ntdll!KiUserExceptionDispatcher+0xe
jrun!HttpFilterProc+0x814
> =====
> "E:\InetPub\scripts\jrun.dll is failing".
The source code that comes with jrun may or may not correspond to the dll I
have,
but in that source there's a try/except block around exported functions, so
the symptoms suggest that an additional exception occurs in the
except-handler.
Why IIS would die suddenly as a result of this is anybody's guess...
I would recommend switching to apache anyway I suspect that the intermittent
nature of the problem could be indicative of somebody running exploits
against your installation.
Apache is safer.
Several notes:
ntdll!KiUserExceptionDispatcher
is simply the standard exception-handling code
jrun!HttpFilterProc+0x814
is not necessarily the filter: the fault point is found 0x814 bytes
after
the entrypoint to HttpFilterProc, which on my system is:
ordinal hint name
1 0 GetExtensionVersion (00001440)
2 1 GetFilterVersion (00001840)
3 2 HttpExtensionProc (00001480)
4 3 HttpFilterProc (000018D0)
(0x18D0 + 0x0814 = 0x20E4)
so if we have the same dll (mine is 40960 bytes,
2001-02-08,10:55:40)
then the fault is from a function in the dll - the following is an
analysis of the disassembly:
10001000 fn_?
10001013 calls 10001BA0 ( -> -> -> fault )
100011D1 calls 10001BA0 ( -> -> -> fault )
10001431 return
10001440 GetExtensionVersion
10001476 return
10001480 HttpExtensionProc
100014C9 calls 10001BA0 ( -> -> -> fault )
10001832 return
10001840 GetFilterVersion
1000184F calls 10001BA0 ( -> -> -> fault )
100018C1 return
100018D0 HttpFilterProc
1000190D calls 10001BA0 ( -> -> -> fault )
10001B9C return
10001BA0 fn_?
10001F87 calls 10002020 ( -> -> fault )
1000201C return
10002020 fn_?
1000202F calls 100020C0 ( -> fault )
100020B1 return
100020C0 fn_?
100020E4 FAULT <-------------- exception from here
100025F0 return
so you can see that it seems to be an internal function in the dll ..
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Your ad could be here. Monies from ads go to support these lists and provide more
resources for the community. http://www.fusionauthority.com/ads.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
