Application pool error

Hello all.

I'm not sure if thsi is the right place to post my question, but any way,
here it is.

We have some sharepoint servers, runing in a medium farm. They are not
working to hard, but still they are working.

The servers are uptodate on patches and servicepacks from ms.

But some times the Sharepoint app pool stops responding, and we have to do a
manualy recycle of it.

we have been looking to find a solution to the problem, but can't find
anything.

I have made a memory dump, to see if it would help, see the result below.

It teels me absolutly nothing, except there is an overlap.

Any one who has any ideas to what can be wrong? Or even better an idea to
what i can do to fix the problem.

/regards

Jan


*******************************************************************************
*
*
* Exception Analysis
*
*
*
*******************************************************************************


FAULTING_IP:
ntdll!DbgBreakPoint+0
7c81a3e1 cc int 3

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 7c81a3e1 (ntdll!DbgBreakPoint)
ExceptionCode: 80000003 (Break instruction exception)
ExceptionFlags: 00000000
NumberParameters: 3
Parameter[0]: 00000000
Parameter[1]: 88f51020
Parameter[2]: 00000003

DEFAULT_BUCKET_ID: CORRUPT_MODULELIST

PROCESS_NAME: w3wp.exe

OVERLAPPED_MODULE: Address regions for 'microsoft_sharepoint_portal' and
'mscorwks.dll' overlap

ERROR_CODE: (NTSTATUS) 0x80000003 - {UNDTAGELSE} Afbrydelsespunkt Et
afbrydelsespunkt er n et.

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

STACK_TEXT:
13c8ffc8 7c83fdd8 00000005 00000004 00000001 ntdll!DbgBreakPoint
13c8fff4 00000000 00000000 00000000 00000000 ntdll!DbgUiRemoteBreakin+0x36


FOLLOWUP_IP:
ntdll!DbgBreakPoint+0
7c81a3e1 cc int 3

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: ntdll!DbgBreakPoint+0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: ntdll

IMAGE_NAME: ntdll.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 45d70ad8

FAULTING_THREAD: 00000280

PRIMARY_PROBLEM_CLASS: CORRUPT_MODULELIST

BUGCHECK_STR:
APPLICATION_FAULT_CORRUPT_MODULELIST_OVERLAPPED_MODULE_STATUS_BREAKPOINT

STACK_COMMAND: ~63s; .ecxr ; kb

BUCKET_ID: MANUAL_BREAKIN

Followup: MachineOwner
---------

On Oct 12, 1:29 am, JanDam <Jan... DeleteThis @discussions.microsoft.com> wrote:
> Hello all.
>
> I'm not sure if thsi is the right place to post my question, but any way,
> here it is.
>
> We have some sharepoint servers, runing in a medium farm. They are not
> working to hard, but still they are working.
>
> The servers are uptodate on patches and servicepacks from ms.
>
> But some times the Sharepoint app pool stops responding, and we have to do a
> manualy recycle of it.
>
> we have been looking to find a solution to the problem, but can't find
> anything.
>
> I have made a memory dump, to see if it would help, see the result below.
>
> It teels me absolutly nothing, except there is an overlap.
>
> Any one who has any ideas to what can be wrong? Or even better an idea to
> what i can do to fix the problem.
>
> /regards
>
> Jan
>
> ***************************************************************************­****
> *
> *
> * Exception Analysis
> *
> *
> *
> ***************************************************************************­****
>
> FAULTING_IP:
> ntdll!DbgBreakPoint+0
> 7c81a3e1 cc int 3
>
> EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
> ExceptionAddress: 7c81a3e1 (ntdll!DbgBreakPoint)
> ExceptionCode: 80000003 (Break instruction exception)
> ExceptionFlags: 00000000
> NumberParameters: 3
> Parameter[0]: 00000000
> Parameter[1]: 88f51020
> Parameter[2]: 00000003
>
> DEFAULT_BUCKET_ID: CORRUPT_MODULELIST
>
> PROCESS_NAME: w3wp.exe
>
> OVERLAPPED_MODULE: Address regions for 'microsoft_sharepoint_portal' and
> 'mscorwks.dll' overlap
>
> ERROR_CODE: (NTSTATUS) 0x80000003 - {UNDTAGELSE} Afbrydelsespunkt Et
> afbrydelsespunkt er n et.
>
> NTGLOBALFLAG: 0
>
> APPLICATION_VERIFIER_FLAGS: 0
>
> STACK_TEXT:
> 13c8ffc8 7c83fdd8 00000005 00000004 00000001 ntdll!DbgBreakPoint
> 13c8fff4 00000000 00000000 00000000 00000000 ntdll!DbgUiRemoteBreakin+0x36
>
> FOLLOWUP_IP:
> ntdll!DbgBreakPoint+0
> 7c81a3e1 cc int 3
>
> SYMBOL_STACK_INDEX: 0
>
> SYMBOL_NAME: ntdll!DbgBreakPoint+0
>
> FOLLOWUP_NAME: MachineOwner
>
> MODULE_NAME: ntdll
>
> IMAGE_NAME: ntdll.dll
>
> DEBUG_FLR_IMAGE_TIMESTAMP: 45d70ad8
>
> FAULTING_THREAD: 00000280
>
> PRIMARY_PROBLEM_CLASS: CORRUPT_MODULELIST
>
> BUGCHECK_STR:
> APPLICATION_FAULT_CORRUPT_MODULELIST_OVERLAPPED_MODULE_STATUS_BREAKPOINT
>
> STACK_COMMAND: ~63s; .ecxr ; kb
>
> BUCKET_ID: MANUAL_BREAKIN
>
> Followup: MachineOwner
> ---------



You're going to have to report this to Microsoft PSS as a bug and see
if they have a fix for it. They'll initially charge you for the call
but once they see this, you should be refunded the charge.

You're not going to be able to fix this on your own.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//