views:

184

answers:

0

The remote desktop server is XP professional version 2002 SP3

Our program is written in MS visual C and calls into a dll written inmanaged .NET C++ code. All the code is written is Visual studio 2008.

running ntsd I get two different outputs for the last few lines of "Executable search path"

non-crash case:

.....snipped up to LAST line that is the same.......... ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL ModLoad: 773d0000 774d3000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont rols_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll ModLoad: 01050000 01067000 C:\WINDOWS\system32\odbcint.dll ModLoad: 5d360000 5d36d000 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b 9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\MFC90ENU.DLL ModLoad: 015a0000 015f9000 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.DebugCRT_1fc8b 3b9a1e18e3b_9.0.21022.8_x-ww_597c3456\msvcm90d.dll ModLoad: 01600000 0160e000 D:\artifacts\artf2549\install\stdtransqa\bin\Critic alEditor.dll Break instruction exception - code 80000003 (first chance) eax=00251eb4 ebx=7ffdf000 ecx=00000006 edx=00000040 esi=00251f48 edi=00251eb4 eip=7c90120e esp=0012fb20 ebp=0012fc94 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202 * ERROR: Symbol file could not be found. Defaulted to export symbols for ntdl l.dll - ntdll!DbgBreakPoint: 7c90120e cc int 3 0:000>

crash case:

.....snipped up to LAST line that is the same.......... ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll ModLoad: 5b860000 5b8b5000 C:\WINDOWS\system32\NETAPI32.dll ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL Access violation - code c0000005 (first chance) eax=feeffddc ebx=feeefeee ecx=feeffdda edx=00000000 esi=feeefeee edi=0012f3e4 eip=7c91cb4b esp=0012f0cc ebp=0012f3c8 iopl=0 nv up ei ng nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010286 * ERROR: Symbol file could not be found. Defaulted to export symbols for ntdl l.dll - ntdll!RtlGetActiveActivationContext+580: 7c91cb4b 6683395c cmp word ptr [ecx],0x5c ds:0023:feeffdda=???? 0:000>

the "stdtransqa\bin\CriticalEditor.dll" in the non-crash case is one of our .NET dlls.