We have version 2.0.3. Where do we get the newest download? But I was
hoping that'd be last resort...
I ran IISState and below is the output. As you can see from Thread ID 8,
cosign.dll is crashing. I posted to an IIS newgroup and was told that it
( the filter) appears to be corrupting memory in the process (e.g.
overrunning allocations).
Thanks for the help,
Beth
Opened log file 'C:\iisstate\output\IISState-3816.log'
***********************
Starting new log output
IISState version 3.3.1
Mon Mar 17 16:43:02 2008
OS = Windows 2003 Server
Executable: inetinfo.exe
PID = 3816
Note: Thread times are formatted as HH:MM:SS.ms
***********************
IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed: ntdll!RtlpCoalesceFreeBlocks
*Thread ID: 8
System Thread ID: 1380
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\Program Files\IISCosign\Cosign.dll -
Thread Type: Other
# ChildEBP RetAddr
00 01a2a1b4 7c82a82b ntdll!RtlpCoalesceFreeBlocks+0x12a
01 01a2a29c 10009fe5 ntdll!RtlFreeHeap+0x38e
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 01a2a2dc 10008740 Cosign!HttpFilterProc+0x2d95
03 025741f4 02572500 Cosign!HttpFilterProc+0x14f0
04 02574208 5aadba92 0x2572500
05 071a0002 00000000 0x5aadba92
Closing open log file C:\iisstate\output\IISState-3816.log
Opened log file 'C:\iisstate\output\IISState-3816.log'*
***********************
Starting new log output
IISState version 3.3.1
Mon Mar 17 16:43:03 2008
OS = Windows 2003 Server
Executable: inetinfo.exe
PID = 3816
Note: Thread times are formatted as HH:MM:SS.ms
***********************
Thread ID: 0
System Thread ID: e70
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006f99c 7c82776b ntdll!KiFastSystemCallRet
01 0006f9a0 77e418b2 ntdll!NtReadFile+0xc
02 0006fa08 77f65edb kernel32!ReadFile+0x16c
03 0006fa34 77f65f82 ADVAPI32!ScGetPipeInput+0x2a
04 0006faa8 77fb75af ADVAPI32!ScDispatcherLoop+0x51
05 0006fcec 010027be ADVAPI32!StartServiceCtrlDispatcherA+0x93
06 0006fe1c 01002969 inetinfo!StartDispatchTable+0x277
07 0006ff44 0100339d inetinfo!main+0x117
08 0006ffc0 77e6f23b inetinfo!mainCRTStartup+0x12f
09 0006fff0 00000000 kernel32!BaseProcessStart+0x23
Thread ID: 1
System Thread ID: 1148
Kernel Time: 0:0:0.187
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0097fb3c 7c827d0b ntdll!KiFastSystemCallRet
01 0097fb40 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0097fbb0 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0097fbc4 5a364662 kernel32!WaitForSingleObject+0x12
04 0097fbd4 5a366e3f w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0097fbdc 5a3af42d w3dt!UlAtqStartListen+0x2d
06 0097fbec 5a3bc335 w3core!W3_SERVER::StartListen+0xbd
07 0097fe40 01002c3c w3core!UlW3Start+0x26e
08 0097fea4 01002ed7 inetinfo!LaunchWorkerProcess+0x159
09 0097ffb8 77e64829 inetinfo!W3SVCThreadEntry+0x55
0a 0097ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 2
System Thread ID: f14
Kernel Time: 0:0:0.46
User Time: 0:0:0.125
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 009bfcb8 7c827d0b ntdll!KiFastSystemCallRet
01 009bfcbc 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 009bfd2c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 009bfd40 649f2674 kernel32!WaitForSingleObject+0x12
04 009bfd68 010024b3 iisadmin!ServiceEntry+0x28a
05 009bffa4 77f65e91 inetinfo!InetinfoStartService+0x2cc
06 009bffb8 77e64829 ADVAPI32!ScSvcctrlThreadW+0x21
07 009bffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 3
System Thread ID: 1098
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00bbff9c 7c826f4b ntdll!KiFastSystemCallRet
01 00bbffa0 7c83d424 ntdll!NtDelayExecution+0xc
02 00bbffb8 77e64829 ntdll!RtlpTimerThread+0x47
03 00bbffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 4
System Thread ID: 1368
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00f9feac 7c827cfb ntdll!KiFastSystemCallRet
01 00f9feb0 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 00f9ff58 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 00f9ff74 56f951df kernel32!WaitForMultipleObjects+0x18
04 00f9ffa0 56f969f6 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x67
05 00f9ffb8 77e64829 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x5f
06 00f9ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 5
System Thread ID: 11c8
Kernel Time: 0:0:0.0
User Time: 0:0:0.46
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0192fe18 7c82783b ntdll!KiFastSystemCallRet
01 0192fe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc
02 0192ff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 0192ff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
04 0192ffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
05 0192ffb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b
06 0192ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 6
System Thread ID: e00
Kernel Time: 0:0:0.31
User Time: 0:0:0.46
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 019afe18 7c82783b ntdll!KiFastSystemCallRet
01 019afe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc
02 019aff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 019aff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
04 019affac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
05 019affb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b
06 019affec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 7
System Thread ID: 1384
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 019efcec 7c827cfb ntdll!KiFastSystemCallRet
01 019efcf0 7c83c78e ntdll!NtWaitForMultipleObjects+0xc
02 019effb8 77e64829 ntdll!RtlpWaitThread+0x161
03 019effec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 8
System Thread ID: 1380
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01a2a1b4 7c82a82b ntdll!RtlpCoalesceFreeBlocks+0x12a
01 01a2a29c 10009fe5 ntdll!RtlFreeHeap+0x38e
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 01a2a2dc 10008740 Cosign!HttpFilterProc+0x2d95
03 025741f4 02572500 Cosign!HttpFilterProc+0x14f0
04 02574208 5aadba92 0x2572500
05 071a0002 00000000 0x5aadba92
Thread ID: 9
System Thread ID: 1378
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 01a6ff24 7c8277db ntdll!KiFastSystemCallRet
01 01a6ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 01a6ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 01a6ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 01a6ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 01a6ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 01a6ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 10
System Thread ID: 102c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 01aaff24 7c8277db ntdll!KiFastSystemCallRet
01 01aaff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 01aaff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 01aaff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 01aaffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 01aaffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 01aaffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 11
System Thread ID: 1470
Kernel Time: 0:0:0.312
User Time: 0:0:0.796
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 01aeff24 7c8277db ntdll!KiFastSystemCallRet
01 01aeff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 01aeff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 01aeff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 01aeffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 01aeffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 01aeffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 12
System Thread ID: 1340
Kernel Time: 0:0:0.62
User Time: 0:0:0.15
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 01fefe18 7c82783b ntdll!KiFastSystemCallRet
01 01fefe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc
02 01feff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 01feff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
04 01feffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
05 01feffb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b
06 01feffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 13
System Thread ID: a28
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0241fa84 7c827d0b ntdll!KiFastSystemCallRet
01 0241fa88 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0241faf8 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0241fb0c 5a3b820f kernel32!WaitForSingleObject+0x12
04 0241ffb8 77e64829 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 0241ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 14
System Thread ID: d68
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 02d1ff70 7c8277db ntdll!KiFastSystemCallRet
01 02d1ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 02d1ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 02d1ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 15
System Thread ID: e14
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00bfff70 7c8277db ntdll!KiFastSystemCallRet
01 00bfff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 00bfffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 00bfffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 16
System Thread ID: 15f8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0063ff70 7c8277db ntdll!KiFastSystemCallRet
01 0063ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 0063ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 0063ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 17
System Thread ID: 15f8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0063ff70 7c8277db ntdll!KiFastSystemCallRet
01 0063ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 0063ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 0063ffec 00000000 kernel32!BaseThreadStart+0x34
Closing open log file C:\iisstate\output\IISState-3816.log
Jarod Malestein wrote the following on 3/19/2008 5:10 PM:
What version of the IIS filter and IIS are you using?
If you haven't already, try the 2.1.0 rc1 filter and see if the issue
persists.
--Jarod
On Mar 19, 2008, at 5:00 PM, Beth Jones wrote:
Hello,
We are receiving this error in our event log: faulting application
w3wp.exe , version 6.0.3790.3959, faulting module ntdll.dll, version
5.2.3790.3959, fault address 0x0002b65d.
We re-installed IIS, re-installed Cosign, re-registered msxml4.dll.
Does anyone else have any suggestions? We saw similar posts about
this error dealing with Cosign. Googling the error most times points
to ISAPI filter issues. But we can not figure out what is going on.
Our web sites work except for sites that need to authenticate with
Cosign first.
Thanks,
Beth Jones
~~~~~~~~~~~~~~~~~~~~~~~~~~ Beth Jones Systems Administrator
Bursar/Student Loans & Scholarships Pennsylvania State University
Phone: (814) 863-2600 Fax: (814) 865-6535 Email: [EMAIL PROTECTED]
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
--
~~~~~~~~~~~~~~~~~~~~~~~~~~
Beth Jones
Systems Administrator
Bursar/Student Loans & Scholarships
Pennsylvania State University
Phone: (814) 863-2600
Fax: (814) 865-6535
Email: [EMAIL PROTECTED]
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
