All pastes #823204 Raw Edit

Unnamed

public text v1 · immutable
·published 2007-12-19 06:28 UTC
rendered paste body

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [E:\ul\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Symbol search path is: srv*e:\winstuff\symbols\*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows XP Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Debug session time: Tue Dec 18 21:35:35.000 2007 (GMT-8)
System Uptime: not available
Process Uptime: 0 days 0:00:08.000
.....................................................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(164.a1c): Access violation - code c0000005 (first/second chance not available)
eax=00000000 ebx=00000000 ecx=0294966c edx=02949794 esi=001c106c edi=00000001
eip=7e21b5ce esp=0013e6b4 ebp=0013e6c0 iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000202
urlmon!CMimeFt::ReportData+0x99:
7e21b5ce 399ee0120000    cmp     dword ptr [esi+12E0h],ebx ds:0023:001c234c=????????
0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************

FAULTING_IP: 
urlmon!CMimeFt::ReportData+99
7e21b5ce 399ee0120000    cmp     dword ptr [esi+12E0h],ebx

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 7e21b5ce (urlmon!CMimeFt::ReportData+0x00000099)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 001c234c
Attempt to read from address 001c234c

DEFAULT_BUCKET_ID:  APPLICATION_FAULT

PROCESS_NAME:  iexplore.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

READ_ADDRESS:  001c234c 

BUGCHECK_STR:  ACCESS_VIOLATION

LAST_CONTROL_TRANSFER:  from 7e1f3fd9 to 7e21b5ce

STACK_TEXT:  
0013e6c0 7e1f3fd9 001c106c 00000011 00000001 urlmon!CMimeFt::ReportData+0x99
0013e6d8 7e2150f2 0294dff8 00000011 00000001 urlmon!CINetEmbdFilter::ReportData+0x1a
0013e808 7e203342 00000000 02960a48 7e1fc236 urlmon!CINet::INetReadDirect+0x11f
0013e814 7e1fc236 00000000 02960a48 020122d0 urlmon!CINet::INetRead+0x24
0013e824 7e1fc1e6 001bec50 02960a48 0013e848 urlmon!CINet::INetQueryInfo+0xcd
0013e834 7e1fcd5c 00000005 80004005 02960a48 urlmon!CINet::OnINetInternal+0xb6
0013e848 7e1fcd32 02960a48 001bec50 0013e868 urlmon!CINet::MyContinue+0x21
0013e858 7e1fcb8c 001b1110 001bec50 0013e880 urlmon!CINetProtImpl::Continue+0x13
0013e868 7e1fcb69 0294dff8 001bec50 7ded5e88 urlmon!CINetEmbdFilter::Continue+0x14
0013e880 7e1fb4df 02960a48 001bec50 0013e8a4 urlmon!CINet::Continue+0x28
0013e890 7e21301c 029497e8 001bec50 0203fca0 urlmon!COInetProt::Continue+0x14
0013e8a4 7de84e02 02949644 001bec50 0203fca0 urlmon!CTransaction::Continue+0x29
0013e8b8 7dd69d68 001bec50 0013e91c 0201781c mshtml!CDwnBindData::OnDwnDocCallback+0x1a
0013e8dc 7de8cf1f 0013e8f4 7dcc9cfc 02012260 mshtml!CDwnDoc::OnDocThreadCallback+0x62
0013e8e4 7dcc9cfc 02012260 02012260 0013e928 mshtml!CDwnDoc::OnDocThreadCallback+0xd
0013e8f4 7dc9cba1 02012260 00000000 00000000 mshtml!CDwnChan::OnMethodCall+0x19
0013e928 7dc989b7 0013eac4 7dc988d2 00000000 mshtml!GlobalWndOnMethodCall+0x66
0013ea5c 7e418734 0025053a 00008002 00000000 mshtml!GlobalWndProc+0x1e2
0013ea88 7e418816 7dc988d2 0025053a 00008002 user32!InternalCallWinProc+0x28
0013eaf0 7e4189cd 00000000 7dc988d2 0025053a user32!UserCallWinProcCheckWow+0x150
0013eb50 7e418a10 0013eb90 00000000 0013eb78 user32!DispatchMessageWorker+0x306
0013eb60 75f9d795 0013eb90 00000000 00153d00 user32!DispatchMessageW+0xf
0013eb78 75fa51b2 0013eb90 0013ee98 00000000 browseui!TimedDispatchMessage+0x33
0013edd8 75fa5325 00162010 0013ee98 00162010 browseui!BrowserThreadProc+0x336
0013ee6c 75fa55ed 00162010 00162010 00000000 browseui!BrowserProtectedThreadProc+0x50
0013fef0 7e318cbe 00162010 00000000 00000000 browseui!SHOpenFolderWindow+0x22c
0013ff10 00402372 001523ba 00000001 01eadf4c shdocvw!IEWinMain+0x129
0013ff60 00402444 00400000 00000000 001523ba iexplore!WinMainT+0x2de
0013ffc0 7c816fd7 01eadf4c 00000018 7ffdf000 iexplore!_ModuleEntry+0x99
0013fff0 00000000 00402451 00000000 00000000 kernel32!BaseProcessStart+0x23


STACK_COMMAND:  ~0s; .ecxr ; kb

FAULTING_THREAD:  00000a1c

FOLLOWUP_IP: 
urlmon!CMimeFt::ReportData+99
7e21b5ce 399ee0120000    cmp     dword ptr [esi+12E0h],ebx

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  urlmon!CMimeFt::ReportData+99

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: urlmon

IMAGE_NAME:  urlmon.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  470dbb54

BUCKET_ID:  ACCESS_VIOLATION_urlmon!CMimeFt::ReportData+99

FAILURE_BUCKET_ID:  urlmon.dll!CMimeFt::ReportData_c0000005_APPLICATION_FAULT

Followup: MachineOwner
---------