What can cause the following error: ntdll!KiFastSystemCallRet

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Norbert Köhler
    New Member
    • Jan 2011
    • 1

    #1

    What can cause the following error: ntdll!KiFastSystemCallRet

    Hi all,

    After a couple of hours my application(C#) freezes randomly.

    I opened the crash dump file with windbg:
    Symbol search path is: srv*c:\symbols* http://msdl.microsoft. com/download/symbols
    Executable search path is: srv*c:\symbols* http://msdl.microsoft. com/download/symbols
    Windows XP Version 2600 (Service Pack 3) MP (4 procs) Free x86 compatible
    Product: WinNt, suite: SingleUserTS
    Machine Name:
    Debug session time: Thu Jan 27 03:19:26.000 2011 (UTC + 1:00)
    System Uptime: not available
    Process Uptime: 0 days 6:38:53.000
    ............... ............... ............... ............... ....
    ...........
    Loading unloaded module list
    .....
    This dump file has an exception of interest stored in it.
    The stored exception information can be accessed via .ecxr.
    (ba8.bac): Application hang - code cfffffff (first/second chance not available)
    eax=7ffde000 ebx=0012ebb0 ecx=00000000 edx=7c90e514 esi=00000000 edi=7ffdf000
    eip=7c90e514 esp=0012eb88 ebp=0012ec24 iopl=0 nv up ei pl zr na pe nc
    cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
    ntdll!KiFastSys temCallRet:
    7c90e514 c3 ret

    0:000> !analyze -v
    *************** *************** *************** *************** *************** ****
    * *
    * Exception Analysis *
    * *
    *************** *************** *************** *************** *************** ****

    Unable to load image C:\WINDOWS\asse mbly\NativeImag es_v2.0.50727_3 2\mscorlib\7124 a40b9998f7b63c8 6bd1a2125ce26\m scorlib.ni.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for mscorlib.ni.dll
    *** WARNING: Unable to verify timestamp for System.Windows. Forms.ni.dll
    *** WARNING: Unable to verify timestamp for System.ni.dll
    Unable to load image C:\WINDOWS\syst em32\ieframe.dl l, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ieframe.dll

    FAULTING_IP:
    ntdll!KiFastSys temCallRet+0
    7c90e514 c3 ret

    EXCEPTION_RECOR D: ffffffff -- (.exr 0xfffffffffffff fff)
    ExceptionAddres s: 7c90e514 (ntdll!KiFastSy stemCallRet)
    ExceptionCode: cfffffff (Application hang)
    ExceptionFlags: 00000000
    NumberParameter s: 0

    BUGCHECK_STR: HANG

    DEFAULT_BUCKET_ ID: APPLICATION_HAN G

    PROCESS_NAME: SAT History v0.3.exe

    ERROR_CODE: (NTSTATUS) 0xcfffffff - <Unable to get error code text>

    EXCEPTION_CODE: (NTSTATUS) 0xcfffffff - <Unable to get error code text>

    MOD_LIST: <ANALYSIS/>

    APPLICATION_VER IFIER_FLAGS: 0

    MANAGED_STACK: !dumpstack -EE
    No export dumpstack found

    DERIVED_WAIT_CH AIN:

    Dl Eid Cid WaitType
    -- --- ------- --------------------------
    0 ba8.bac Handle

    WAIT_CHAIN_COMM AND: ~0s;k;;

    BLOCKING_THREAD : 00000bac

    PRIMARY_PROBLEM _CLASS: APPLICATION_HAN G

    LAST_CONTROL_TR ANSFER: from 7c90df4a to 7c90e514

    FAULTING_THREAD : 00000000

    STACK_TEXT:
    0012eb84 7c90df4a 7c809590 00000002 0012ebb0 ntdll!KiFastSys temCallRet
    0012eb88 7c809590 00000002 0012ebb0 00000001 ntdll!ZwWaitFor MultipleObjects +0xc
    0012ec24 7e4195f9 00000002 0012ec4c 00000000 kernel32!WaitFo rMultipleObject sEx+0x12c
    0012ec80 7752ebd6 00000001 0012ef80 0000032c user32!RealMsgW aitForMultipleO bjectsEx+0x13e
    0012eca8 77557237 0012ef80 0000032c 0012ecd4 ole32!CCliModal Loop::BlockFn+0 x80
    0012ed1c 79f817bd 00000002 000003e8 00000001 ole32!CoWaitFor MultipleHandles +0xcf
    0012ed3c 79f81724 00000000 000003e8 00000001 mscorwks!NT5Wai tRoutine+0x51
    0012eda8 79f81688 00000001 0012ef80 00000000 mscorwks!MsgWai tHelper+0xa5
    0012edc8 79f64404 00000001 0012ef80 00000001 mscorwks!Thread ::DoAppropriate AptStateWait+0x 28
    0012ee4c 79f64499 00000001 0012ef80 00000001 mscorwks!Thread ::DoAppropriate WaitWorker+0x13 c
    0012ee9c 79f2d808 00000001 0012ef80 00000001 mscorwks!Thread ::DoAppropriate Wait+0x40
    0012efa0 792b68af 00000000 00000000 0151e46c mscorwks!WaitHa ndleNative::Cor WaitOneNative+0 x156
    0012efbc 792b6865 000003e8 00000000 7931782c mscorlib_ni+0x1 f68af
    0012efd4 7b6f1a4f 00000000 00000103 0000c144 mscorlib_ni+0x1 f6865
    0012efec 7ba2d68b c77b8727 79e7a6b8 0012f184 System_Windows_ Forms_ni+0x721a 4f
    0012f080 7b6f33ac 00000001 0151e458 0151e438 System_Windows_ Forms_ni+0xa5d6 8b
    0012f0bc 7b920bd7 0151e458 0151e458 0151e438 System_Windows_ Forms_ni+0x7233 ac
    0012f0d4 7a924362 0151ddf0 0141a268 00000001 System_Windows_ Forms_ni+0x950b d7
    0012f108 7a922a93 0151ddf0 00000001 00000000 System_ni+0x4e4 362
    0012f154 7a923f8f 0151ddf0 00000009 00000000 System_ni+0x4e2 a93
    0012f170 7aa8f594 0022c510 00000001 c77b8727 System_ni+0x4e3 f8f
    0012f200 7e418734 00010438 0000201a 00000001 System_ni+0x64f 594
    0012f22c 7e418816 003b247a 00010438 0000201a user32!Internal CallWinProc+0x2 8
    0012f294 7e4189cd 00000000 003b247a 00010438 user32!UserCall WinProcCheckWow +0x150
    0012f2f4 7e418a10 0012f390 00000000 0012f320 user32!Dispatch MessageWorker+0 x306
    0012f304 01393c12 0012f390 c77b8727 00000000 user32!Dispatch MessageW+0xf
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    0012f320 7b1d8d2e 01412624 00000001 013d916c 0x1393c12
    0012f3d4 7b1d8997 00000000 ffffffff 00000000 System_Windows_ Forms_ni+0x208d 2e
    0012f42c 7b1d87e1 0140a644 1bac0007 00000000 System_Windows_ Forms_ni+0x2089 97
    0012f45c 7b195931 0145aac0 0012f4ac 013c37ec System_Windows_ Forms_ni+0x2087 e1
    0012f480 79e71b4c 0012f4cc 00000000 0012f510 System_Windows_ Forms_ni+0x1c59 31
    0012f490 79e821b9 0012f560 00000000 0012f530 mscorwks!CallDe scrWorker+0x33
    0012f510 79e96531 0012f560 00000000 0012f530 mscorwks!CallDe scrWorkerWithHa ndler+0xa3
    0012f648 79e96564 00a5c020 0012f714 0012f6e0 mscorwks!Method Desc::CallDescr +0x19c
    0012f664 79e96582 00a5c020 0012f714 0012f6e0 mscorwks!Method Desc::CallTarge tWorker+0x1f
    0012f67c 79f0784d 0012f6e0 c76c1e47 00000000 mscorwks!Method DescCallSite::C allWithValueTyp es_RetArgSlot+0 x1a
    0012f7e0 79f0776d 00a53048 00000001 0012f81c mscorwks!ClassL oader::RunMain+ 0x223
    0012fa48 79f07cbd 00000000 c76c16bf 00000001 mscorwks!Assemb ly::ExecuteMain Method+0xa6
    0012ff18 79f07ea7 00400000 00000000 c76c16cf mscorwks!System Domain::Execute MainMethod+0x45 6
    0012ff68 79f07dd7 00400000 c76c1617 02c1dd60 mscorwks!Execut eEXE+0x59
    0012ffb0 79007c24 7c90d96e 79e70000 0012fff0 mscorwks!_CorEx eMain+0x15c
    0012ffc0 7c817077 02c1dd60 7c90d96e 7ffdf000 mscoree!_CorExe Main+0x2c
    0012fff0 00000000 79007bf0 00000000 00000000 kernel32!BasePr ocessStart+0x23


    FOLLOWUP_IP:
    mscorwks!NT5Wai tRoutine+51
    79f817bd 3d15010180 cmp eax,80010115h

    SYMBOL_STACK_IN DEX: 6

    SYMBOL_NAME: mscorwks!NT5Wai tRoutine+51

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: mscorwks

    IMAGE_NAME: mscorwks.dll

    DEBUG_FLR_IMAGE _TIMESTAMP: 4a7cd88e

    STACK_COMMAND: ~0s ; kb

    BUCKET_ID: HANG_mscorwks!N T5WaitRoutine+5 1

    FAILURE_BUCKET_ ID: APPLICATION_HAN G_cfffffff_msco rwks.dll!NT5Wai tRoutine

    Followup: MachineOwner
    ---------

    All procedures are between try-cath in the source code.
    Any idea, How do I continue the debugging or What can cause the error?

    Thanks in advance,
    With Regards,
    Norbert
Working...