KnowledgeBase Archive

An Archive of Early Microsoft KnowledgeBase Articles

View on GitHub

Q297461: PRB: Sporadic Access Violations Originate from Inetinfo.exe

Article: Q297461
Product(s): Internet Information Server
Version(s): 4.0
Operating System(s): 
Keyword(s): 
Last Modified: 13-JUN-2001

-------------------------------------------------------------------------------
The information in this article applies to:

- Microsoft Internet Information Server 4.0 
-------------------------------------------------------------------------------

SYMPTOMS
========

Access violations may sporadically occur within the Inetinfo.exe process. The
stack may resemble the following:

  ChildEBP RetAddr  Args to Child<BR/>
  028cf318 77f02a3a 00070000 00000000 00000001 ntdll!RtlFreeHeap+0x2a<BR/>
  028cf35c 685990b7 00000001 77e12b5a 00000001 KERNEL32!LocalFree+0x3f<BR/>
  028cf364 77e12b5a 00000001 028cf3a8 0007f8ce INFOCOMM!INetpMemoryFree+0xa<BR/>
  028cf37c 77e1d237 028cfa9c 00000001 685ac342 RPCRT4!NdrPointerFree+0x69<BR/>
  028cf3a8 77e13a1c 028cfa9c 0007fb7c 685ac342 RPCRT4!NdrpEmbeddedRepeatPointerFree+0x83<BR/>
  028cf3d0 77e489a2 028cfa9c 0007f960 685ac324 RPCRT4!NdrpEmbeddedPointerFree+0x60<BR/>
  028cf3e8 77e12b46 028cfa9c 0007f960 685ac31e RPCRT4!NdrConformantStructFree+0x34<BR/>
  028cf408 77e139fc 028cfa9c 0007f960 685ac3a4 RPCRT4!NdrPointerFree+0x55<BR/>
  028cf430 77e13a46 028cfa9c 00076c18 685ac356 RPCRT4!NdrpEmbeddedPointerFree+0x40<BR/>
  028cf440 77e12b46 028cfa9c 00076c18 685ac352 RPCRT4!NdrSimpleStructFree+0x1a<BR/>
  028cf460 77e4d913 028cfa9c 00076c18 685ac3c6 RPCRT4!NdrPointerFree+0x55<BR/>
  028cf484 77e56129 028cfa9c 685ac146 00000000 RPCRT4!NdrServerFree+0xdc<BR/>
  028cf494 77e297dd 028cf4f8 77e5276c ffffffff RPCRT4!NdrStubCall+0x1e8<BR/>
  028cf4f8 77f966a1 028cfc2c 028cf6a4 77f892d0 RPCRT4!_local_unwind2_50+0x1c<BR/>
  028cfc2c 77e1fc4a 77e5a8e0 ffffffff 028cfc90 ntdll!ExecuteHandler+0x61<BR/>
  028cfc80 77e1fc4a 77e584d0 00000000 028cfce4 RPCRT4!_except_handler3<BR/>
  028cffdc 77f3b744 77f3d238 00000000 00000000 RPCRT4!_except_handler3<BR/>
  ffffffff 00000000 00000000 00000000 00000000 KERNEL32!_except_handler3<BR/>

If the debugger cannot access the symbols for the server or the symbols are not
installed (such as in a Dr. Watson log), the stack may resemble the following:

  *** ERROR: Symbol file could not be found.  Defaulted to export symbols for kernel32.dll -<BR/>
  *** ERROR: Symbol file could not be found.  Defaulted to export symbols for infocomm.dll -<BR/>
  ChildEBP RetAddr  Args to Child<BR/>
  028cf318 77f02a3a 00070000 00000000 00000001 ntdll!RtlFreeHeap+0x2a<BR/>
  028cf35c 685990b7 00000001 77e12b5a 00000001 KERNEL32!LocalFree+0x3f<BR/>
  00000001 00000000 00000000 00000000 00000000 INFOCOMM!InitCommonDlls+0x13b9<BR/>

CAUSE
=====

The version of the Ntdll.dll file is from a service pack other than the service
pack that is currently installed on the system. This problem may also occur on
other system dynamic-link library (DLL) files.

RESOLUTION
==========

Reapply the current service pack, or upgrade to the latest NT service pack.

Additional query words: inetinfo iis access violation av nt

======================================================================
Keywords          :  
Technology        : kbiisSearch kbiis400
Version           : :4.0
Issue type        : kbprb

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.