There is a Access Violation error in AppXDeploymentClient.dll

Question

When I analyzed Dump's collapse, I found that AppxDeploymentClient.dll collapsed in a strange callback position.

There is the dump info.

*** ERROR: Symbol file could not be found. Defaulted to export symbols for kdump64.dll -

KEY_VALUES_STRING: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1

Timeline: !analyze.Start

Name: <blank>

Time: 2024-06-11T08:07:29.595Z

Diff: 54844595 mSec

Timeline: Dump.Current

Name: <blank>

Time: 2024-06-10T16:53:25.0Z

Diff: 0 mSec

Timeline: Process.Start

Name: <blank>

Time: 2024-06-10T16:52:53.0Z

Diff: 32000 mSec

DUMP_CLASS: 2

DUMP_QUALIFIER: 400

CONTEXT: (.ecxr)

rax=00007ff94f753170 rbx=41c64e6da314f845 rcx=41c64e6da314f845

rdx=0000000000000009 rsi=0000000000000001 rdi=000002b4eedcc250

rip=00007ff94f753170 rsp=000000bb58affa08 rbp=000002b4eedcc6b0

r8=0000000000000000 r9=000002b4eee03ab0 r10=86f53f8d1a511270

r11=000000007ffe03b0 r12=0000000000000000 r13=000002b4eee03ab0

r14=00007ff94f753170 r15=000002b4eedf8f10

iopl=0 nv up ei pl nz na pe nc

cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010202

AppXDeploymentClient!Windows::Management::Deployment::ClientRequestBase::WnfCallBack:

00007ff94f753170 48895c2410 mov qword ptr [rsp+10h],rbx ss:000000bb58affa18=41c64e6da314f845

Resetting default scope

FAULTING_IP:

AppXDeploymentClient.dll!Unloaded+13170 [onecore\admin\appmodel\packagemanager\client\ClientRequestBase.hpp @ 75]

00007ff9`4f753170 48895c2410 mov qword ptr [rsp+10h],rbx

EXCEPTION_RECORD: (.exr -1)

ExceptionAddress: 00007ff94f753170 (AppXDeploymentClient!Windows::Management::Deployment::ClientRequestBase::WnfCallBackWindows::Management::Deployment::ClientDeploymentRequest,PackageManagerInternal::DeploymentRequestStatus)

ExceptionCode: c0000005 (Access violation)

ExceptionFlags: 00000000

NumberParameters: 2

Parameter[0]: 0000000000000008

Parameter[1]: 00007ff94f753170

Attempt to execute non-executable address 00007ff94f753170

DEFAULT_BUCKET_ID: BAD_INSTRUCTION_PTR

FOLLOWUP_IP:

AppXDeploymentClient.dll!Unloaded+13170 [onecore\admin\appmodel\packagemanager\client\ClientRequestBase.hpp @ 75]

00007ff9`4f753170 48895c2410 mov qword ptr [rsp+10h],rbx

EXECUTE_ADDRESS: 7ff94f753170

FAILED_INSTRUCTION_ADDRESS:

AppXDeploymentClient.dll!Unloaded+13170 [onecore\admin\appmodel\packagemanager\client\ClientRequestBase.hpp @ 75]

00007ff9`4f753170 48895c2410 mov qword ptr [rsp+10h],rbx

ERROR_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>

EXCEPTION_CODE_STR: c0000005

EXCEPTION_PARAMETER1: 0000000000000008

EXCEPTION_PARAMETER2: 00007ff94f753170

WATSON_BKT_PROCSTAMP: 6645c3b2

WATSON_BKT_PROCVER: 2024.5.16.871

WATSON_BKT_MODULE: unknown

WATSON_BKT_MODVER: 0.0.0.0

WATSON_BKT_MODOFFSET: 4f753170

BUILD_VERSION_STRING: 22621.1.amd64fre.ni_release.220506-1250

MODLIST_WITH_TSCHKSUM_HASH: 6bf82b35f8670be3ca47810077ddbcad9b3093f7

MODLIST_SHA1_HASH: c42cc0c3f78f2db78eb542b34852b8d2aa64c8c2

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

DUMP_FLAGS: 2b6

DUMP_TYPE: 11

PROCESS_NAME: unknown

ANALYSIS_SESSION_HOST: DESKTOP-0VR24***

ANALYSIS_SESSION_TIME: 06-11-2024 16:07:29.0595

ANALYSIS_VERSION: 10.0.17763.132 x86fre

THREAD_ATTRIBUTES:

OS_LOCALE: CHS

BUGCHECK_STR: APPLICATION_FAULT_BAD_INSTRUCTION_PTR_SOFTWARE_NX_FAULT_INVALID_POINTER_EXECUTE

PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT

PROBLEM_CLASSES:

ID: [0n313]

Type: [@ACCESS_VIOLATION]

Class: Addendum

Scope: BUCKET_ID

Name: Omit

Data: Omit

PID: [Unspecified]

TID: [0x2534]

Frame: [0] : AppXDeploymentClient.dll!Unloaded

ID: [0n287]

Type: [INVALID_POINTER_EXECUTE]

Class: Primary

Scope: BUCKET_ID

Name: Add

Data: Omit

PID: [Unspecified]

TID: [0x2534]

Frame: [0] : AppXDeploymentClient.dll!Unloaded

ID: [0n295]

Type: [SOFTWARE_NX_FAULT]

Class: Primary

Scope: BUCKET_ID

Name: Add

Data: Omit

PID: [0x3260]

TID: [0x2534]

Frame: [0] : AppXDeploymentClient.dll!Unloaded

ID: [0n296]

Type: [BAD_INSTRUCTION_PTR]

Class: Primary

Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)

BUCKET_ID

Name: Add

Data: Omit

PID: [0x3260]

TID: [0x2534]

Frame: [0] : AppXDeploymentClient.dll!Unloaded

LAST_CONTROL_TRANSFER: from 00007ff95a4ddae6 to 00007ff94f753170

STACK_TEXT:

000000bb58affa08 00007ff95a4ddae6 : 0000000000000000 41c64e6da314f845 0000000000000084 0000000000000000 : AppXDeploymentClient!Windows::Management::Deployment::ClientRequestBase::WnfCallBackWindows::Management::Deployment::ClientDeploymentRequest,PackageManagerInternal::DeploymentRequestStatus

000000bb58affa10 00007ff95a4dd7be : 000002b400000001 000002b4eedcc670 000002b400000000 000002b400000000 : ntdll!RtlpWnfWalkUserSubscriptionList+0x24e

000000bb58affaf0 00007ff95a4dc214 : 000002b4eedf8f10 0000000000000000 0000000000000000 0000000000000000 : ntdll!RtlpWnfProcessCurrentDescriptor+0x10a

000000bb58affb40 00007ff95a4de2a2 : 000002b4eeddc7c0 000002b4eeddc948 000000007ffe0386 0000000000000000 : ntdll!RtlpWnfNotificationThread+0x84

000000bb58affbb0 00007ff95a4c57bc : 000002b4eed90c50 000002b4eedd3500 0000000000000000 000002b4eed90c50 : ntdll!TppExecuteWaitCallback+0xae

000000bb58affc00 00007ff9596a257d : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : ntdll!TppWorkerThread+0x72c

000000bb58affee0 00007ff95a4eaa48 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : kernel32!BaseThreadInitThunk+0x1d

000000bb58afff10 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : ntdll!RtlUserThreadStart+0x28

THREAD_SHA1_HASH_MOD_FUNC: 319b4daa1880078adbdfb46b9b69142e2cf7778e

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 380acfaad2910892f37a1774debca35bb9982873

THREAD_SHA1_HASH_MOD: e5ff85e77e72e24016ca457255887e576cd35cc6

FAULT_INSTR_CODE: 245c8948

FAULTING_SOURCE_LINE: onecore\admin\appmodel\packagemanager\client\ClientRequestBase.hpp

FAULTING_SOURCE_FILE: onecore\admin\appmodel\packagemanager\client\ClientRequestBase.hpp

FAULTING_SOURCE_LINE_NUMBER: 75

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: AppXDeploymentClient.dll!Unloaded+13170

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: AppXDeploymentClient

IMAGE_NAME: AppXDeploymentClient.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 269e33c3

STACK_COMMAND: ~4s ; .ecxr ; kb

FAILURE_BUCKET_ID: BAD_INSTRUCTION_PTR_c0000005_AppXDeploymentClient.dll!Unloaded

BUCKET_ID: APPLICATION_FAULT_BAD_INSTRUCTION_PTR_SOFTWARE_NX_FAULT_INVALID_POINTER_EXECUTE_BAD_IP_AppXDeploymentClient.dll!Unloaded+13170

FAILURE_EXCEPTION_CODE: c0000005

FAILURE_IMAGE_NAME: AppXDeploymentClient.dll

BUCKET_ID_IMAGE_STR: AppXDeploymentClient.dll

FAILURE_MODULE_NAME: AppXDeploymentClient

BUCKET_ID_MODULE_STR: AppXDeploymentClient

FAILURE_FUNCTION_NAME: Unloaded

BUCKET_ID_FUNCTION_STR: Unloaded

BUCKET_ID_OFFSET: 13170

BUCKET_ID_MODTIMEDATESTAMP: 269e33c3

BUCKET_ID_MODCHECKSUM: 142ee4

BUCKET_ID_MODVER_STR: 6.2.22621.3527

BUCKET_ID_PREFIX_STR: APPLICATION_FAULT_BAD_INSTRUCTION_PTR_SOFTWARE_NX_FAULT_INVALID_POINTER_EXECUTE_BAD_IP_

FAILURE_PROBLEM_CLASS: APPLICATION_FAULT

FAILURE_SYMBOL_NAME: AppXDeploymentClient.dll!Unloaded

TARGET_TIME: 2024-06-10T16:53:25.000Z

OSBUILD: 22631

OSSERVICEPACK: 3527

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 768

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt SingleUserTS Personal

USER_LCID: 0

OSBUILD_TIMESTAMP: 2027-03-05 15:05:07

BUILDDATESTAMP_STR: 220506-1250

BUILDLAB_STR: ni_release

BUILDOSVER_STR: 10.0.22621.1.amd64fre.ni_release.220506-1250

ANALYSIS_SESSION_ELAPSED_TIME: 1324

ANALYSIS_SOURCE: UM

FAILURE_ID_HASH_STRING: um:bad_instruction_ptr_c0000005_appxdeploymentclient.dll!unloaded

FAILURE_ID_HASH: {b302f5ff-d980-0d3f-2890-e5ab2e406c2b}

Followup: MachineOwner