Randon Access Violation on dhcpcsvc6.DLL

delphi package - automated exception handling

Re: Randon Access Violation on dhcpcsvc6.DLL

Postby tprami » Tue Apr 11, 2017 9:45 am

We had similar error, not yet sure what is causing...

Code: Select all
date/time          : 2017-04-11, 00:44:04, 18ms
computer name      : SERVERXXX
wts client name    : SERVER
user name          : XXXXXX
operating system   : Windows 2008 R2 x64 Service Pack 1 build 7601
system language    : Swedish
system up time     : 1 day 2 hours
program up time    : 390 milliseconds
processors         : 16x Intel(R) Xeon(R) CPU E5620 @ 2.40GHz
physical memory    : 7557/16374 MB (free/total)
free disk space    : (C:) 67,87 GB
display mode       : 1680x1050, 16 bit
process id         : $2ec8
allocated memory   : 44,47 MB
largest free block : 1017,37 MB
executable         : KirjanpitoClient.exe
exec. date/time    : 2017-03-21 14:34
version            : 2017.1.1.1020
bde version        : 5.1.1.1
compiled with      : Delphi 10.1 Berlin
madExcept version  : 4.0.16
contact name       : XXXXXX XXXXXX
contact email      : XXXXXX@XXXXXX.XXX
callstack crc      : $fbec8fbf, $4532391e, $9a5413bd
exception number   : 1
exception class    : EAccessViolation
exception message  : Access violation at address 72F71CA0 in module 'dhcpcsvc.DLL'. Execution of address 72F71CA0.

thread $3968:
72f71ca0 +173 dhcpcsvc.DLL                            DhcpIsEnabled
74a26a84 +037 IPHLPAPI.DLL                            GetAdaptersAddresses
00859575 +00d KirjanpitoClient.exe madExcept 17281 +6 CallThreadProcSafe
00859ce2 +032 KirjanpitoClient.exe madExcept 17576 +9 UserWorkItemExceptFrame
76d73368 +010 kernel32.dll                            BaseThreadInitThunk

main thread ($1ed0):
77e50117 +02b ntdll.dll                                     KiUserCallbackDispatcher
77e6ecdf +063 ntdll.dll                                     bsearch
004cfc45 +1b5 KirjanpitoClient.exe System.Classes           TReader.ReadProperty
004cf4dd +015 KirjanpitoClient.exe System.Classes           TReader.ReadDataInner
004cf4bf +067 KirjanpitoClient.exe System.Classes           TReader.ReadData
004dce9d +001 KirjanpitoClient.exe System.Classes           TComponent.ReadState
0066b923 +02f KirjanpitoClient.exe Vcl.Controls             TControl.ReadState
004cf313 +11f KirjanpitoClient.exe System.Classes           TReader.ReadComponent
004cf551 +089 KirjanpitoClient.exe System.Classes           TReader.ReadDataInner
004cf4bf +067 KirjanpitoClient.exe System.Classes           TReader.ReadData
004dce9d +001 KirjanpitoClient.exe System.Classes           TComponent.ReadState
0066b923 +02f KirjanpitoClient.exe Vcl.Controls             TControl.ReadState
006701c5 +025 KirjanpitoClient.exe Vcl.Controls             TWinControl.ReadState
004cf313 +11f KirjanpitoClient.exe System.Classes           TReader.ReadComponent
0067558c +0d0 KirjanpitoClient.exe Vcl.Controls             TWinControl.SetBounds
004cf313 +11f KirjanpitoClient.exe System.Classes           TReader.ReadComponent
004cf551 +089 KirjanpitoClient.exe System.Classes           TReader.ReadDataInner
004cf490 +038 KirjanpitoClient.exe System.Classes           TReader.ReadData
004dce9d +001 KirjanpitoClient.exe System.Classes           TComponent.ReadState
0066b923 +02f KirjanpitoClient.exe Vcl.Controls             TControl.ReadState
006701c5 +025 KirjanpitoClient.exe Vcl.Controls             TWinControl.ReadState
004d0441 +1f5 KirjanpitoClient.exe System.Classes           TReader.ReadRootComponent
004ca06e +032 KirjanpitoClient.exe System.Classes           TStream.ReadComponent
004c1803 +057 KirjanpitoClient.exe System.Classes           InternalReadComponentRes
004c2f13 +05f KirjanpitoClient.exe System.Classes           InitComponent
004c2fa1 +061 KirjanpitoClient.exe System.Classes           InitInheritedComponent
006387a4 +064 KirjanpitoClient.exe Vcl.Forms                TCustomFrame.Create
017717f7 +04b KirjanpitoClient.exe MNForm.Main      462  +8 TMNMainForm.FormCreate
00638f8d +031 KirjanpitoClient.exe Vcl.Forms                TCustomForm.DoCreate
00638afd +13d KirjanpitoClient.exe Vcl.Forms                TCustomForm.Create
00643d62 +076 KirjanpitoClient.exe Vcl.Forms                TApplication.CreateForm
017a15ae +0fe KirjanpitoClient.exe KirjanpitoClient 397 +30 initialization
76d73368 +010 kernel32.dll                                  BaseThreadInitThunk

thread $49b4:
77e60166 +0e ntdll.dll     NtWaitForMultipleObjects
76d73368 +10 kernel32.dll  BaseThreadInitThunk

thread $3aa0 (TSTUpdateThread):
77e5f8da +00e ntdll.dll                                         NtWaitForSingleObject
76f715c8 +092 KERNELBASE.dll                                    WaitForSingleObjectEx
76d7118f +03e kernel32.dll                                      WaitForSingleObjectEx
76d71143 +00d kernel32.dll                                      WaitForSingleObject
7706cd75 +0f5 wininet.dll                                       HttpSendRequestW
007dabc6 +546 KirjanpitoClient.exe Soap.SOAPHTTPTrans           THTTPReqResp.Send
007db745 +135 KirjanpitoClient.exe Soap.SOAPHTTPTrans           THTTPReqResp.Execute
007d64c6 +21a KirjanpitoClient.exe Soap.Rio                     TRIO.DoDispatch
007d6e4a +19a KirjanpitoClient.exe Soap.Rio                     TRIO.Generic
007d6921 +025 KirjanpitoClient.exe Soap.Rio                     TRIO.QueryInterface$15$ActRec.$0$Body
00475ea3 +03b KirjanpitoClient.exe System.Rtti                  TVirtualInterface.RawCallback
00475b67 +027 KirjanpitoClient.exe System.Rtti                  TVirtualInterface.Create$547$ActRec.$0$Body
0047594a +076 KirjanpitoClient.exe System.Rtti                  TMethodImplementation.Intercept
004754d7 +00b KirjanpitoClient.exe System.Rtti                  RawIntercept
008b50c6 +17e KirjanpitoClient.exe STUpdateAgent        189 +33 TSTUpdateThread.Execute
0085968f +02b KirjanpitoClient.exe madExcept          17348  +3 HookedTThreadExecute
004db0c1 +049 KirjanpitoClient.exe System.Classes               ThreadProc
0040c260 +028 KirjanpitoClient.exe System                16  +0 ThreadWrapper
00859575 +00d KirjanpitoClient.exe madExcept          17281  +6 CallThreadProcSafe
008595da +032 KirjanpitoClient.exe madExcept          17331  +9 ThreadExceptFrame
76d73368 +010 kernel32.dll                                      BaseThreadInitThunk
>> created by main thread ($1ed0) at:
008b4ee0 +034 KirjanpitoClient.exe STUpdateAgent        128  +6 TSTUpdateThread.Create

thread $4700:
77e61f4f +0b ntdll.dll     NtWaitForWorkViaWorkerFactory
76d73368 +10 kernel32.dll  BaseThreadInitThunk

thread $4948:
77e5fd9a +0e ntdll.dll                               NtDelayExecution
76f73d36 +5f KERNELBASE.dll                          SleepEx
76f74607 +0a KERNELBASE.dll                          Sleep
00859575 +0d KirjanpitoClient.exe madExcept 17281 +6 CallThreadProcSafe
008595da +32 KirjanpitoClient.exe madExcept 17331 +9 ThreadExceptFrame
76d73368 +10 kernel32.dll                            BaseThreadInitThunk
>> created by main thread ($1ed0) at:
758eda5e +00 ole32.dll

thread $6a88 (TEventSendThread):
77e5f8da +00e ntdll.dll                                        NtWaitForSingleObject
76916944 +04f WS2_32.dll                                       connect
0096e67d +229 KirjanpitoClient.exe CRVioTcp            273 +55 TCRVioTcp.InternalConnect
0096ea1e +246 KirjanpitoClient.exe CRVioTcp            371 +55 TCRVioTcp.TryConnect
009718b0 +098 KirjanpitoClient.exe DBMonitorMessages   486 +16 TSocketMessagePacker.Open
009728d8 +050 KirjanpitoClient.exe DBMonitorClient     261  +9 TDBMonitor.IsMonitorActive
00972d33 +07f KirjanpitoClient.exe DBMonitorClient     415 +15 TEventSendThread.Execute
0085968f +02b KirjanpitoClient.exe madExcept         17348  +3 HookedTThreadExecute
004db0c1 +049 KirjanpitoClient.exe System.Classes              ThreadProc
0040c260 +028 KirjanpitoClient.exe System               16  +0 ThreadWrapper
00859575 +00d KirjanpitoClient.exe madExcept         17281  +6 CallThreadProcSafe
008595da +032 KirjanpitoClient.exe madExcept         17331  +9 ThreadExceptFrame
76d73368 +010 kernel32.dll                                     BaseThreadInitThunk
>> created by main thread ($1ed0) at:
00972bdb +01b KirjanpitoClient.exe DBMonitorClient     368  +1 TEventSendThread.Create

thread $4c80:
77e61f4f +0b ntdll.dll     NtWaitForWorkViaWorkerFactory
76d73368 +10 kernel32.dll  BaseThreadInitThunk

thread $338c:
77e61f4f +0b ntdll.dll     NtWaitForWorkViaWorkerFactory
76d73368 +10 kernel32.dll  BaseThreadInitThunk

thread $6080:
77e5f8da +0e ntdll.dll                               NtWaitForSingleObject
76f715c8 +92 KERNELBASE.dll                          WaitForSingleObjectEx
76d7118f +3e kernel32.dll                            WaitForSingleObjectEx
76d71143 +0d kernel32.dll                            WaitForSingleObject
00859575 +0d KirjanpitoClient.exe madExcept 17281 +6 CallThreadProcSafe
008595da +32 KirjanpitoClient.exe madExcept 17331 +9 ThreadExceptFrame
76d73368 +10 kernel32.dll                            BaseThreadInitThunk
>> created by thread $3aa0 (TSTUpdateThread) at:
77124ce7 +00 wininet.dll

thread $621c:
77e61f4f +0b ntdll.dll     NtWaitForWorkViaWorkerFactory
76d73368 +10 kernel32.dll  BaseThreadInitThunk

cpu registers:
eax = 00000000
ebx = 76d722b1
ecx = 00000000
edx = 77e9c30e
esi = 00000000
edi = 00000000
eip = 72f71ca0
esp = 0471f5ec
ebp = 0471f894

stack dump:
0471f5ec  04 95 67 02 30 94 67 02 - 30 94 67 02 00 00 00 00  ..g.0.g.0.g.....
0471f5fc  00 00 00 00 00 00 00 00 - a4 1d f7 72 01 00 00 00  ...........r....
0471f60c  01 00 00 00 00 00 00 00 - 34 f6 71 04 08 00 00 00  ........4.q.....
0471f61c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0471f62c  58 f6 71 04 38 02 00 00 - 00 00 00 09 00 00 06 00  X.q.8...........
0471f63c  04 00 00 00 00 00 00 00 - 4c 00 4e 00 28 d6 72 06  ........L.N.(.r.
0471f64c  08 f9 71 04 bc 04 00 00 - 00 00 00 00 0c 00 00 00  ..q.............
0471f65c  6a 00 48 00 50 00 20 00 - 4e 00 43 00 33 00 38 00  j.H.P. .N.C.3.8.
0471f66c  32 00 69 00 20 00 44 00 - 50 00 20 00 4d 00 75 00  2.i. .D.P. .M.u.
0471f67c  6c 00 74 00 69 00 66 00 - 75 00 6e 00 63 00 74 00  l.t.i.f.u.n.c.t.
0471f68c  69 00 6f 00 6e 00 20 00 - 47 00 69 00 67 00 61 00  i.o.n. .G.i.g.a.
0471f69c  62 00 69 00 74 00 20 00 - 53 00 65 00 72 00 76 00  b.i.t. .S.e.r.v.
0471f6ac  65 00 72 00 20 00 41 00 - 64 00 61 00 70 00 74 00  e.r. .A.d.a.p.t.
0471f6bc  65 00 72 00 20 00 23 00 - 34 00 36 00 00 00 00 00  e.r. .#.4.6.....
0471f6cc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0471f6dc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0471f6ec  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0471f6fc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0471f70c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0471f71c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................

disassembling:
00859568       public madExcept.CallThreadProcSafe:  ; function entry point
00859568 17275   push    ebp
00859569         mov     ebp, esp
0085956b 17276   push    ebx
0085956c 17277   mov     ebx, esp
0085956e 17278   mov     eax, [ebp+$c]
00859571 17279   push    eax
00859572 17280   mov     eax, [ebp+8]
00859575 17281 > call    eax
00859575
00859577 17283   cmp     ebx, esp
00859579 17284   jz      loc_8595a2
00859579
0085957b 17287   ja      loc_859599
0085957b
0085957d 17291   push    eax
0085957e 17292   mov     eax, ebx
00859580 17293   mov     ebx, esp
00859582 17294   add     ebx, 4
[...]
tprami
 
Posts: 2
Joined: Tue Apr 11, 2017 5:03 am

Re: Randon Access Violation on dhcpcsvc6.DLL

Postby madshi » Tue Apr 11, 2017 9:48 am

Seems like a crash in a system DLL. Don't know what's causing it. Doesn't seem to be madExcept's fault, if that's what you're wondering about?
madshi
Site Admin
 
Posts: 9203
Joined: Sun Mar 21, 2004 5:25 pm

Re: Randon Access Violation on dhcpcsvc6.DLL

Postby tprami » Tue Apr 11, 2017 10:09 am

madshi wrote:Seems like a crash in a system DLL. Don't know what's causing it. Doesn't seem to be madExcept's fault, if that's what you're wondering about?


Nope, I think it's very similar to what is in this thread. This environment (Server/Terminal services) and so on are similar, the thread above.

Just posted to anyone can check the call stack.

I have an idea of culprit, but when it goes to Test, don't know.

-Tee-
tprami
 
Posts: 2
Joined: Tue Apr 11, 2017 5:03 am

Previous

Return to madExcept

Who is online

Users browsing this forum: No registered users and 2 guests