.110
> User Time: 0:0:0.30
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0132ecc0 77f8b0c0 ntdll!RtlGetFullPathName_Ustr+0x6f8
> 01 0132ef70 0018003f ntdll!RtlDosPathNameToNtPathName_U+0x103
> WARNING: Frame IP not in any known module. Following frames may be wrong.
> 02 003f003f 00000000 0x18003f
> Closing open log file C:\iisstate\output\IISState-3472.log
> Opened log file 'C:\iisstate\output\IISState-3472.log'
>
> ***********************
> Starting new log output
> IISState version 3.2
>
> Wed Nov 26 21:07:12 2003
>
> OS = Windows 2000
> Executable: inetinfo.exe
> PID = 3472
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: d38
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006f89c 77e87f07 ntdll!ZwReadFile+0xb
> 01 0006f910 77db2252 KERNEL32!ReadFile+0x181
> 02 0006f93c 77db20f2 ADVAPI32!ScGetPipeInput+0x28
> 03 0006f9b8 77db27a0 ADVAPI32!ScDispatcherLoop+0x4a
> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
> 06 0006ff70 01002fbf inetinfo!main+0x654
> 07 0006ffc0 77e9ca90 inetinfo!mainCRTStartup+0xff
> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: d6c
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.20
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0049fd1c 77e8780f ntdll!NtWaitForSingleObject+0xb
> 01 0049fd44 77e87837 KERNEL32!WaitForSingleObjectEx+0x71
> 02 0049fd54 6e6f1fe8 KERNEL32!WaitForSingleObject+0xf
> 03 0049fd70 01002440 iisadmin!ServiceEntry+0x156
> 04 0049ffa4 77db243e inetinfo!InetinfoStartService+0x2bd
> 05 0049ffb4 77e887dd ADVAPI32!ScSvcctrlThreadW+0xe
> 06 0049ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: d78
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.10
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0059fe60 77e87ab7 ntdll!NtWaitForMultipleObjects+0xb
> 01 0059feb0 77e1e93b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0059ff0c 77e1e988 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0059ff28 6e5a2399 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0059ff80 780060ce IisRTL!SchedulerWorkerThread+0xa7
> 05 0059ffb4 77e887dd MSVCRT!_beginthreadex+0xca
> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: d64
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.20
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 009ffe24 77d57494 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 009fff74 77d56d5e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 009fff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 009fffa8 77d41c6d RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 009fffb4 77e887dd RPCRT4!ThreadStartRoutine+0x18
> 05 009fffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: 220
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 014cff5c 77e87617 ntdll!NtDelayExecution+0xb
> 01 014cff7c 77e875eb KERNEL32!SleepEx+0x32
> 02 014cff88 77ab862f KERNEL32!Sleep+0xb
> 03 014cff90 77ab4710 ole32!CROIDTable::WorkerThreadLoop+0xc
> 04 014cffa8 77ab4668 ole32!CRpcThread::WorkerLoop+0x22
> 05 014cffb4 77e887dd ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 014cffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: b6c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00a7fe24 77d57494 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 00a7ff74 77d56d5e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00a7ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00a7ffa8 77d41c6d RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00a7ffb4 77e887dd RPCRT4!ThreadStartRoutine+0x18
> 05 00a7ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 6
> System Thread ID: 60c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.20
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00ccfe24 77d57494 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 00ccff74 77d56d5e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00ccff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00ccffa8 77d41c6d RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00ccffb4 77e887dd RPCRT4!ThreadStartRoutine+0x18
> 05 00ccffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: ce8
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.50
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00d0fe24 77d57494 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 00d0ff74 77d56d5e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00d0ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00d0ffa8 77d41c6d RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00d0ffb4 77e887dd RPCRT4!ThreadStartRoutine+0x18
> 05 00d0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 8
> System Thread ID: 65c
> Kernel Time: 0:0:0.30
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00d4fc1c 77e87ab7 ntdll!NtWaitForMultipleObjects+0xb
> 01 00d4fc6c 77e1e93b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00d4fcc8 77e1e988 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00d4fce4 769c7673 USER32!MsgWaitForMultipleObjects+0x1d
> 04 00d4fd30 65f2ec42 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
> 05 00d4fd70 01002440 w3svc!ServiceEntry+0x1a7
> 06 00d4ffa4 77db243e inetinfo!InetinfoStartService+0x2bd
> 07 00d4ffb4 77e887dd ADVAPI32!ScSvcctrlThreadW+0xe
> 08 00d4ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: da4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00d8ff50 77e8792e ntdll!NtRemoveIoCompletion+0xb
> 01 00d8ff7c 6d7021b4 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00d8ffb4 77e887dd ISATQ!AtqPoolThread+0x40
> 03 00d8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 10
> System Thread ID: cf4
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00f4fe24 77d57494 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 00f4ff74 77d56d5e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00f4ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00f4ffa8 77d41c6d RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00f4ffb4 77e887dd RPCRT4!ThreadStartRoutine+0x18
> 05 00f4ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 11
> System Thread ID: a74
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0114feb8 77e8792e ntdll!NtRemoveIoCompletion+0xb
> 01 0114fee4 77d80976 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0114ff20 77d50e9e RPCRT4!COMMON_ProcessCalls+0x9e
> 03 0114ff74 77d50cd7 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
> 04 0114ff78 77d39a00 RPCRT4!ProcessIOEventsWrapper+0x9
> 05 0114ffa8 77d41c6d RPCRT4!BaseCachedThreadRoutine+0x4f
> 06 0114ffb4 77e887dd RPCRT4!ThreadStartRoutine+0x18
> 07 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 12
> System Thread ID: 210
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0118fd20 77e87ab7 ntdll!NtWaitForMultipleObjects+0xb
> 01 0118fd70 77e8a31d KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0118fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
> 03 0118ffb4 77e887dd RTUTILS!TraceServerThread+0xde
> 04 0118ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 13
> System Thread ID: c90
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 011dff5c 77e8780f ntdll!NtWaitForSingleObject+0xb
> 01 011dff84 77e87837 KERNEL32!WaitForSingleObjectEx+0x71
> 02 011dff94 732c3366 KERNEL32!WaitForSingleObject+0xf
> 03 011dffb4 77e887dd compfilt!CompressionThread+0x29
> 04 011dffc0 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 14
> System Thread ID: 758
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.10
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0122fe74 77e87ab7 ntdll!NtWaitForMultipleObjects+0xb
> 01 0122fec4 77e1e93b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0122ff20 77e1e988 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0122ff3c 65f38404 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0122ff80 7800c9eb w3svc!CMTACallbackThread::Thread+0x34
> 05 0122ffb4 77e887dd MSVCRT!_beginthread+0xce
> 06 0122ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 15
> System Thread ID: c50
> Kernel Time: 0
>