L
Lucelle
I get the following warning log randomly under Event Viewer -> System. My web application app pool is restarted after this warning log and so causes web application session timeout randomly.
===============================================================
A process serving application pool 'DefaultAppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '15168'. The data field contains the error number.
===============================================================
Control Panel -> Action Center -> Problem details has this entry:
===============================================================
Source
IIS Worker Process
Summary
Stopped working
Date
02-11-2018 12:42
Status
Report sent
Description
Faulting Application Path: c:\Windows\System32\inetsrv\w3wp.exe
Problem signature
Problem Event Name: APPCRASH
Application Name: w3wp.exe
Application Version: 8.5.9600.16384
Application Timestamp: 5215df96
Fault Module Name: KERNELBASE.dll
Fault Module Version: 6.3.9600.18938
Fault Module Timestamp: 5a7ddf0a
Exception Code: e0434352
Exception Offset: 0000000000008eac
OS Version: 6.3.9600.2.0.0.272.7
Locale ID: 1030
Additional Information 1: 8f18
Additional Information 2: 8f181775e1d9cd1da19251bf57b96e31
Additional Information 3: 9c96
Additional Information 4: 9c9692247e706e5e8f9f7e3190aed9bc
Extra information about the problem
Bucket ID: 04bb37888f7f275e9b00f265338898db (1945821555494263003)
===============================================================
I also used debug diagnostic tool to collect dump file and with the following error:
In w3wp__ZFP__PID__7524__Date__11_09_2018__Time_10_43_10AM__56__Second_Chance_Exception_E0434352.dmp the assembly instruction at KERNELBASE!RaiseException+68 in C:\Windows\System32\KERNELBASE.dll has caused a CLR Exception on thread 92 with the following error information:
Type: NOT_FOUND
Message: NOT_FOUND
And tried running !analyze -v in Windbg for this dump file with the following results:
===============================================================
0:095> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
DEBUG_FLR_EXCEPTION_CODE(80131604) and the ".exr -1" ExceptionCode(e0434352) don't match
GetUrlPageData2 (WinHttp) failed: 12007.
KEY_VALUES_STRING: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
Timeline: !analyze.Start
Name: <blank>
Time: 2018-11-12T06:19:51.384Z
Diff: 248309384 mSec
Timeline: Dump.Current
Name: <blank>
Time: 2018-11-09T09:21:22.0Z
Diff: 0 mSec
Timeline: Process.Start
Name: <blank>
Time: 2018-11-09T08:58:58.0Z
Diff: 1344000 mSec
Timeline: OS.Boot
Name: <blank>
Time: 2018-11-06T10:42:49.296Z
Diff: 254312704 mSec
DUMP_CLASS: 2
DUMP_QUALIFIER: 400
CONTEXT: (.ecxr)
rax=00007ffa999bb82c rbx=000000e73edb71f0 rcx=00005476de8cc0f2
rdx=00007ffa999ba96e rsi=0000000000000002 rdi=000000e73edb6d00
rip=00007ffa9f748eac rsp=000000e73edb7400 rbp=000000e73edb7ab0
r8=fffffffffffffffe r9=000000e73edb7760 r10=000000e73edb6ff0
r11=0000000000000000 r12=000000e73edb7558 r13=0000000000000000
r14=000000e73edb8828 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000200
KERNELBASE!RaiseException+0x68:
00007ffa`9f748eac 488b8c24c0000000 mov rcx,qword ptr [rsp+0C0h] ss:000000e7`3edb74c0=0000b08d093571dd
Resetting default scope
FAULTING_IP:
KERNELBASE!RaiseException+68
00007ffa`9f748eac 488b8c24c0000000 mov rcx,qword ptr [rsp+0C0h]
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ffa9f748eac (KERNELBASE!RaiseException+0x0000000000000068)
ExceptionCode: e0434352 (CLR exception)
ExceptionFlags: 00000001
NumberParameters: 5
Parameter[0]: ffffffff80131604
Parameter[1]: 0000000000000000
Parameter[2]: 0000000000000000
Parameter[3]: 0000000000000000
Parameter[4]: 00007ffa99940000
DEFAULT_BUCKET_ID: CLR_EXCEPTION_NOSOS
EXCEPTION_CODE: (HRESULT) 0x80131604 (2148734468) - <Unable to get error code text>
EXCEPTION_CODE_STR: 80131604
WATSON_BKT_PROCSTAMP: 5215df96
WATSON_BKT_PROCVER: 8.5.9600.16384
PROCESS_VER_PRODUCT: Internet Information Services
WATSON_BKT_MODULE: KERNELBASE.dll
WATSON_BKT_MODSTAMP: 5a7ddf0a
WATSON_BKT_MODOFFSET: 8eac
WATSON_BKT_MODVER: 6.3.9600.18938
MODULE_VER_PRODUCT: Microsoft? Windows? Operating System
BUILD_VERSION_STRING: 6.3.9600.18217 (winblue_ltsb.160124-0053)
MODLIST_WITH_TSCHKSUM_HASH: c262250a3f355ae0b6af9fd8827865a05812aa17
MODLIST_SHA1_HASH: 861cd4f5c062df97f6986bae763bbd3f8bd68e2c
COMMENT: Dump created by DbgHost. Second_Chance_Exception_E0434352
NTGLOBALFLAG: 0
PROCESS_BAM_CURRENT_THROTTLED: 0
PROCESS_BAM_PREVIOUS_THROTTLED: 0
APPLICATION_VERIFIER_FLAGS: 0
PRODUCT_TYPE: 3
SUITE_MASK: 272
DUMP_FLAGS: 8000c07
DUMP_TYPE: 3
PROCESS_NAME: unknown
MISSING_CLR_SYMBOL: 0
ANALYSIS_SESSION_HOST: GGFKC7H2E
ANALYSIS_SESSION_TIME: 11-12-2018 15:19:51.0384
ANALYSIS_VERSION: 10.0.17763.1 x86fre
MANAGED_CODE: 1
MANAGED_ENGINE_MODULE: clr
MANAGED_BITNESS_MISMATCH:
Managed code needs matching platform for proper analysis. Use 'x64' debugger.
LAST_CONTROL_TRANSFER: from 00007ffa9a7a1f09 to 00007ffa9f748eac
THREAD_ATTRIBUTES:
FAULTING_THREAD: ffffffff
THREAD_SHA1_HASH_MOD_FUNC: 1435eb2ea43ce48394c8c8e2eb98dd568f2ee1c4
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 1721d90e2db47c397987f003f5bb32eef5ed0b63
OS_LOCALE: DAN
ADDITIONAL_DEBUG_TEXT: SOS.DLL is not loaded for managed code. Analysis might be incomplete
BUGCHECK_STR: CLR_EXCEPTION_NOSOS
PRIMARY_PROBLEM_CLASS: CLR_EXCEPTION
PROBLEM_CLASSES:
ID: [0n254]
Type: [CLR_EXCEPTION]
Class: Primary
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Add
Data: Omit
PID: [Unspecified]
TID: [0x3624]
Frame: [0] : KERNELBASE!RaiseException
ID: [0n251]
Type: [NOSOS]
Class: Addendum
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Add
Data: Omit
PID: [Unspecified]
TID: [Unspecified]
Frame: [0]
STACK_TEXT:
00000000`00000000 00000000`00000000 w3wp!unknown_function+0x0
STACK_COMMAND: ** Pseudo Context ** ManagedPseudo ** Value: 24a99800 ** ; kb
THREAD_SHA1_HASH_MOD: 683fb228a9ea27c3c4b6829014c0ae8c35fd0fb4
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: w3wp!unknown_function
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: w3wp
IMAGE_NAME: w3wp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 5215df96
BUCKET_ID: CLR_EXCEPTION_NOSOS_w3wp!unknown_function
FAILURE_EXCEPTION_CODE: 80131604
FAILURE_IMAGE_NAME: w3wp.exe
BUCKET_ID_IMAGE_STR: w3wp.exe
FAILURE_MODULE_NAME: w3wp
BUCKET_ID_MODULE_STR: w3wp
FAILURE_FUNCTION_NAME: unknown_function
BUCKET_ID_FUNCTION_STR: unknown_function
BUCKET_ID_OFFSET: 0
BUCKET_ID_MODTIMEDATESTAMP: 5215df96
BUCKET_ID_MODCHECKSUM: 15185
BUCKET_ID_MODVER_STR: 8.5.9600.16384
BUCKET_ID_PREFIX_STR: CLR_EXCEPTION_NOSOS_
FAILURE_PROBLEM_CLASS: CLR_EXCEPTION
FAILURE_SYMBOL_NAME: w3wp.exe!unknown_function
FAILURE_BUCKET_ID: CLR_EXCEPTION_NOSOS_80131604_w3wp.exe!unknown_function
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOn...938/5a7ddf0a/80131604/00008eac.htm?Retriage=1
TARGET_TIME: 2018-11-09T09:21:22.000Z
OSBUILD: 9200
OSSERVICEPACK: 17415
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
OSPLATFORM_TYPE: x64
OSNAME: Windows 8
OSEDITION: Windows 8 Server TerminalServer SingleUserTS
USER_LCID: 0
OSBUILD_TIMESTAMP: 2014-10-29 11:45:30
BUILDDATESTAMP_STR: 160124-0053
BUILDLAB_STR: winblue_ltsb
BUILDOSVER_STR: 6.3.9600.18217
ANALYSIS_SESSION_ELAPSED_TIME: 358d
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:clr_exception_nosos_80131604_w3wp.exe!unknown_function
FAILURE_ID_HASH: {b43c244a-dd13-f6d0-2a00-9478d49a1606}
Followup: MachineOwner
---------
===============================================================
I am running this web application in a Windows Server 2012 R2, 64bit operating system.
I am struggling on analyzing these crash dump information. I tried searching for related posts regarding this crash issue and one suggestion I got is to set Enable32BitApplication to true for application pool which I have to try yet (Reference link -
KERNELBASE!RaiseException+68 when calling ASMX webmethod)
Can someone further explain significance of setting this Enable32BitApplication to true as solution to this issue?
Or any guidance in further troubleshoot this crash will be much appreciated.
Thank you.
Continue reading...
===============================================================
A process serving application pool 'DefaultAppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '15168'. The data field contains the error number.
===============================================================
Control Panel -> Action Center -> Problem details has this entry:
===============================================================
Source
IIS Worker Process
Summary
Stopped working
Date
02-11-2018 12:42
Status
Report sent
Description
Faulting Application Path: c:\Windows\System32\inetsrv\w3wp.exe
Problem signature
Problem Event Name: APPCRASH
Application Name: w3wp.exe
Application Version: 8.5.9600.16384
Application Timestamp: 5215df96
Fault Module Name: KERNELBASE.dll
Fault Module Version: 6.3.9600.18938
Fault Module Timestamp: 5a7ddf0a
Exception Code: e0434352
Exception Offset: 0000000000008eac
OS Version: 6.3.9600.2.0.0.272.7
Locale ID: 1030
Additional Information 1: 8f18
Additional Information 2: 8f181775e1d9cd1da19251bf57b96e31
Additional Information 3: 9c96
Additional Information 4: 9c9692247e706e5e8f9f7e3190aed9bc
Extra information about the problem
Bucket ID: 04bb37888f7f275e9b00f265338898db (1945821555494263003)
===============================================================
I also used debug diagnostic tool to collect dump file and with the following error:
In w3wp__ZFP__PID__7524__Date__11_09_2018__Time_10_43_10AM__56__Second_Chance_Exception_E0434352.dmp the assembly instruction at KERNELBASE!RaiseException+68 in C:\Windows\System32\KERNELBASE.dll has caused a CLR Exception on thread 92 with the following error information:
Type: NOT_FOUND
Message: NOT_FOUND
And tried running !analyze -v in Windbg for this dump file with the following results:
===============================================================
0:095> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
DEBUG_FLR_EXCEPTION_CODE(80131604) and the ".exr -1" ExceptionCode(e0434352) don't match
GetUrlPageData2 (WinHttp) failed: 12007.
KEY_VALUES_STRING: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
Timeline: !analyze.Start
Name: <blank>
Time: 2018-11-12T06:19:51.384Z
Diff: 248309384 mSec
Timeline: Dump.Current
Name: <blank>
Time: 2018-11-09T09:21:22.0Z
Diff: 0 mSec
Timeline: Process.Start
Name: <blank>
Time: 2018-11-09T08:58:58.0Z
Diff: 1344000 mSec
Timeline: OS.Boot
Name: <blank>
Time: 2018-11-06T10:42:49.296Z
Diff: 254312704 mSec
DUMP_CLASS: 2
DUMP_QUALIFIER: 400
CONTEXT: (.ecxr)
rax=00007ffa999bb82c rbx=000000e73edb71f0 rcx=00005476de8cc0f2
rdx=00007ffa999ba96e rsi=0000000000000002 rdi=000000e73edb6d00
rip=00007ffa9f748eac rsp=000000e73edb7400 rbp=000000e73edb7ab0
r8=fffffffffffffffe r9=000000e73edb7760 r10=000000e73edb6ff0
r11=0000000000000000 r12=000000e73edb7558 r13=0000000000000000
r14=000000e73edb8828 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000200
KERNELBASE!RaiseException+0x68:
00007ffa`9f748eac 488b8c24c0000000 mov rcx,qword ptr [rsp+0C0h] ss:000000e7`3edb74c0=0000b08d093571dd
Resetting default scope
FAULTING_IP:
KERNELBASE!RaiseException+68
00007ffa`9f748eac 488b8c24c0000000 mov rcx,qword ptr [rsp+0C0h]
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ffa9f748eac (KERNELBASE!RaiseException+0x0000000000000068)
ExceptionCode: e0434352 (CLR exception)
ExceptionFlags: 00000001
NumberParameters: 5
Parameter[0]: ffffffff80131604
Parameter[1]: 0000000000000000
Parameter[2]: 0000000000000000
Parameter[3]: 0000000000000000
Parameter[4]: 00007ffa99940000
DEFAULT_BUCKET_ID: CLR_EXCEPTION_NOSOS
EXCEPTION_CODE: (HRESULT) 0x80131604 (2148734468) - <Unable to get error code text>
EXCEPTION_CODE_STR: 80131604
WATSON_BKT_PROCSTAMP: 5215df96
WATSON_BKT_PROCVER: 8.5.9600.16384
PROCESS_VER_PRODUCT: Internet Information Services
WATSON_BKT_MODULE: KERNELBASE.dll
WATSON_BKT_MODSTAMP: 5a7ddf0a
WATSON_BKT_MODOFFSET: 8eac
WATSON_BKT_MODVER: 6.3.9600.18938
MODULE_VER_PRODUCT: Microsoft? Windows? Operating System
BUILD_VERSION_STRING: 6.3.9600.18217 (winblue_ltsb.160124-0053)
MODLIST_WITH_TSCHKSUM_HASH: c262250a3f355ae0b6af9fd8827865a05812aa17
MODLIST_SHA1_HASH: 861cd4f5c062df97f6986bae763bbd3f8bd68e2c
COMMENT: Dump created by DbgHost. Second_Chance_Exception_E0434352
NTGLOBALFLAG: 0
PROCESS_BAM_CURRENT_THROTTLED: 0
PROCESS_BAM_PREVIOUS_THROTTLED: 0
APPLICATION_VERIFIER_FLAGS: 0
PRODUCT_TYPE: 3
SUITE_MASK: 272
DUMP_FLAGS: 8000c07
DUMP_TYPE: 3
PROCESS_NAME: unknown
MISSING_CLR_SYMBOL: 0
ANALYSIS_SESSION_HOST: GGFKC7H2E
ANALYSIS_SESSION_TIME: 11-12-2018 15:19:51.0384
ANALYSIS_VERSION: 10.0.17763.1 x86fre
MANAGED_CODE: 1
MANAGED_ENGINE_MODULE: clr
MANAGED_BITNESS_MISMATCH:
Managed code needs matching platform for proper analysis. Use 'x64' debugger.
LAST_CONTROL_TRANSFER: from 00007ffa9a7a1f09 to 00007ffa9f748eac
THREAD_ATTRIBUTES:
FAULTING_THREAD: ffffffff
THREAD_SHA1_HASH_MOD_FUNC: 1435eb2ea43ce48394c8c8e2eb98dd568f2ee1c4
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 1721d90e2db47c397987f003f5bb32eef5ed0b63
OS_LOCALE: DAN
ADDITIONAL_DEBUG_TEXT: SOS.DLL is not loaded for managed code. Analysis might be incomplete
BUGCHECK_STR: CLR_EXCEPTION_NOSOS
PRIMARY_PROBLEM_CLASS: CLR_EXCEPTION
PROBLEM_CLASSES:
ID: [0n254]
Type: [CLR_EXCEPTION]
Class: Primary
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Add
Data: Omit
PID: [Unspecified]
TID: [0x3624]
Frame: [0] : KERNELBASE!RaiseException
ID: [0n251]
Type: [NOSOS]
Class: Addendum
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Add
Data: Omit
PID: [Unspecified]
TID: [Unspecified]
Frame: [0]
STACK_TEXT:
00000000`00000000 00000000`00000000 w3wp!unknown_function+0x0
STACK_COMMAND: ** Pseudo Context ** ManagedPseudo ** Value: 24a99800 ** ; kb
THREAD_SHA1_HASH_MOD: 683fb228a9ea27c3c4b6829014c0ae8c35fd0fb4
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: w3wp!unknown_function
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: w3wp
IMAGE_NAME: w3wp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 5215df96
BUCKET_ID: CLR_EXCEPTION_NOSOS_w3wp!unknown_function
FAILURE_EXCEPTION_CODE: 80131604
FAILURE_IMAGE_NAME: w3wp.exe
BUCKET_ID_IMAGE_STR: w3wp.exe
FAILURE_MODULE_NAME: w3wp
BUCKET_ID_MODULE_STR: w3wp
FAILURE_FUNCTION_NAME: unknown_function
BUCKET_ID_FUNCTION_STR: unknown_function
BUCKET_ID_OFFSET: 0
BUCKET_ID_MODTIMEDATESTAMP: 5215df96
BUCKET_ID_MODCHECKSUM: 15185
BUCKET_ID_MODVER_STR: 8.5.9600.16384
BUCKET_ID_PREFIX_STR: CLR_EXCEPTION_NOSOS_
FAILURE_PROBLEM_CLASS: CLR_EXCEPTION
FAILURE_SYMBOL_NAME: w3wp.exe!unknown_function
FAILURE_BUCKET_ID: CLR_EXCEPTION_NOSOS_80131604_w3wp.exe!unknown_function
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOn...938/5a7ddf0a/80131604/00008eac.htm?Retriage=1
TARGET_TIME: 2018-11-09T09:21:22.000Z
OSBUILD: 9200
OSSERVICEPACK: 17415
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
OSPLATFORM_TYPE: x64
OSNAME: Windows 8
OSEDITION: Windows 8 Server TerminalServer SingleUserTS
USER_LCID: 0
OSBUILD_TIMESTAMP: 2014-10-29 11:45:30
BUILDDATESTAMP_STR: 160124-0053
BUILDLAB_STR: winblue_ltsb
BUILDOSVER_STR: 6.3.9600.18217
ANALYSIS_SESSION_ELAPSED_TIME: 358d
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:clr_exception_nosos_80131604_w3wp.exe!unknown_function
FAILURE_ID_HASH: {b43c244a-dd13-f6d0-2a00-9478d49a1606}
Followup: MachineOwner
---------
===============================================================
I am running this web application in a Windows Server 2012 R2, 64bit operating system.
I am struggling on analyzing these crash dump information. I tried searching for related posts regarding this crash issue and one suggestion I got is to set Enable32BitApplication to true for application pool which I have to try yet (Reference link -
KERNELBASE!RaiseException+68 when calling ASMX webmethod)
Can someone further explain significance of setting this Enable32BitApplication to true as solution to this issue?
Or any guidance in further troubleshoot this crash will be much appreciated.
Thank you.
Continue reading...