Welcome to HostingForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

InetInfo Buffer Overrun

  
   Web Hosting Problem Solving Community! (Home) -> IIS RSS
Next:  ERROR: Maximum Request Length Exceeded for normal..  
Author Message
Kevin

External


Since: Apr 12, 2007
Posts: 3



(Msg. 1) Posted: Thu Apr 12, 2007 1:32 pm
Post subject: InetInfo Buffer Overrun
Archived from groups: microsoft>public>inetserver>iis (more info?)
Hi,

Within the last week or so I started getting a Buffer Overrun on my Win 2k
Server. I am not sure what this means or how I can resolve it. When the
message box appears on my console, IIS is frozen. If I issue a IISRestart
then IIS is restarted and it starts working again. Can someone point me in a
direction of what I should/could do next?

For the record it is a Win 2k Server with SP4 installed. I have SQL Server,
Exchange and CRM installed on this server.

Thanks

 >> Stay informed about: InetInfo Buffer Overrun 
Back to top
Login to vote
David Wang

External


Since: Dec 22, 2006
Posts: 560



(Msg. 2) Posted: Fri Apr 13, 2007 3:47 am
Post subject: Re: InetInfo Buffer Overrun [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
On Apr 12, 1:32 pm, "Kevin" <k....DeleteThis@Mooressi.com> wrote:
> Hi,
>
> Within the last week or so I started getting a Buffer Overrun on my Win 2k
> Server. I am not sure what this means or how I can resolve it. When the
> message box appears on my console, IIS is frozen. If I issue a IISRestart
> then IIS is restarted and it starts working again. Can someone point me in a
> direction of what I should/could do next?
>
> For the record it is a Win 2k Server with SP4 installed. I have SQL Server,
> Exchange and CRM installed on this server.
>
> Thanks

Use DebugDiag or IISState to capture the crash and post the logs here
for diagnosis.

If you think it is a crash caused by an exploit then you should
contact Microsoft Security.

If you are running non-Microsoft code on the server and it is involved
in the crash, it may cost you support incident fee.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

 >> Stay informed about: InetInfo Buffer Overrun 
Back to top
Login to vote
Kevin

External


Since: Apr 12, 2007
Posts: 3



(Msg. 3) Posted: Fri Apr 13, 2007 11:53 am
Post subject: Re: InetInfo Buffer Overrun [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
David,

I ran IISState and it came up with the following:

DLL (!FunctionName) that failed: ndtll!ZWWaitForSingleObject

any ideas?


"David Wang" <w3.4you.DeleteThis@gmail.com> wrote in message
news:1176461244.873696.261270@b75g2000hsg.googlegroups.com...
> On Apr 12, 1:32 pm, "Kevin" <k....DeleteThis@Mooressi.com> wrote:
>> Hi,
>>
>> Within the last week or so I started getting a Buffer Overrun on my Win
>> 2k
>> Server. I am not sure what this means or how I can resolve it. When the
>> message box appears on my console, IIS is frozen. If I issue a IISRestart
>> then IIS is restarted and it starts working again. Can someone point me
>> in a
>> direction of what I should/could do next?
>>
>> For the record it is a Win 2k Server with SP4 installed. I have SQL
>> Server,
>> Exchange and CRM installed on this server.
>>
>> Thanks
>
> Use DebugDiag or IISState to capture the crash and post the logs here
> for diagnosis.
>
> If you think it is a crash caused by an exploit then you should
> contact Microsoft Security.
>
> If you are running non-Microsoft code on the server and it is involved
> in the crash, it may cost you support incident fee.
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>
>
 >> Stay informed about: InetInfo Buffer Overrun 
Back to top
Login to vote
David Wang

External


Since: Dec 22, 2006
Posts: 560



(Msg. 4) Posted: Fri Apr 13, 2007 1:14 pm
Post subject: Re: InetInfo Buffer Overrun [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Please provide the entire log file contents so that people can help.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//




On Apr 13, 11:53 am, "Kevin" <k... DeleteThis @Mooressi.com> wrote:
> David,
>
> I ran IISState and it came up with the following:
>
> DLL (!FunctionName) that failed: ndtll!ZWWaitForSingleObject
>
> any ideas?
>
> "David Wang" <w3.4... DeleteThis @gmail.com> wrote in message
>
> news:1176461244.873696.261270@b75g2000hsg.googlegroups.com...
>
>
>
> > On Apr 12, 1:32 pm, "Kevin" <k... DeleteThis @Mooressi.com> wrote:
> >> Hi,
>
> >> Within the last week or so I started getting a Buffer Overrun on my Win
> >> 2k
> >> Server. I am not sure what this means or how I can resolve it. When the
> >> message box appears on my console, IIS is frozen. If I issue a IISRestart
> >> then IIS is restarted and it starts working again. Can someone point me
> >> in a
> >> direction of what I should/could do next?
>
> >> For the record it is a Win 2k Server with SP4 installed. I have SQL
> >> Server,
> >> Exchange and CRM installed on this server.
>
> >> Thanks
>
> > Use DebugDiag or IISState to capture the crash and post the logs here
> > for diagnosis.
>
> > If you think it is a crash caused by an exploit then you should
> > contact Microsoft Security.
>
> > If you are running non-Microsoft code on the server and it is involved
> > in the crash, it may cost you support incident fee.
>
> > //David
> >http://w3-4u.blogspot.com
> >http://blogs.msdn.com/David.Wang
> > //- Hide quoted text -
>
> - Show quoted text -
 >> Stay informed about: InetInfo Buffer Overrun 
Back to top
Login to vote
Kevin

External


Since: Apr 12, 2007
Posts: 3



(Msg. 5) Posted: Fri Apr 13, 2007 2:57 pm
Post subject: Re: InetInfo Buffer Overrun [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
David,

here it is:

Opened log file 'C:\iisstate\output\IISState-5124.log'

***********************
Starting new log output
IISState version 3.3.1

Fri Apr 13 10:34:46 2007

OS = Windows 2000
Executable: inetinfo.exe
PID = 5124

Note: Thread times are formatted as HH:MM:SS.ms

***********************


IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed: ntdll!ZwWaitForSingleObject




Thread ID: 0
System Thread ID: 1148
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0ec0f628 7c59a072 ntdll!ZwWaitForSingleObject+0xb
01 0ec0f650 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71
02 0ec0f660 2fa53f2b KERNEL32!WaitForSingleObject+0xf
03 0ec0f674 2fa54f72 CrmIsapi+0x3f2b
04 0ec0f694 2fa57883 CrmIsapi+0x4f72
05 0ec0f6a0 2fa5816b CrmIsapi+0x7883
06 0ec0f6bc 2fa5e272 CrmIsapi+0x816b
07 0ec0f6e8 2fa5e2e5 CrmIsapi+0xe272
08 0ec0f6f8 2fa5c46b CrmIsapi+0xe2e5
09 0ec0f704 2fa5c577 CrmIsapi+0xc46b
0a 0ec0f740 77f8806c CrmIsapi+0xc577
0b 0ec0f760 77f8a980 ntdll!LdrpCallInitRoutine+0x14
0c 0ec0f7c8 7c596a2b ntdll!LdrShutdownProcess+0x11d
0d 0ec0f88c 2f9fbc4d KERNEL32!ExitProcess+0x51
0e 0ec0f8bc 2f9ec97e CrmMetadataCache+0x1bc4d
0f 0ec0f918 2f9ecab2 CrmMetadataCache+0xc97e
10 0ec0f930 2f9f0328 CrmMetadataCache+0xcab2
11 0ec0f968 2f9f51b3 CrmMetadataCache+0x10328
12 0ec0fec0 2f9f8bfc CrmMetadataCache+0x151b3
13 0ec0ffb4 7c57b396 CrmMetadataCache+0x18bfc
14 0ec0ffec 00000000 KERNEL32!BaseThreadStart+0x52
Closing open log file C:\iisstate\output\IISState-5124.log
Opened log file 'C:\iisstate\output\IISState-5124.log'

***********************
Starting new log output
IISState version 3.3.1

Fri Apr 13 10:35:08 2007

OS = Windows 2000
Executable: inetinfo.exe
PID = 5124

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 1148
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0ec0f628 7c59a072 ntdll!ZwWaitForSingleObject+0xb
01 0ec0f650 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71
02 0ec0f660 2fa53f2b KERNEL32!WaitForSingleObject+0xf
03 0ec0f674 2fa54f72 CrmIsapi+0x3f2b
04 0ec0f694 2fa57883 CrmIsapi+0x4f72
05 0ec0f6a0 2fa5816b CrmIsapi+0x7883
06 0ec0f6bc 2fa5e272 CrmIsapi+0x816b
07 0ec0f6e8 2fa5e2e5 CrmIsapi+0xe272
08 0ec0f6f8 2fa5c46b CrmIsapi+0xe2e5
09 0ec0f704 2fa5c577 CrmIsapi+0xc46b
0a 0ec0f740 77f8806c CrmIsapi+0xc577
0b 0ec0f760 77f8a980 ntdll!LdrpCallInitRoutine+0x14
0c 0ec0f7c8 7c596a2b ntdll!LdrShutdownProcess+0x11d
0d 0ec0f88c 2f9fbc4d KERNEL32!ExitProcess+0x51
0e 0ec0f8bc 2f9ec97e CrmMetadataCache+0x1bc4d
0f 0ec0f918 2f9ecab2 CrmMetadataCache+0xc97e
10 0ec0f930 2f9f0328 CrmMetadataCache+0xcab2
11 0ec0f968 2f9f51b3 CrmMetadataCache+0x10328
12 0ec0fec0 2f9f8bfc CrmMetadataCache+0x151b3
13 0ec0ffb4 7c57b396 CrmMetadataCache+0x18bfc
14 0ec0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 1
System Thread ID: b08
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: 1148
Thread Type: Other
# ChildEBP RetAddr
00 1188fc24 77f8f295 ntdll!ZwWaitForSingleObject+0xb
01 1188fc98 77f87f26 ntdll!RtlpWaitForCriticalSection+0x9e
02 1188fca0 77f839a1 ntdll!RtlEnterCriticalSection+0x46
03 1188fd1c 77f91b93 ntdll!LdrpInitialize+0x1a7
04 00000000 00000000 ntdll!KiUserApcDispatcher+0x7

Closing open log file C:\iisstate\output\IISState-5124.log

"David Wang" <w3.4you DeleteThis @gmail.com> wrote in message
news:1176495255.428284.308540@o5g2000hsb.googlegroups.com...
> Please provide the entire log file contents so that people can help.
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>
>
>
>
> On Apr 13, 11:53 am, "Kevin" <k... DeleteThis @Mooressi.com> wrote:
>> David,
>>
>> I ran IISState and it came up with the following:
>>
>> DLL (!FunctionName) that failed: ndtll!ZWWaitForSingleObject
>>
>> any ideas?
>>
>> "David Wang" <w3.4... DeleteThis @gmail.com> wrote in message
>>
>> news:1176461244.873696.261270@b75g2000hsg.googlegroups.com...
>>
>>
>>
>> > On Apr 12, 1:32 pm, "Kevin" <k... DeleteThis @Mooressi.com> wrote:
>> >> Hi,
>>
>> >> Within the last week or so I started getting a Buffer Overrun on my
>> >> Win
>> >> 2k
>> >> Server. I am not sure what this means or how I can resolve it. When
>> >> the
>> >> message box appears on my console, IIS is frozen. If I issue a
>> >> IISRestart
>> >> then IIS is restarted and it starts working again. Can someone point
>> >> me
>> >> in a
>> >> direction of what I should/could do next?
>>
>> >> For the record it is a Win 2k Server with SP4 installed. I have SQL
>> >> Server,
>> >> Exchange and CRM installed on this server.
>>
>> >> Thanks
>>
>> > Use DebugDiag or IISState to capture the crash and post the logs here
>> > for diagnosis.
>>
>> > If you think it is a crash caused by an exploit then you should
>> > contact Microsoft Security.
>>
>> > If you are running non-Microsoft code on the server and it is involved
>> > in the crash, it may cost you support incident fee.
>>
>> > //David
>> >http://w3-4u.blogspot.com
>> >http://blogs.msdn.com/David.Wang
>> > //- Hide quoted text -
>>
>> - Show quoted text -
>
>
 >> Stay informed about: InetInfo Buffer Overrun 
Back to top
Login to vote
David Wang

External


Since: Dec 22, 2006
Posts: 560



(Msg. 6) Posted: Fri Apr 13, 2007 8:59 pm
Post subject: Re: InetInfo Buffer Overrun [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Actually, there is no buffer overrun in inetinfo. This is an ordinary
crash of the inetinfo.exe process caused by a logical error, either in
CRMISAPI.DLL or CRMMetadataCache.dll.

I suggest following up with the software support personel of your CRM
software. They are responsible for determining how your server is
getting into this state, and they also own the symbols to resolve the
part of the stack where the logical error happened.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//



On Apr 13, 2:57 pm, "Kevin" <k....TakeThisOut@Mooressi.com> wrote:
> David,
>
> here it is:
>
> Opened log file 'C:\iisstate\output\IISState-5124.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Fri Apr 13 10:34:46 2007
>
> OS = Windows 2000
> Executable: inetinfo.exe
> PID = 5124
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
> IIS has crashed...
> Beginning Analysis
> DLL (!FunctionName) that failed: ntdll!ZwWaitForSingleObject
>
> Thread ID: 0
> System Thread ID: 1148
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0ec0f628 7c59a072 ntdll!ZwWaitForSingleObject+0xb
> 01 0ec0f650 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71
> 02 0ec0f660 2fa53f2b KERNEL32!WaitForSingleObject+0xf
> 03 0ec0f674 2fa54f72 CrmIsapi+0x3f2b
> 04 0ec0f694 2fa57883 CrmIsapi+0x4f72
> 05 0ec0f6a0 2fa5816b CrmIsapi+0x7883
> 06 0ec0f6bc 2fa5e272 CrmIsapi+0x816b
> 07 0ec0f6e8 2fa5e2e5 CrmIsapi+0xe272
> 08 0ec0f6f8 2fa5c46b CrmIsapi+0xe2e5
> 09 0ec0f704 2fa5c577 CrmIsapi+0xc46b
> 0a 0ec0f740 77f8806c CrmIsapi+0xc577
> 0b 0ec0f760 77f8a980 ntdll!LdrpCallInitRoutine+0x14
> 0c 0ec0f7c8 7c596a2b ntdll!LdrShutdownProcess+0x11d
> 0d 0ec0f88c 2f9fbc4d KERNEL32!ExitProcess+0x51
> 0e 0ec0f8bc 2f9ec97e CrmMetadataCache+0x1bc4d
> 0f 0ec0f918 2f9ecab2 CrmMetadataCache+0xc97e
> 10 0ec0f930 2f9f0328 CrmMetadataCache+0xcab2
> 11 0ec0f968 2f9f51b3 CrmMetadataCache+0x10328
> 12 0ec0fec0 2f9f8bfc CrmMetadataCache+0x151b3
> 13 0ec0ffb4 7c57b396 CrmMetadataCache+0x18bfc
> 14 0ec0ffec 00000000 KERNEL32!BaseThreadStart+0x52
> Closing open log file C:\iisstate\output\IISState-5124.log
> Opened log file 'C:\iisstate\output\IISState-5124.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Fri Apr 13 10:35:08 2007
>
> OS = Windows 2000
> Executable: inetinfo.exe
> PID = 5124
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
> Thread ID: 0
> System Thread ID: 1148
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0ec0f628 7c59a072 ntdll!ZwWaitForSingleObject+0xb
> 01 0ec0f650 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71
> 02 0ec0f660 2fa53f2b KERNEL32!WaitForSingleObject+0xf
> 03 0ec0f674 2fa54f72 CrmIsapi+0x3f2b
> 04 0ec0f694 2fa57883 CrmIsapi+0x4f72
> 05 0ec0f6a0 2fa5816b CrmIsapi+0x7883
> 06 0ec0f6bc 2fa5e272 CrmIsapi+0x816b
> 07 0ec0f6e8 2fa5e2e5 CrmIsapi+0xe272
> 08 0ec0f6f8 2fa5c46b CrmIsapi+0xe2e5
> 09 0ec0f704 2fa5c577 CrmIsapi+0xc46b
> 0a 0ec0f740 77f8806c CrmIsapi+0xc577
> 0b 0ec0f760 77f8a980 ntdll!LdrpCallInitRoutine+0x14
> 0c 0ec0f7c8 7c596a2b ntdll!LdrShutdownProcess+0x11d
> 0d 0ec0f88c 2f9fbc4d KERNEL32!ExitProcess+0x51
> 0e 0ec0f8bc 2f9ec97e CrmMetadataCache+0x1bc4d
> 0f 0ec0f918 2f9ecab2 CrmMetadataCache+0xc97e
> 10 0ec0f930 2f9f0328 CrmMetadataCache+0xcab2
> 11 0ec0f968 2f9f51b3 CrmMetadataCache+0x10328
> 12 0ec0fec0 2f9f8bfc CrmMetadataCache+0x151b3
> 13 0ec0ffb4 7c57b396 CrmMetadataCache+0x18bfc
> 14 0ec0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
> Thread ID: 1
> System Thread ID: b08
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Other information: Thread is waiting for a lock to be released. Looking for
> lock owner.
> Owning thread System ID: 1148
> Thread Type: Other
> # ChildEBP RetAddr
> 00 1188fc24 77f8f295 ntdll!ZwWaitForSingleObject+0xb
> 01 1188fc98 77f87f26 ntdll!RtlpWaitForCriticalSection+0x9e
> 02 1188fca0 77f839a1 ntdll!RtlEnterCriticalSection+0x46
> 03 1188fd1c 77f91b93 ntdll!LdrpInitialize+0x1a7
> 04 00000000 00000000 ntdll!KiUserApcDispatcher+0x7
>
> Closing open log file C:\iisstate\output\IISState-5124.log
>
> "David Wang" <w3.4....TakeThisOut@gmail.com> wrote in message
>
> news:1176495255.428284.308540@o5g2000hsb.googlegroups.com...
>
>
>
> > Please provide the entire log file contents so that people can help.
>
> > //David
> >http://w3-4u.blogspot.com
> >http://blogs.msdn.com/David.Wang
> > //
>
> > On Apr 13, 11:53 am, "Kevin" <k....TakeThisOut@Mooressi.com> wrote:
> >> David,
>
> >> I ran IISState and it came up with the following:
>
> >> DLL (!FunctionName) that failed: ndtll!ZWWaitForSingleObject
>
> >> any ideas?
>
> >> "David Wang" <w3.4....TakeThisOut@gmail.com> wrote in message
>
> >>news:1176461244.873696.261270@b75g2000hsg.googlegroups.com...
>
> >> > On Apr 12, 1:32 pm, "Kevin" <k....TakeThisOut@Mooressi.com> wrote:
> >> >> Hi,
>
> >> >> Within the last week or so I started getting a Buffer Overrun on my
> >> >> Win
> >> >> 2k
> >> >> Server. I am not sure what this means or how I can resolve it. When
> >> >> the
> >> >> message box appears on my console, IIS is frozen. If I issue a
> >> >> IISRestart
> >> >> then IIS is restarted and it starts working again. Can someone point
> >> >> me
> >> >> in a
> >> >> direction of what I should/could do next?
>
> >> >> For the record it is a Win 2k Server with SP4 installed. I have SQL
> >> >> Server,
> >> >> Exchange and CRM installed on this server.
>
> >> >> Thanks
>
> >> > Use DebugDiag or IISState to capture the crash and post the logs here
> >> > for diagnosis.
>
> >> > If you think it is a crash caused by an exploit then you should
> >> > contact Microsoft Security.
>
> >> > If you are running non-Microsoft code on the server and it is involved
> >> > in the crash, it may cost you support incident fee.
>
> >> > //David
> >> >http://w3-4u.blogspot.com
> >> >http://blogs.msdn.com/David.Wang
> >> > //- Hide quoted text -
>
> >> - Show quoted text -- Hide quoted text -
>
> - Show quoted text -
 >> Stay informed about: InetInfo Buffer Overrun 
Back to top
Login to vote
Display posts from previous:   
   Web Hosting Problem Solving Community! (Home) -> IIS All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]