Sysinternals Homepage
Forum Home Forum Home > Sysinternals Utilities > Process Explorer
  New Posts New Posts RSS Feed: Process Explorer craches very often
  FAQ FAQ  Forum Search   Calendar   Register Register  Login Login

Process Explorer craches very often
 Post Reply Post Reply Page  <1234>
Author
Message Reverse Sort Order
  Share Topic Share Topic  Topic Search Topic Search  Topic Options Topic Options
MagicAndre1981 View Drop Down
Newbie
Newbie
Avatar

Joined: 08 January 2007
Location: Germany
Online Status: Offline
Posts: 34 		Post Options Post Options   Quote MagicAndre1981 Quote  Post ReplyReply Direct Link To This Post Topic: Process Explorer craches very often
    Posted: 23 June 2008 at 4:57am
Yes I can run C code. I've compiled it with VS2008 and here are the values from the debugger:


&dwSize    0x0040f978    unsigned long * 812    unsigned long
UDP_TABLE_OWNER_MODULE    2    int
pTable    0x00000000    void *


André
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 23 June 2008 at 4:04am
Unfortunately, the crash dump with full page heap turned on does not provide additional details - the crash is still the same:
0a2ae5a4 75610e14 00000000 0a2ae60c 00000000 IPHLPAPI!GetUdpTableInternal+0x1ab
0a2ae5c0 7560b35e 00000000 0a2ae60c 00000000 IPHLPAPI!GetUdpTableWithOwnerModule+0x17
0a2ae5d4 00385289 00000000 0a2ae60c 00000000 IPHLPAPI!GetExtendedUdpTable+0x27
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 00000000 00000000 00000000 procexp+0x35289
 
That the crash happens in GetUdpTableInternal, two functions into a call to GetExtendedUdpTable, might seem to suggest some sort of problem with the implementation with GetExtendedUdpTable, GetUdpTableWithOwnerModule, or GetUdpTableInternal - calling GetExtendedUdpTable with incorrect parameters, for example (not saying that's what's going on) should not be able to cause a crash. Confused
 
Not that this exercise will prove anything, but...
Can you compile some C code and run it?  (If not, I can provide a binary if you're inclined to run it.)
Near as I can tell, it seems that Process Explorer is trying to determine the size of a buffer to allocate by passing NULL in for the pUdpTable param to GetExtendedUdpTable.
 
Basically, it looks like the following call is being made:
GetExtendedUdpTable( pTable, &dwSize, FALSE, AF_INET, UDP_TABLE_OWNER_MODULE, 0 );
 
A small program to exercise that code:
#include <tchar.h>
#include <windows.h>
#include <Iphlpapi.h>
int _tmain(int argc, _TCHAR* argv[])
{
 void* pTable = NULL;
 DWORD dwSize = 0;
 GetExtendedUdpTable( pTable, &dwSize, FALSE, AF_INET, UDP_TABLE_OWNER_MODULE, 0 );
 return 0;
}


Edited by molotov - 23 June 2008 at 4:05am
Daily affirmation:
net helpmsg 4006
Back to Top
MagicAndre1981 View Drop Down
Newbie
Newbie
Avatar

Joined: 08 January 2007
Location: Germany
Online Status: Offline
Posts: 34 		Post Options Post Options   Quote MagicAndre1981 Quote  Post ReplyReply Direct Link To This Post Posted: 23 June 2008 at 12:00am
Hello,

here is the dump:

http://sharebase.de/files/L9y27uzqDw.html

André
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 18 June 2008 at 3:46pm
Originally posted by molotov

You might consider trying the exercise detailed in several posts here, but where tcpview.exe is mentioned substitute procexp.exe.
 
Have a look at the referenced instructions.  Full page heap requires a debugger.  The final output will be a minidump.
Daily affirmation:
net helpmsg 4006
Back to Top
MagicAndre1981 View Drop Down
Newbie
Newbie
Avatar

Joined: 08 January 2007
Location: Germany
Online Status: Offline
Posts: 34 		Post Options Post Options   Quote MagicAndre1981 Quote  Post ReplyReply Direct Link To This Post Posted: 18 June 2008 at 5:33am
Here is the App Verifier log:

http://sharebase.de/files/3qSaE33qh2.html
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 18 June 2008 at 4:34am
Have you tried the previously suggested Application Verifier to see if there may be some form of heap corruption going on?
Daily affirmation:
net helpmsg 4006
Back to Top
MagicAndre1981 View Drop Down
Newbie
Newbie
Avatar

Joined: 08 January 2007
Location: Germany
Online Status: Offline
Posts: 34 		Post Options Post Options   Quote MagicAndre1981 Quote  Post ReplyReply Direct Link To This Post Posted: 18 June 2008 at 3:54am
yes, I have .net 3.5 Sp1 Beta installed because this fixes a stupid Threading bug which was introduced with .net 2.0 sp1 and which is only fixed within the Beta from .net 2.0 Sp2.

The error also happens when I use the v2.0.50727.1434 (.net 2.0 Sp1) of those assemblies.
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 18 June 2008 at 3:42am
VS2008 SP1 Beta, then?
 
An intersting thing about the dump is that symbols don't resolve for some .NET Framework 2.0 modules.  Anything special about the .NET version installed on the system?  (Not that it's related to the problem, but it's about the only odd thing I can see, so I figured I would ask.)
 
The modules and versions you have are:
CorperfmonExt v2.0.50727.3031
mscordbi v2.0.50727.3031
perfcounter v2.0.50727.3031
mscorwks v2.0.50727.3031
 
On my system, I'm running version v2.0.50727.1434 of those modules.  The references I'm finding for v2.0.50727.3031 modules suggest they may be a part of some beta / prerelease software.
Daily affirmation:
net helpmsg 4006
Back to Top
MagicAndre1981 View Drop Down
Newbie
Newbie
Avatar

Joined: 08 January 2007
Location: Germany
Online Status: Offline
Posts: 34 		Post Options Post Options   Quote MagicAndre1981 Quote  Post ReplyReply Direct Link To This Post Posted: 17 June 2008 at 10:48pm
no I don't have SQL Server 2008 installed.
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 16 June 2008 at 6:49pm
Thanks for going through the trouble of removing third-party DLLs.  Sorry to see that it does not seem to have helped...
 
Do you by any chance have any RC's of SQL Server 2008 installed on the system?
Daily affirmation:
net helpmsg 4006
Back to Top
 Post Reply Post Reply Page  <1234>

Forum Jump Forum Permissions View Drop Down