server crash when processing certain Id files

Technote (troubleshooting)


Problem

############################################################
### FATAL THREAD 24/55 [ nserver:  081c:  0810]
### FP=0x0fbdf664, PC=0x6045cd1e, SP=0x0fbdf61c
### stkbase=0fbe0000, total stksize=262144, used stksize=2532
### EAX=0x00000000, EBX=0x00000000, ECX=0x0267ffff, EDX=0x03fb410c
### ESI=0x27af000c, EDI=0x27af000c, CS=0x00000023, SS=0x0000002b
### DS=0x0000002b, ES=0x0000002b, FS=0x00000053, GS=0x0000002b
Flags=0x00010202
Exception code: c0000005 (ACCESS_VIOLATION)
############################################################
@[ 1] 0x6045cd1e nnotes.GraphElement+1166 (27af000c,0,0,419edbc)
@[ 2] 0x6045cf1d nnotes.SecBuildVEGraph@12+253 (419edbc,0,fbdf6cc)
@[ 3] 0x603f0a8b nnotes.SECKFMMergeIDFilesExt@24+187
(0,235806c8,419edbc,60d1d950,0,0)
@[ 4] 0x60d3beca nnotes.MergeFileImages@4+458 (24d95538)
@[ 5] 0x60d3ca1a nnotes.IDVServerDialogSync@24+1306
(24d969e2,24d969cc,1,24d90707,0,0)
@[ 6] 0x60d1b302 nnotes.Dispatch@24+274 (1,fbdfa54,fbdfa74,fbdfbe0,0,0)
@[ 7] 0x60d1dbb7 nnotes.IDVServerDialog@16+359
(24d94d80,1,84d00005,fbdfbe0)
@[ 8] 0x60d22709 nnotes.AuthServerDialog@12+89 (fbdfb50,1,24d90000)
@[ 9] 0x60104496 nnotes.AuthStateMachine@4+342 (fbdfb50)
@[10] 0x60cff367 nnotes.AUTHProcessNetbfr@16+199
(84d00005,10025f50,fbdfe28,fbdfbe0)
@[11] 0x100218ba nserverl.DbServer@8+1226 (84b2007b,9968000a)
@[12] 0x100373d7 nserverl.WorkThreadTask@8+1655 (c855058,0)
@[13] 0x10001a2e nserverl.Scheduler@4+750 (0)
@[14] 0x6015584f nnotes.ThreadWrapper@4+175 (0)
[15] 0x757eeccb kernel32.BaseThreadInitThunk+14 (0)
[16] 0x76f3d24d ntdll.RtlCreateUserProcess+140 (601557a0)
[17] 0x76f3d45f ntdll.RtlCreateProcessParameters+78

* ID Vault db called out:

**  VThread [ nserver:  07c4:  00e7]
.Mapped To: PThread [ nserver:  07c4:  01c4]
.Description:
..     using: Primal Thread [ nserver:  07c4:  0023]
..      SOBJ: addr=0x26910464, h=0xf0102bfe t=0xc30a (BLK_LOOKUP_THREAD)
..      SOBJ: addr=0x261c0468, h=0xf0102c0a t=0xcf02 (BLK_FT_STATIC)
..      SOBJ: addr=0x260a0710, h=0xf0102bff t=0xc130 (BLK_TLA)
..      SOBJ: addr=0x26010418, h=0xf0102c03 t=0xc275 (BLK_NSFT)
..  Database: C:\Program
Files\IBM\Lotus\Domino\data\IBM_ID_VAULT\UPMVault.nsf
....       DBH:    801, By: CN=domino1/O=AAI, WasAccessed=Yes

have also seen this type of crash


############################################################
### thread 47/71: [ nserver:  08d4:  0e58] FATAL THREAD
### FP=0x18d35a98, PC=0x77746d5a, SP=0x18d35a98
### stkbase=0x18d40000, total stksize=4194304, used stksize=42344
### EAX=0x0000da68, EBX=0x00000b14, ECX=0x18d34ae8,
EDX=0xFFFFFFFF18BB520
### ESI=0x00000000, EDI=0x00000000, CS=0x00000033, SS=0xFFFFFFF0000002B
### DS=0x00000000, ES=0x00000000, FS=0x00000000, GS=0xFFFFFFF00000000
Flags=0x00000287
############################################################
[ 1] 0x77746d5a ntdll.ZwWaitForSingleObject+10
(4,18d3ae8a,258,18d3ae60)
[ 2] 0x775fc0b0 kernel32.WaitForSingleObjectEx+160 (b14,5,0,b14)
@[ 3] 0x00829987 nnotes.FRSendCommandToService+1931
(18d3b120,18d3b438,0,826284)
@[ 4] 0x0082d190 nnotes.OSRunExternalScript+5824 (4,5,2800124,1)
@[ 5] 0x008270b1 nnotes.FRTerminateWindowsResources+2277
(723322c,7f4c22,532373800000000,5372D3934334239)
@[ 6] 0x0082fe36 nnotes.OSFaultCleanupExt+622 (0,82644b,150014,2803c20)
@[ 7] 0x00830849 nnotes.OSFaultCleanup+29 (2,19489f1,1,1948c82)
@[ 8] 0x00848ee5 nnotes.OSNTUnhandledExceptionFilter+677
(18d3dc90,77809014,30,f01029a3)
[ 9] 0x7768c9cf kernel32.UnhandledExceptionFilter+351
(18d3dc90,28e63d60,0,1)
[10] 0x77778120 ntdll.RtlCharToInteger+224 (2911,7d1296,2c0f,7f2d1c)
[11] 0x777395a4 ntdll.__C_specific_handler+140
(18d3ff90,18d3ff90,18d40000,77726a51)
[12] 0x77735b4d ntdll.RtlIntegerToChar+1341 (1,0,18d3ff90,18d40000)
[13] 0x77739947 ntdll.__C_specific_handler+1071 (18d3e870,0,0,77700000)
[14] 0x77746c78 ntdll.KiUserExceptionDispatcher+46
(18d3ea04,7f2d1c,0,7f2d1c)
@[15] 0x00d4608a nnotes.GraphElement+646 (0,0,0,24aace1)
@[16] 0x00d45cbd nnotes.SecBuildVEGraph+309
(5f4,6520000,5086d7e8,508b62a0)
@[17] 0x00c54caa nnotes.SECKFMMergeIDFilesExt+210
(0,4379dac,18d3ee40,777288ca)
@[18] 0x024a7ae1 nnotes.MergeFileImages+685 (18d3f060,1880027,0,20)
@[19] 0x024a7038 nnotes.IDVServerDialogSync+3504
(508b61e8,48400020,18d3f9e0,2429c70)
@[20] 0x024680d6 nnotes.Dispatch+574 (0,ce1b3f,7b2e520,7f3851)
@[21] 0x02467be9 nnotes.IDVServerDialog+921
(c82dd5c,25d5159,ddc80001,7f3851)
@[22] 0x02472a86 nnotes.AuthServerDialog+4730
(18d3f8f0,18d3f89c,18d3f9e0,1c482af)
@[23] 0x0246353e nnotes.AuthStateMachine+418
(18d3f8f0,ddc80001,0,1c47110)
@[24] 0x02428f4a nnotes.AUTHProcessNetbfr+318
(ddc80001,ddc80001,18d3fb50,7f3dd2)
@[25] 0x10042aae nserverl.DbServer+2986 (44290032,81c00001,18d3fcfc,50)
@[26] 0x10062c3c nserverl.WorkThreadTask+2356 (38b9002c,0,0,6)
@[27] 0x10001b21 nserverl.Scheduler+969 (0,0,0,0)
@[28] 0x007cfde2 nnotes.ThreadWrapper+330 (0,0,0,0)
[29] 0x775ebe3d kernel32.BaseThreadInitThunk+13 (0,0,0,0)
[30] 0x77726a51 ntdll.RtlUserThreadStart+33 (0,0,0,0)


Symptom

server crashes

Cause

Code review for the crash stack revealed a lack of defense code for some
errors in GraphElement; for example, if an element is not found, we keep
going forward accessing a NULL pointer.

Resolving the problem

fixed in 8.5.2fp2 & 8.5.3

Fixed a rare Domino server crash within ID Vault that would occur processing certain ID files.
SPR # OFFI87MLYP


Rate this page:

(0 users)Average rating

Document information


More support for:

IBM Domino
Crash

Software version:

8.5, 8.5.1, 8.5.2

Operating system(s):

AIX, Linux, Windows, Windows 64bit

Reference #:

1635522

Modified date:

2013-04-25

Translate my page

Machine Translation

Content navigation