bugcheck dump

webhost.ie · 8th September 2004

Hi,

We have a windows 2003 web edition server that is crashing randomly.

It locks up with a BSOD.

If I do a dumpchk on the memory.dmp image it says the following:

BugCheck 50, {f7b27000, 1, f49c7929, 0}

Probably caused by : HTTP.sys ( HTTP!UlLargeMemSetData+39 )

Any idea's what could cause this ?

Thanks in advance.

Thanks,
David Farrelly
davidfarrelly@webhost.ie

Full output below:

C:\Program Files\Debugging Tools for Windows>dumpchk -y c:\windows\symbols c:\
ndows\memory.dmp
Loading dump file c:\windows\memory.dmp

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [c:\windows\memory.dmp]
Kernel Complete Dump File: Full address space is available

Symbol search path is: c:\windows\symbols
Symbol search path is: c:\windows\symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS Blade
Built by: 3790.srv03_rtm.030324-2048
Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
Debug session time: Tue Aug 31 18:55:44 2004
System Uptime: 16 days 1:09:56.992
Loading Kernel Symbols
........................................................................... ...
...................
Loading unloaded module list
..........
Loading User Symbols
*************************************************************************** ***
*
* Bugcheck Analysis
*
*************************************************************************** ***

Use !analyze -v to get detailed debugging information.

BugCheck 50, {f7b27000, 1, f49c7929, 0}

Probably caused by : HTTP.sys ( HTTP!UlLargeMemSetData+39 )

Followup: MachineOwner
---------

----- 32 bit Kernel Full Dump Analysis

DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000ece
KdSecondaryVersion 00000000
DirectoryTableBase 06af0000
PfnDataBase 80c00000
PsLoadedModuleList 8057b6a8
PsActiveProcessHead 80581888
MachineImageType 0000014c
NumberProcessors 00000002
BugCheckCode 00000050
BugCheckParameter1 f7b27000
BugCheckParameter2 00000001
BugCheckParameter3 f49c7929
BugCheckParameter4 00000000
PaeEnabled 00000000
KdDebuggerDataBlock 805693d0
SecondaryDataState 00000000
ProductType 00000003
SuiteMask 00000510

Physical Memory Description:
Number of runs: 2
FileOffset Start Address Length
00001000 00001000 0009e000
0009f000 00100000 3fef0000
Last Page: 3ff8e000 3ffef000

KiProcessorBlock at 8057a2c0
2 KiProcessorBlock entries:
ffdff120 f772f120

Windows Server 2003 Kernel Version 3790 MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS Blade
Built by: 3790.srv03_rtm.030324-2048
Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
Debug session time: Tue Aug 31 18:55:44 2004
System Uptime: 16 days 1:09:56.992
start end module name
804de000 80744000 nt Tue Mar 25 08:39:34 2003 (3E8015C6)
80744000 8076c000 hal Tue Mar 25 07:07:28 2003 (3E800030)
bf800000 bf9c6000 win32k Tue Mar 25 08:40:49 2003 (3E801611)
bf9c6000 bf9f7700 ati2dvag Tue Mar 25 09:43:39 2003 (3E8024CB)
bf9f8000 bfac6320 ati3d1ag Tue Mar 25 09:43:40 2003 (3E8024CC)
bff80000 bff96000 dxg Tue Mar 25 09:46:23 2003 (3E80256F)
f2c5f000 f2cf46a0 NavEx15 Fri Jul 23 18:50:12 2004 (41014FD4)
f3942000 f39515a0 NAVENG Fri Jul 23 18:50:57 2004 (41015001)
f406c000 f40939a0 navap Fri Feb 09 05:15:26 2001 (3A837CEE)
f4152000 f4162a60 SYMEVENT Wed May 14 06:45:43 2003 (3EC1D807)
f44d3000 f4500000 Fastfat Tue Mar 25 08:00:16 2003 (3E800C90)
f4938000 f4997000 srv Tue Mar 25 08:49:51 2003 (3E80182F)
f49bf000 f4a17000 HTTP Tue Mar 25 08:55:21 2003 (3E801979)
f4c1f000 f4c4e000 afd unavailable (FFFFFFFE)
f4cc6000 f4cddc80 dump_si3112r Wed May 12 22:01:17 2004 (40A2909D)
f4cde000 f4cf1000 Fips Tue Mar 25 08:54:59 2003 (3E801963)
f4cf1000 f4d5e000 mrxsmb Tue Mar 25 07:09:09 2003 (3E800095)
f4d5e000 f4d8a000 rdbss Tue Mar 25 07:09:06 2003 (3E800092)
f4d8a000 f4dbf000 netbt Fri Jul 18 18:16:03 2003 (3F182B53)
f4dbf000 f4e21000 tcpip Tue Mar 25 08:04:01 2003 (3E800D71)
f4e21000 f4e3d000 ipsec Tue Mar 25 07:55:45 2003 (3E800B81)
f612c000 f613f000 usbhub Tue Mar 25 07:10:46 2003 (3E8000F6)
f615f000 f6192000 update Tue Mar 25 08:59:59 2003 (3E801A8F)
f6192000 f61bc000 ks Tue Mar 25 08:47:36 2003 (3E8017A8)
f61bc000 f61f0000 rdpdr Tue Mar 25 07:09:30 2003 (3E8000AA)
f61f0000 f6205000 raspptp Tue Mar 25 08:19:09 2003 (3E8010FD)
f6205000 f6220000 ndiswan Tue Mar 25 08:48:19 2003 (3E8017D3)
f6220000 f6237000 rasl2tp Tue Mar 25 07:54:46 2003 (3E800B46)
f6237000 f624d000 i8042prt Tue Mar 25 09:01:43 2003 (3E801AF7)
f624d000 f6264000 parport Tue Mar 25 07:03:56 2003 (3E7FFF5C)
f62c4000 f62d1000 wanarp Tue Mar 25 07:11:22 2003 (3E80011A)
f662e000 f6637000 dump_diskdump Tue Mar 25 07:05:15 2003 (3E7FFFAB)
f665e000 f666a000 vga Tue Mar 25 07:08:03 2003 (3E800053)
f685b000 f6863000 rasacd Tue Mar 25 07:11:50 2003 (3E800136)
f6893000 f689a000 Beep Tue Mar 25 07:03:04 2003 (3E7FFF28)
f6a7e000 f6a88000 kbdclass Tue Mar 25 07:03:10 2003 (3E7FFF2E)
f6a8e000 f6a98000 mouclass Tue Mar 25 07:03:09 2003 (3E7FFF2D)
f6a9e000 f6aa8000 flpydisk unavailable (FFFFFFFE)
f6b98000 f6bb0000 serial Tue Mar 25 07:40:08 2003 (3E8007D8)
f6ce9000 f6cf6000 netbios Tue Mar 25 07:09:53 2003 (3E8000C1)
f6cf9000 f6d05000 Npfs Tue Mar 25 07:08:59 2003 (3E80008B)
f6d09000 f6d13000 Msfs unavailable (FFFFFFFE)
f6d19000 f6d28000 msgpc Tue Mar 25 07:10:12 2003 (3E8000D4)
f6ffb000 f701ce80 USBPORT Tue Mar 25 07:10:43 2003 (3E8000F3)
f701d000 f7036000 VIDEOPRT Tue Mar 25 07:08:02 2003 (3E800052)
f7036000 f70a3e80 ati2mtag Thu Aug 08 21:46:38 2002 (3D52D8AE)
f714f000 f7151640 GearAspiWDM Sun Dec 07 15:21:24 2003 (3FD34574)
f71a5000 f71a7780 gameenum Tue Mar 25 07:10:22 2003 (3E8000DE)
f7209000 f722b000 Mup Tue Mar 25 08:55:58 2003 (3E80199E)
f722b000 f726c000 NDIS Tue Mar 25 08:45:35 2003 (3E80172F)
f726c000 f7309000 Ntfs Tue Mar 25 07:40:05 2003 (3E8007D5)
f7309000 f732a000 KSecDD Tue Mar 25 07:05:39 2003 (3E7FFFC3)
f732a000 f733f1c0 PQV2i Wed Feb 25 19:31:57 2004 (403CF82D)
f7340000 f7356000 CLASSPNP Tue Mar 25 07:38:14 2003 (3E800766)
f7356000 f737c000 SCSIPORT Tue Mar 25 08:01:25 2003 (3E800CD5)
f737c000 f7393c80 si3112r Wed May 12 22:01:17 2004 (40A2909D)
f7394000 f73b0000 atapi Tue Mar 25 07:04:48 2003 (3E7FFF90)
f73b0000 f73d1000 volsnap Tue Mar 25 07:05:47 2003 (3E7FFFCB)
f73d1000 f73fb000 dmio Tue Mar 25 07:08:14 2003 (3E80005E)
f73fb000 f7420000 ftdisk Tue Mar 25 07:05:26 2003 (3E7FFFB6)
f7420000 f7435000 pci Tue Mar 25 07:16:40 2003 (3E800258)
f7435000 f7466000 ACPI Tue Mar 25 07:16:21 2003 (3E800245)
f7487000 f7490000 WMILIB Tue Mar 25 07:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp Tue Mar 25 07:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX Tue Mar 25 07:04:44 2003 (3E7FFF8C)
f74b7000 f74c6000 MountMgr Tue Mar 25 07:03:05 2003 (3E7FFF29)
f74c7000 f74d5000 PartMgr Tue Mar 25 08:04:02 2003 (3E800D72)
f74d7000 f74e6000 disk Tue Mar 25 07:05:20 2003 (3E7FFFB0)
f74e7000 f74f3000 Dfs Tue Mar 25 07:09:52 2003 (3E8000C0)
f74f7000 f7500000 crcdisk Tue Mar 25 07:07:23 2003 (3E80002B)
f7557000 f7561000 Dxapi Tue Mar 25 07:06:01 2003 (3E7FFFD9)
f7597000 f75a1000 serenum Tue Mar 25 07:04:01 2003 (3E7FFF61)
f75a7000 f75b3000 processr Tue Mar 25 07:07:36 2003 (3E800038)
f75b7000 f75c0000 watchdog Tue Mar 25 07:09:01 2003 (3E80008D)
f75c7000 f75d2000 fdc unavailable (FFFFFFFE)
f75d7000 f75e0000 ndistapi Tue Mar 25 07:11:28 2003 (3E800120)
f75e7000 f75f5000 raspppoe Tue Mar 25 07:11:37 2003 (3E800129)
f75f7000 f7602000 TDI Tue Mar 25 07:14:28 2003 (3E8001D4)
f7667000 f7675000 NDProxy Tue Mar 25 07:11:30 2003 (3E800122)
f7687000 f7696000 termdd Tue Mar 25 07:02:52 2003 (3E7FFF1C)
f76a7000 f76b2000 ptilink Tue Mar 25 07:03:51 2003 (3E7FFF57)
f76f7000 f7700000 raspti Tue Mar 25 07:11:36 2003 (3E800128)
f7707000 f770f000 kdcom Tue Mar 25 07:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID Tue Mar 25 07:07:58 2003 (3E80004E)
f7717000 f771e000 pciide Tue Mar 25 07:04:46 2003 (3E7FFF8E)
f771f000 f7726000 intelide Tue Mar 25 07:04:45 2003 (3E7FFF8D)
f7727000 f772e000 dmload unavailable (FFFFFFFE)
f777f000 f7786000 dxgthk Tue Mar 25 07:05:52 2003 (3E7FFFD0)
f779f000 f77a7000 mnmdd Tue Mar 25 07:07:53 2003 (3E800049)
f77c7000 f77ce000 Null unavailable (FFFFFFFE)
f780f000 f7813e80 usbuhci Tue Mar 25 07:10:43 2003 (3E8000F3)
f781f000 f7823e00 usbehci Tue Mar 25 07:10:40 2003 (3E8000F0)
f782f000 f7834a00 RTL8139 Wed May 30 07:14:57 2001 (3B148FE1)
f7837000 f783f000 audstub Tue Mar 25 07:09:12 2003 (3E800098)
f784f000 f7856000 parvdm unavailable (FFFFFFFE)
f786f000 f7877000 Fs_Rec unavailable (FFFFFFFE)
f7877000 f787f000 RDPCDD Tue Mar 25 07:03:05 2003 (3E7FFF29)
f7897000 f7899800 SiWinAcc Wed Oct 15 19:28:16 2003 (3F8D91C0)
f7a27000 f7a28200 swenum Tue Mar 25 07:03:22 2003 (3E7FFF3A)
f7a31000 f7a32580 USBD Tue Mar 25 07:10:39 2003 (3E8000EF)

Unloaded modules:
f3616000 f36ac000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f373c000 f374c000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f388c000 f3922000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3cc4000 f3cd4000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4094000 f412a000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f46a0000 f46b0000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f62b4000 f62c2000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4d76000 f4d8a000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4e49000 f4e5d000 cdrom.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7867000 f786f000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
*************************************************************************** ***
*
* Bugcheck Analysis
*
*************************************************************************** ***

Use !analyze -v to get detailed debugging information.

BugCheck 50, {f7b27000, 1, f49c7929, 0}

Probably caused by : HTTP.sys ( HTTP!UlLargeMemSetData+39 )

Followup: MachineOwner
---------

Finished dump check

C:\Program Files\Debugging Tools for Windows>!analyze
'!analyze' is not recognized as an internal or external command,
operable program or batch file.

C:\Program Files\Debugging Tools for Windows>

webhost.ie · 8th September 2004

Hi,

Found the answer:

http://support.microsoft.com/?kbid=835845

Just to let other people know.

Thanks,
David Farrelly

Newt · 9th September 2004

Interesting. Hadn't run across that one before.

Thanks for posting back with the fix.