Q177534: XFOR: LME-PROFS-MEXDIA Crashes Processing a Long File Extension
Article: Q177534
Product(s): Microsoft Exchange
Version(s): 5.0
Operating System(s):
Keyword(s):
Last Modified: 18-MAR-1999
-------------------------------------------------------------------------------
The information in this article applies to:
- Microsoft Exchange Server, version 5.0
- LinkAge Message Exchange, version 3.2
-------------------------------------------------------------------------------
SYMPTOMS
========
The Microsoft Exchange to OV/VM transform (LME-PROFS-MEXDIA) process may
terminate unexpectedly with an access violation. The resulting Drwtsn32.log
and/or User.dmp may have a stack back trace similar to the following:
function: XFMDOSFEMFind
0037defe 837de800 cmp dword ptr [ebp-0x18],0x0
ss:018cdca6=????????
0037df02 0f850b000000 jne XFMDOSFEMFind+0xc0 (0037df13)
0037df08 66c745e40200 mov word ptr [ebp-0x1c],0x2
ss:018cdca7=????
0037df0e e916000000 jmp XFMDOSFEMFind+0xd6 (0037df29)
0037df13 8b45e8 mov eax,[ebp-0x18]
ss:018cdca6=????????
0037df16 83c008 add eax,0x8
0037df19 8945fc mov [ebp-0x4],eax
ss:018cdca6=????????
0037df1c 8b45fc mov eax,[ebp-0x4]
ss:018cdca6=????????
0037df1f 668b4004 mov ax,[eax+0x4]
ds:0236ea15=????
0037df23 8b4d0c mov ecx,[ebp+0xc]
ss:018cdca6=????????
FAULT ->0037df26 668901 mov [ecx],ax
ds:20202020=????
0037df29 668b45e4 mov ax,[ebp-0x1c]
ss:018cdca7=????
0037df2d e900000000 jmp XFMDOSFEMFind+0xdf (0037df32)
0037df32 5f pop edi
0037df33 5e pop esi
0037df34 5b pop ebx
0037df35 c9 leave
0037df36 c3 ret
0037df37 55 push ebp
0037df38 8bec mov ebp,esp
0037df3a 83ec0c sub esp,0xc
0037df3d 53 push ebx
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0012f2a0 20202020 20202020 20202020 20202020 20202020
LSXFM!XFMDOSFEMFind
*----> Raw Stack Dump <----*
0012f278 30 00 00 00 70 0c ab 00 - 00 f0 fd 7f 00 00 00 00
0...p...........
0012f288 47 89 bd 00 30 3d 38 00 - 43 53 43 20 20 20 20 20 G...0=8.CSC
0012f298 20 20 20 20 4f 89 bd 00 - 20 20 20 20 20 20 20 20 O...
0012f2a8 20 20 20 20 20 20 20 20 - 20 20 20 20 20 20 20 20
0012f2b8 20 20 20 20 00 53 43 20 - 20 20 20 20 20 20 20 20 .SC
0012f2c8 20 20 20 20 20 20 20 20 - 20 20 20 20 20 20 20 20
0012f2d8 20 20 20 20 20 20 20 20 - 20 20 20 20 20 20 20 20
0012f2e8 00 00 00 00 70 0c ab 00 - 00 00 00 00 05 00 00 00
....p...........
0012f2f8 50 f3 12 00 5a d2 00 10 - 70 ba bd 00 dc f2 12 00
P...Z...p.......
0012f308 01 00 00 00 b0 ff 12 00 - 48 b0 f3 77 40 ca f3 77
........H..w@..w
0012f318 ff ff ff ff 4c f3 12 00 - 50 d5 00 10 a4 01 00 00
....L...P.......
0012f328 b4 f3 12 00 05 00 00 00 - 78 f3 12 00 af 13 f0 77
........x......w
0012f338 a4 01 00 00 cb d4 00 10 - 30 00 00 00 70 0c ab 00
........0...p...
0012f348 00 f0 fd 7f 00 00 fd 7f - 38 c6 02 10 14 00 12 00
........8.......
0012f358 88 f3 12 00 b9 ea 00 10 - 30 00 00 00 70 0c ab 00
........0...p...
0012f368 00 f0 fd 7f 00 f0 fd 7f - 00 00 fd 7f 10 c5 02 10
................
0012f378 05 00 00 00 00 00 00 00 - 30 00 00 00 02 00 12 00
........0.......
0012f388 bc f3 12 00 11 6a 37 00 - 02 5a 40 00 01 00 00 00
.....j7..Z@.....
0012f398 30 00 00 00 30 00 00 00 - 70 0c ab 00 00 f0 fd 7f
0...0...p.......
0012f3a8 94 f7 12 00 c4 f3 12 00 - 0a 12 40 00 30 00 00 00
..........@.0...
This occurs on a message with an attachment sent from Exchange to an OV/VM user.
CAUSE
=====
The LME-PROFS-MEXDIA process allocated a buffer to hold an file attachment
extension name up to 8 characters long. When the process encountered a file
extension longer that 8 characters, it overwrote the buffer and wrote onto the
stack, causing an access violation and process termination.
WORKAROUND
==========
Manually delete the message using the Queue Viewer extension of the Linkage
Exchange - Office Vision/VM Connector. The message will be the first in the
Outbound from Exchange queue (READY-OUT).
STATUS
======
Microsoft has confirmed this to be a problem in Linkage Message Exchange,
version 3.2.
A supported fix is now available, but has not been fully regression-tested and
should be applied only to systems experiencing this specific problem. Unless you
are severely impacted by this specific problem, Microsoft recommends that you
wait for the next Service Pack that contains this fix. Contact Microsoft
Technical Support for more information.
Additional query words: crash hang GPF general protection fault linkage
======================================================================
Keywords :
Technology : kbZNotKeyword6 kbExchangeSearch kbExchange500 kbZNotKeyword2 kbLinkAgeSearch kbLinkAge320
Version : 5.0
Issue type : kbbug
Solution Type : kbfix
=============================================================================
THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.
Copyright Microsoft Corporation 1986-2002.