Share via

w3wp crash in KERNELBASE.dll with exception 0xe0434352

Anonymous
2015-08-27T14:06:55+00:00

We encountered a w3wp crashed. It is happened randomly customer site but it's hard to reproduce the issue. The crash is happened in a web service method. The following  error information is logged in application logs:

Faulting application name: w3wp.exe, version: 8.0.9200.16384, time stamp: 0x5010885f

Faulting module name: KERNELBASE.dll, version: 6.2.9200.16384, time stamp: 0x5010ac2f

Exception code: 0xe0434352

Fault offset: 0x00014b32

Faulting process id: 0x3fb4

Faulting application start time: 0x01d0dfd3e07f2c5e

Faulting application path: C:\Windows\SysWOW64\inetsrv\w3wp.exe

Faulting module path: C:\Windows\SYSTEM32\KERNELBASE.dll

Report Id: a73637e3-4bc9-11e5-9431-441ea13a85ce

Faulting package full name:

Faulting package-relative application ID:

We get the dump files and do analysis:

FAULTING_IP:

KERNELBASE!RaiseException+6c

75954b32 8b4c2454        mov     ecx,dword ptr [esp+54h]

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)

ExceptionAddress: 75954b32 (KERNELBASE!RaiseException+0x0000006c)

   ExceptionCode: e0434352 (CLR exception)

  ExceptionFlags: 00000001

NumberParameters: 5

   Parameter[0]: 80131604

   Parameter[1]: 00000000

   Parameter[2]: 00000000

   Parameter[3]: 00000000

   Parameter[4]: 74cb0000

CONTEXT:  00000000 -- (.cxr 0x0;r)

eax=00000000 ebx=2b7ce698 ecx=00000005 edx=00000000 esi=2b7ce608 edi=00000000

eip=77e31318 esp=2b7ce4e0 ebp=2b7ce660 iopl=0         nv up ei pl nz ac po nc

cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000212

ntdll!NtWaitForMultipleObjects+0xc:

77e31318 c21400          ret     14h

DEFAULT_BUCKET_ID:  WRONG_SYMBOLS

PROCESS_NAME:  w3wp.exe

ERROR_CODE: (NTSTATUS) 0xe0434352 - <Unable to get error code text>

EXCEPTION_CODE: (NTSTATUS) 0xe0434352 - <Unable to get error code text>

EXCEPTION_PARAMETER1:  80131604

EXCEPTION_PARAMETER2:  00000000

EXCEPTION_PARAMETER3:  00000000

EXCEPTION_PARAMETER4: 0

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

APP:  w3wp.exe

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) x86fre

MANAGED_STACK:

   at IrdetoAccess.PIsys.Commands.ClientDevice.HGPC.ClientDeviceHGPCCommands.activateNetworkHN(SessionContext session, String operatorTag, String smartcardSerialNumber, String serialSecondary1, String activationCode1, String serialSecondary2, String activationCode2, String serialSecondary3, String activationCode3, String serialSecondary4, String activationCode4, CommandResultData commandResult)

   at IrdetoAccess.PIsys.ClientDevice.HGPC.HGPC.activateNetworkHN(String operatorTag, UInt64 serialNumber, String serialSecondary1, String activationCode1, String serialSecondary2, String activationCode2, String serialSecondary3, String activationCode3, String serialSecondary4, String activationCode4)

EXCEPTION_OBJECT: !pe 12e55364

Exception object: 12e55364

Exception type:   System.Reflection.TargetInvocationException

Message:          Exception has been thrown by the target of an invocation.

InnerException:   System.AccessViolationException, Use !PrintException 12e59e40 to see more.

StackTrace (generated):

<none>

StackTraceString: <none>

HResult: 80131604

EXCEPTION_OBJECT: !pe 12e59e40

Exception object: 12e59e40

Exception type:   System.AccessViolationException

Message:          Attempted to read or write protected memory. This is often an indication that other memory is corrupt.

InnerException:   <none>

StackTrace (generated):

<none>

StackTraceString: <none>

HResult: 80004003

MANAGED_OBJECT: !dumpobj 12e5be14

Name:        System.String

MethodTable: 7400afb0

EEClass:     73c1486c

Size:        1416(0x588) bytes

File:        C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll

String:         at IrdetoAccess.PIsys.Commands.ClientDevice.HGPC.ClientDeviceHGPCCommands.activateNetworkHN(SessionContext session, String operatorTag, String smartcardSerialNumber, String serialSecondary1, String activationCode1, String serialSecondary2, String activationCode2, String serialSecondary3, String activationCode3, String serialSecondary4, String activationCode4, CommandResultData commandResult)

   at IrdetoAccess.PIsys.ClientDevice.HGPC.HGPC.activateNetworkHN(String operatorTag, UInt64 serialNumber, String serialSecondary1, String activationCode1, String serialSecondary2, String activationCode2, String serialSecondary3, String activationCode3, String serialSecondary4, String activationCode4)

Fields:

      MT    Field   Offset                 Type VT     Attr    Value Name

7400c770  40000aa        4         System.Int32  1 instance      701 m_stringLength

7400b9a8  40000ab        8          System.Char  1 instance       20 m_firstChar

7400afb0  40000ac        c        System.String  0   shared   static Empty

    >> Domain:Value  014e87a8:NotInit  02686060:NotInit  29bcc5f8:NotInit  29de3d60:NotInit  2ba235c0:NotInit  <<

EXCEPTION_MESSAGE:  Attempted to read or write protected memory. This is often an indication that other memory is corru

MANAGED_OBJECT_NAME:  SYSTEM.ACCESSVIOLATIONEXCEPTION

MANAGED_STACK_COMMAND:  ** Check field   _remoteStackTraceString **;!do 12e59e40;!do 12e5be14

LAST_CONTROL_TRANSFER:  from 74dd48c7 to 75954b32

PRIMARY_PROBLEM_CLASS:  WRONG_SYMBOLS

BUGCHECK_STR:  APPLICATION_FAULT_WRONG_SYMBOLS_CLR_EXCEPTION

STACK_TEXT: 

00000000 00000000 unknown!IrdetoAccess.PIsys.Commands.ClientDevice.HGPC.ClientDeviceHGPCCommands.activateNetworkHN+0x0

00000000 00000000 unknown!IrdetoAccess.PIsys.ClientDevice.HGPC.HGPC.activateNetworkHN+0x0

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  unknown!IrdetoAccess.PIsys.Commands.ClientDevice.HGPC.ClientDeviceHGPCCommands.activateNetworkHN

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: unknown

IMAGE_NAME:  unknown

DEBUG_FLR_IMAGE_TIMESTAMP:  0

STACK_COMMAND:  ** Check field   _remoteStackTraceString **;!do 12e59e40;!do 12e5be14 ; ** Pseudo Context ** ; kb

FAILURE_BUCKET_ID:  WRONG_SYMBOLS_e0434352_unknown!IrdetoAccess.PIsys.Commands.ClientDevice.HGPC.ClientDeviceHGPCCommands.activateNetworkHN

BUCKET_ID:  APPLICATION_FAULT_WRONG_SYMBOLS_CLR_EXCEPTION_unknown!IrdetoAccess.PIsys.Commands.ClientDevice.HGPC.ClientDeviceHGPCCommands.activateNetworkHN

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:wrong_symbols_e0434352_unknown!irdetoaccess.pisys.commands.clientdevice.hgpc.clientdevicehgpccommands.activatenetworkhn

FAILURE_ID_HASH:  {08572cef-1715-466a-1a7b-4f80c3617a30}

Followup: MachineOwner

Anyone have ever encountered this error. Please help. Thanks!

Windows for home | Previous Windows versions | Desktop, Start, and personalization

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

1 answer

Sort by: Most helpful
  1. Anonymous
    2015-08-27T14:10:58+00:00

    This question is outside the scope of this site (for consumers) and to be sure you get the best (and quickest) answer it should be asked either on Technet (for IT Pro's) or MSDN (for developers)

    http://social.msdn.microsoft.com/Forum

    http://social.technet.microsoft.com/Forums/en-us/home s/en-US/home

    Was this answer helpful?

    0 comments No comments