Posted: 25 August 2008 at 9:06pm | IP Logged

We have recently changed our version of ISAPI Rewrite from v2.3.0.35 to v2.5.1.41 and have had quite a few occurences of the w3wp.exe process crash under Windows 2003/IIS6.

We attached a debugger to the w3wp.exe process on a couple of servers and managed to catch the crash and generate DMP files.

The ERROR_CODE,
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

The BUCKET_ID's,
APPLICATION_FAULT_STRING_DEREFERENCE_NULL_INSTRUCTION_PTR_BAD_IP_ntdll!RtlImageNtHeaderEx+ee

and...

APPLICATION_FAULT_INVALID_POINTER_READ_NULL_INSTRUCTION_PTR_BAD_IP_w3isapi!ProcessIsapiRequest+214

The STACK,
2f3ae4c0 033a254e 0x33a2008
2f3af594 77395fd2 0x33a254e
2f3af598 77395f9e user32!UserCallDlgProcCheckWow+0x180
2f3af5c8 033bf008 user32!UserCallDlgProcCheckWow+0x163
2f3af60c 77395ed0 0x33bf008
2f3af6a0 033c30fa user32!DefDlgProcWorker+0x6cd
2f3bf6d0 7739b6e3 0x33c30fa
2f3bf6fc 77395f82 user32!InternalCallWinProc+0x28
2f3bf778 77395e22 user32!UserCallDlgProcCheckWow+0x147
2f3bf7c0 7738aaa4 user32!DefDlgProcWorker+0xa8
2f3bf7f0 77388c01 user32!SendMessageWorker+0x43e
2f3bf8a8 7738964b user32!InternalCreateDialog+0x9cf
2f3bf8dc 773896a0 user32!InternalDialogBox+0xa9
2f3bf8fc 773ca18d user32!DialogBoxIndirectParamAorW+0x37
2f3bf91c 033c3632 user32!DialogBoxIndirectParamA+0x1b
2f3bfefc 03198279 0x33c3632
2f3bff78 0319b8ce rwhelper!GetExtensionVersion+0x4c89
00000000 00000000 rwhelper!HttpExtensionProc+0x360e

We don't have the debug symbols files for ISAPI Rewrite but are more than happy to provide our DMP files to Helicon support staff to analyse if required.

Its the only thing to significantly change on the servers recently and we are interested to know if anyone else is having similar issues?

Matt D

Posted: 27 August 2008 at 3:28pm | IP Logged

The dump files we have collated so far come to 1.14GB uncompressed, even compressed they will still be too large to send out of email system. Are you able to provide an FTP location we can upload to? Thanks...Matt D

Posted: 03 September 2008 at 3:38pm | IP Logged

Heres the stack trace of another one from last night

0:009> ~9s; .ecxr ; kb
eax=00000000 ebx=80070000 ecx=c0000005 edx=00000000 esi=000007f8 edi=00000000
eip=7c8285ec esp=01039780 ebp=010397f0 iopl=0         nv up ei ng nz ac pe cy
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00200297
ntdll!KiFastSystemCallRet:
7c8285ec c3              ret
eax=46187018 ebx=40e419c8 ecx=00000000 edx=053476ad esi=05345650 edi=46187018
eip=05302220 esp=0103f3fc ebp=0103f418 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00210206
05302220 8b10            mov     edx,dword ptr [eax]  ds:0023:46187018=????????
  *** Stack trace for last set context - .thread/.cxr resets it
ChildEBP RetAddr  Args to Child             
WARNING: Frame IP not in any known module. Following frames may be wrong.
0103f418 05302566 05315db6 0104f668 05340d60 0x5302220
0103f434 05322d92 05340d60 27d2dad2 0103f5c8 0x5302566
0103f5c0 05323117 0104f688 05323175 0104f5e4 0x5322d92
0104f5f0 7739b6e3 531100e2 00000110 4e7a00f8 0x5323117
0104f61c 77395f82 05323574 531100e2 00000110 user32!InternalCallWinProc+0x28
0104f698 77395e22 00000000 05323574 531100e2 user32!UserCallDlgProcCheckWow+0x147
0104f6e0 7738aaa4 00000000 00000110 4e7a00f8 user32!DefDlgProcWorker+0xa8
0104f710 77388c01 00465f40 004645a8 4e7a00f8 user32!SendMessageWorker+0x43e
0104f7c8 7738964b 00000000 00465f40 00000000 user32!InternalCreateDialog+0x9cf
0104f7fc 773896a0 00000000 05322514 00000000 user32!InternalDialogBox+0xa9
0104f81c 773ca18d 00000000 05322514 00000000 user32!DialogBoxIndirectParamAorW+0x37
0104f83c 05323632 00000000 05322514 00000000 user32!DialogBoxIndirectParamA+0x1b
0104fe04 5a322991 01065708 01064448 01065098 0x5323632
0104fe24 5a3968ff 01065678 051082c0 0104fe50 w3isapi!ProcessIsapiRequest+0x214
0104fe58 5a3967e0 00000000 00000000 01064448 w3core!W3_ISAPI_HANDLER::IsapiDoWork+0x3fd
0104fe78 5a396764 0104fee8 01064448 00000000 w3core!W3_ISAPI_HANDLER::DoWork+0xb0
0104fe98 5a3966f4 01064448 00000000 0104fec4 w3core!W3_HANDLER::MainDoWork+0x16e
0104fea8 5a3966ae 01064450 01064448 00000001 w3core!W3_CONTEXT::ExecuteCurrentHandler+0x53
0104fec4 5a396648 00000001 0104fee8 0026bd98 w3core!W3_CONTEXT::ExecuteHandler+0x51
0104feec 5a392264 00000000 00000000 00000000 w3core!W3_STATE_HANDLE_REQUEST::DoWork+0x9a