API tools faq
paste
Advertisement
Guest User

51711052 dump#01

a guest
Aug 8th, 2018
288
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.73 KB | None | 0 0
raw download clone embed print report
  1.  
  2. Microsoft (R) Windows Debugger Version 10.0.17134.12 AMD64
  3. Copyright (c) Microsoft Corporation. All rights reserved.
  4.  
  5.  
  6. Loading Dump File [C:\Users\oac\Downloads\ProcDumps\meters.exe_180806_130359.dmp]
  7. User Mini Dump File with Full Memory: Only application data is available
  8.  
  9. Comment: '
  10. *** procdump.exe -e -ma -w meters.exe
  11. *** Unhandled exception: C0000005.ACCESS_VIOLATION'
  12. Symbol search path is: srv*
  13. Executable search path is:
  14. Windows 7 Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
  15. Product: WinNt, suite: SingleUserTS
  16. Machine Name:
  17. Debug session time: Mon Aug 6 13:03:59.000 2018 (UTC + 2:00)
  18. System Uptime: 4 days 4:56:02.774
  19. Process Uptime: 0 days 0:00:50.000
  20. ...........................................
  21. This dump file has an exception of interest stored in it.
  22. The stored exception information can be accessed via .ecxr.
  23. (264c.13dc): Access violation - code c0000005 (first/second chance not available)
  24. eax=00408de8 ebx=00000000 ecx=74df0023 edx=01cee398 esi=0040c550 edi=71bbd000
  25. eip=06418366 esp=037dfac4 ebp=037dfaec iopl=0 nv up ei pl nz na pe nc
  26. cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206
  27. 06418366 ?? ???
  28.  
  29. ************* Path validation summary **************
  30. Response Time (ms) Location
  31. OK c:\Users\oac\Downloads\ProcDumps\MyRegularSymbols
  32. Deferred srv*c:\Users\oac\Downloads\ProcDumps\MyServerSymbols*https://msdl.microsoft.com/download/symbols
  33. 0:006> .reload
  34. ...........................................
  35. 0:006> !analyze -v
  36. *******************************************************************************
  37. * *
  38. * Exception Analysis *
  39. * *
  40. *******************************************************************************
  41.  
  42. *** WARNING: Unable to verify checksum for meters.exe
  43.  
  44. KEY_VALUES_STRING: 1
  45.  
  46.  
  47. TIMELINE_ANALYSIS: 1
  48.  
  49. Timeline: !analyze.Start
  50. Name: <blank>
  51. Time: 2018-08-08T06:18:40.975Z
  52. Diff: 155681975 mSec
  53.  
  54. Timeline: Dump.Current
  55. Name: <blank>
  56. Time: 2018-08-06T11:03:59.0Z
  57. Diff: 0 mSec
  58.  
  59. Timeline: Process.Start
  60. Name: <blank>
  61. Time: 2018-08-06T11:03:09.0Z
  62. Diff: 50000 mSec
  63.  
  64. Timeline: OS.Boot
  65. Name: <blank>
  66. Time: 2018-08-02T06:07:57.0Z
  67. Diff: 363362000 mSec
  68.  
  69.  
  70. DUMP_CLASS: 2
  71.  
  72. DUMP_QUALIFIER: 400
  73.  
  74. CONTEXT: (.ecxr)
  75. eax=00408de8 ebx=00000000 ecx=74df0023 edx=01cee398 esi=0040c550 edi=71bbd000
  76. eip=06418366 esp=037dfac4 ebp=037dfaec iopl=0 nv up ei pl nz na pe nc
  77. cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206
  78. 06418366 ?? ???
  79. Resetting default scope
  80.  
  81. FAULTING_IP:
  82. +0
  83. 06418366 ?? ???
  84.  
  85. EXCEPTION_RECORD: (.exr -1)
  86. ExceptionAddress: 06418366
  87. ExceptionCode: c0000005 (Access violation)
  88. ExceptionFlags: 00000000
  89. NumberParameters: 2
  90. Parameter[0]: 00000008
  91. Parameter[1]: 06418366
  92. Attempt to execute non-executable address 06418366
  93.  
  94. DEFAULT_BUCKET_ID: SOFTWARE_NX_FAULT
  95.  
  96. PROCESS_NAME: meters.exe
  97.  
  98. FOLLOWUP_IP:
  99. AudioSes!CAudioSessionControl::FinalRelease+165
  100. 71ba0847 8bbed8000000 mov edi,dword ptr [esi+0D8h]
  101.  
  102. EXECUTE_ADDRESS: 6418366
  103.  
  104. FAILED_INSTRUCTION_ADDRESS:
  105. +0
  106. 06418366 ?? ???
  107.  
  108. ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
  109.  
  110. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
  111.  
  112. EXCEPTION_CODE_STR: c0000005
  113.  
  114. EXCEPTION_PARAMETER1: 00000008
  115.  
  116. EXCEPTION_PARAMETER2: 06418366
  117.  
  118. WATSON_BKT_PROCSTAMP: 5b68294d
  119.  
  120. WATSON_BKT_MODULE: unknown
  121.  
  122. WATSON_BKT_MODVER: 0.0.0.0
  123.  
  124. WATSON_BKT_MODOFFSET: 6418366
  125.  
  126. WATSON_BKT_MODSTAMP: bbbbbbb4
  127.  
  128. BUILD_VERSION_STRING: 6.1.7601.24168 (win7sp1_ldr.180608-0600)
  129.  
  130. MODLIST_WITH_TSCHKSUM_HASH: 136fcd35f466f3e0e63e382062e14486942c5076
  131.  
  132. MODLIST_SHA1_HASH: 64b87685a1878c72b57974e98c9ecdf45664d03d
  133.  
  134. COMMENT:
  135. *** procdump.exe -e -ma -w meters.exe
  136. *** Unhandled exception: C0000005.ACCESS_VIOLATION
  137.  
  138. NTGLOBALFLAG: 0
  139.  
  140. APPLICATION_VERIFIER_FLAGS: 0
  141.  
  142. PRODUCT_TYPE: 1
  143.  
  144. SUITE_MASK: 272
  145.  
  146. DUMP_FLAGS: 8000c07
  147.  
  148. DUMP_TYPE: 3
  149.  
  150. ANALYSIS_SESSION_HOST: IT-02037
  151.  
  152. ANALYSIS_SESSION_TIME: 08-08-2018 08:18:40.0975
  153.  
  154. ANALYSIS_VERSION: 10.0.17134.12 amd64fre
  155.  
  156. IP_ON_HEAP: 06418366
  157. The fault address in not in any loaded module, please check your build's rebase
  158. log at <releasedir>\bin\build_logs\timebuild\ntrebase.log for module which may
  159. contain the address if it were loaded.
  160.  
  161. IP_IN_FREE_BLOCK: 6418366
  162.  
  163. THREAD_ATTRIBUTES:
  164. OS_LOCALE: DAN
  165.  
  166. PROBLEM_CLASSES:
  167.  
  168. ID: [0n309]
  169. Type: [@ACCESS_VIOLATION]
  170. Class: Addendum
  171. Scope: BUCKET_ID
  172. Name: Omit
  173. Data: Omit
  174. PID: [Unspecified]
  175. TID: [0x13dc]
  176. Frame: [0] : unknown!unknown
  177.  
  178. ID: [0n283]
  179. Type: [INVALID_POINTER_EXECUTE]
  180. Class: Primary
  181. Scope: BUCKET_ID
  182. Name: Add
  183. Data: Omit
  184. PID: [Unspecified]
  185. TID: [0x13dc]
  186. Frame: [0] : unknown!unknown
  187.  
  188. ID: [0n291]
  189. Type: [SOFTWARE_NX_FAULT]
  190. Class: Primary
  191. Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
  192. BUCKET_ID
  193. Name: Add
  194. Data: Omit
  195. PID: [0x264c]
  196. TID: [0x13dc]
  197. Frame: [0] : unknown!unknown
  198.  
  199. BUGCHECK_STR: APPLICATION_FAULT_SOFTWARE_NX_FAULT_INVALID_POINTER_EXECUTE
  200.  
  201. PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT
  202.  
  203. LAST_CONTROL_TRANSFER: from 71ba0847 to 06418366
  204.  
  205. STACK_TEXT:
  206. WARNING: Frame IP not in any known module. Following frames may be wrong.
  207. 037dfac0 71ba0847 00408de8 d6cbed41 00000000 0x6418366
  208. 037dfaec 71babde1 76f47d40 003ef408 037dfb14 AudioSes!CAudioSessionControl::FinalRelease+0x165
  209. 037dfafc 71bafaae 0040c550 003ef408 71bafc0f AudioSes!CComNoDeleteObject<CAudioSessionControl>::Release+0x21
  210. 037dfb08 71bafc0f 037dfb50 037dfb44 71bafe4d AudioSes!StreamSwitchContext::~StreamSwitchContext+0x12
  211. 037dfb14 71bafe4d 00000001 003daf60 71bb118c AudioSes!StreamSwitchContext::`scalar deleting destructor'+0xd
  212. 037dfb20 71bb118c d6cbece9 76f47d40 003daf60 AudioSes!ATL::CAutoPtr<StreamSwitchContext>::Free+0x12
  213. 037dfb44 76f47cfa 037dfba0 003ef408 003dafc0 AudioSes!CAudioSessionControl::StreamSwitchAudioSession+0x28
  214. 037dfb64 76f309a1 037dfba0 003dafc0 60246fc8 ntdll!TppSimplepExecuteCallback+0x102
  215. 037dfcb4 757d343d 003fd060 037dfd00 76f19832 ntdll!TppWorkerThread+0x562
  216. 037dfcc0 76f19832 003fd060 60246e7c 00000000 kernel32!BaseThreadInitThunk+0xe
  217. 037dfd00 76f19805 76f304bc 003fd060 00000000 ntdll!__RtlUserThreadStart+0x70
  218. 037dfd18 00000000 76f304bc 003fd060 00000000 ntdll!_RtlUserThreadStart+0x1b
  219.  
  220.  
  221. THREAD_SHA1_HASH_MOD_FUNC: ccb4ea9b02346adb821709165ee7c016063328d4
  222.  
  223. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 1ec00a74d0839884163f987ba3141fccfe4f1476
  224.  
  225. THREAD_SHA1_HASH_MOD: 8a44f92c62ecd42e876f95f4e110e28d258dfb44
  226.  
  227. FAULT_INSTR_CODE: d8be8b
  228.  
  229. SYMBOL_STACK_INDEX: 1
  230.  
  231. SYMBOL_NAME: audioses!CAudioSessionControl::FinalRelease+165
  232.  
  233. FOLLOWUP_NAME: MachineOwner
  234.  
  235. MODULE_NAME: AudioSes
  236.  
  237. IMAGE_NAME: AudioSes.dll
  238.  
  239. DEBUG_FLR_IMAGE_TIMESTAMP: 576020f6
  240.  
  241. STACK_COMMAND: ~6s ; .ecxr ; kb
  242.  
  243. FAILURE_BUCKET_ID: SOFTWARE_NX_FAULT_c0000005_AudioSes.dll!CAudioSessionControl::FinalRelease
  244.  
  245. BUCKET_ID: APPLICATION_FAULT_SOFTWARE_NX_FAULT_INVALID_POINTER_EXECUTE_BAD_IP_audioses!CAudioSessionControl::FinalRelease+165
  246.  
  247. FAILURE_EXCEPTION_CODE: c0000005
  248.  
  249. FAILURE_IMAGE_NAME: AudioSes.dll
  250.  
  251. BUCKET_ID_IMAGE_STR: AudioSes.dll
  252.  
  253. FAILURE_MODULE_NAME: AudioSes
  254.  
  255. BUCKET_ID_MODULE_STR: AudioSes
  256.  
  257. FAILURE_FUNCTION_NAME: CAudioSessionControl::FinalRelease
  258.  
  259. BUCKET_ID_FUNCTION_STR: CAudioSessionControl::FinalRelease
  260.  
  261. BUCKET_ID_OFFSET: 165
  262.  
  263. BUCKET_ID_MODTIMEDATESTAMP: 576020f6
  264.  
  265. BUCKET_ID_MODCHECKSUM: 382bd
  266.  
  267. BUCKET_ID_MODVER_STR: 6.1.7601.23471
  268.  
  269. BUCKET_ID_PREFIX_STR: APPLICATION_FAULT_SOFTWARE_NX_FAULT_INVALID_POINTER_EXECUTE_BAD_IP_
  270.  
  271. FAILURE_PROBLEM_CLASS: APPLICATION_FAULT
  272.  
  273. FAILURE_SYMBOL_NAME: AudioSes.dll!CAudioSessionControl::FinalRelease
  274.  
  275. TARGET_TIME: 2018-08-06T11:03:59.000Z
  276.  
  277. OSBUILD: 7601
  278.  
  279. OSSERVICEPACK: 24168
  280.  
  281. SERVICEPACK_NUMBER: 0
  282.  
  283. OS_REVISION: 0
  284.  
  285. OSPLATFORM_TYPE: x86
  286.  
  287. OSNAME: Windows 7
  288.  
  289. OSEDITION: Windows 7 WinNt (Service Pack 1) SingleUserTS
  290.  
  291. USER_LCID: 0
  292.  
  293. OSBUILD_TIMESTAMP: 2018-06-08 17:58:32
  294.  
  295. BUILDDATESTAMP_STR: 180608-0600
  296.  
  297. BUILDLAB_STR: win7sp1_ldr
  298.  
  299. BUILDOSVER_STR: 6.1.7601.24168
  300.  
  301. ANALYSIS_SESSION_ELAPSED_TIME: 694
  302.  
  303. ANALYSIS_SOURCE: UM
  304.  
  305. FAILURE_ID_HASH_STRING: um:software_nx_fault_c0000005_audioses.dll!caudiosessioncontrol::finalrelease
  306.  
  307. FAILURE_ID_HASH: {ec356f51-ad82-b6d3-5a7c-a675287b24e7}
  308.  
  309. Followup: MachineOwner
  310. ---------
  311.  
  312. 0:006> k
  313. # ChildEBP RetAddr
  314. WARNING: Frame IP not in any known module. Following frames may be wrong.
  315. 00 037dfac0 71ba0847 0x6418366
  316. 01 037dfaec 71babde1 AudioSes!CAudioSessionControl::FinalRelease+0x165
  317. 02 037dfafc 71bafaae AudioSes!CComNoDeleteObject<CAudioSessionControl>::Release+0x21
  318. 03 037dfb08 71bafc0f AudioSes!StreamSwitchContext::~StreamSwitchContext+0x12
  319. 04 037dfb14 71bafe4d AudioSes!StreamSwitchContext::`scalar deleting destructor'+0xd
  320. 05 037dfb20 71bb118c AudioSes!ATL::CAutoPtr<StreamSwitchContext>::Free+0x12
  321. 06 037dfb44 76f47cfa AudioSes!CAudioSessionControl::StreamSwitchAudioSession+0x28
  322. 07 037dfb64 76f309a1 ntdll!TppSimplepExecuteCallback+0x102
  323. 08 037dfcb4 757d343d ntdll!TppWorkerThread+0x562
  324. 09 037dfcc0 76f19832 kernel32!BaseThreadInitThunk+0xe
  325. 0a 037dfd00 76f19805 ntdll!__RtlUserThreadStart+0x70
  326. 0b 037dfd18 00000000 ntdll!_RtlUserThreadStart+0x1b
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!