Incomplete call stack when exeption occurs inside of an API function of a statically linked DLL

[Marcel Leu]

Hi!

I have a problem analyzing an exception with WinDbg. I load an dialog
based executable program, where I deliberately cause an access
violation at two places, one in the source code of the executable
itself, the other one inside a library, which is statically linked to
the program. The library as well as the executable file are located in
the same directory togther with the .pdb files. The symbol path is
defined.

Analyzing the execption now works, if it happens within the source
code of the executable. It shows a proper call-stack. But in case of
the execption happening inside an API function of the statically
linked dll, the call-stack is incomplete, even the symbol file (.pdb)
is present. See the plot of the WinDbg program below.

Does anyone here have a clue, why I am unable to get a proper call
stack of an exception occuring inside a statically linked DLL file?

Thank's in advance
Marcel

-----------------------------------------------------------------------
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: E:\Visual_C++\CrashProg\Release\CrashProg.exe
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/
download/symbols;E:\Visual_C++\CrashProg\Release
Executable search path is:
ModLoad: 012c0000 0146a000 CrashProg.exe
ModLoad: 77a30000 77bb0000 ntdll.dll
ModLoad: 758c0000 759d0000 C:\Windows\syswow64\kernel32.dll
ModLoad: 77480000 774c6000 C:\Windows\syswow64\KERNELBASE.dll
ModLoad: 0fff0000 10187000 E:\Visual_C++\CrashProg\Release
\CrashDll.dll
ModLoad: 76ba0000 76ca0000 C:\Windows\syswow64\USER32.dll
ModLoad: 75dc0000 75e50000 C:\Windows\syswow64\GDI32.dll
ModLoad: 77a00000 77a0a000 C:\Windows\syswow64\LPK.dll
ModLoad: 770f0000 7718d000 C:\Windows\syswow64\USP10.dll
ModLoad: 75a30000 75adc000 C:\Windows\syswow64\msvcrt.dll
ModLoad: 75640000 756e0000 C:\Windows\syswow64\ADVAPI32.dll
ModLoad: 758a0000 758b9000 C:\Windows\SysWOW64\sechost.dll
ModLoad: 77300000 773f0000 C:\Windows\syswow64\RPCRT4.dll
ModLoad: 75590000 755f0000 C:\Windows\syswow64\SspiCli.dll
ModLoad: 75580000 7558c000 C:\Windows\syswow64\CRYPTBASE.dll
ModLoad: 74b50000 74b55000 C:\Windows\SysWOW64\MSIMG32.dll
ModLoad: 75ae0000 75b5b000 C:\Windows\syswow64\COMDLG32.dll
ModLoad: 759d0000 75a27000 C:\Windows\syswow64\SHLWAPI.dll
ModLoad: 74140000 742de000 C:\Windows\WinSxS
\x86_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll
ModLoad: 75f20000 76b6a000 C:\Windows\syswow64\SHELL32.dll
ModLoad: 74a90000 74ae1000 C:\Windows\SysWOW64\WINSPOOL.DRV
ModLoad: 774d0000 7762c000 C:\Windows\syswow64\ole32.dll
ModLoad: 77000000 7708f000 C:\Windows\syswow64\OLEAUT32.dll
ModLoad: 74cf0000 74d2c000 C:\Windows\SysWOW64\OLEACC.dll
ModLoad: 74b60000 74cf0000 C:\Windows\WinSxS
\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
ModLoad: 76d30000 76d90000 C:\Windows\syswow64\IMM32.dll
ModLoad: 75e50000 75f1c000 C:\Windows\syswow64\MSCTF.dll
ModLoad: 74b10000 74b42000 C:\Windows\SysWOW64\WINMM.dll
(213c.2580): Break instruction exception - code 80000003 (first
chance)
eax=00000000 ebx=00000000 ecx=17470000 edx=0023dc78 esi=fffffffe
edi=00000000
eip=77ad0f3b esp=0018f80c ebp=0018f838 iopl=0 nv up ei pl zr
na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b
efl=00000246
ntdll!LdrpDoDebuggerBreak+0x2c:
77ad0f3b cc int 3
0:000> g
ModLoad: 74a10000 74a90000 C:\Windows\SysWOW64\UxTheme.dll
ModLoad: 749f0000 74a03000 C:\Windows\SysWOW64\dwmapi.dll
ModLoad: 73290000 732e1000 c:\program files (x86)\f-secure\hips
\fshook32.dll
ModLoad: 770e0000 770e5000 C:\Windows\syswow64\PSAPI.DLL
ModLoad: 00660000 00671000 C:\Program Files (x86)\Hardcopy
\HcDLL2_F_Win32.dll
ModLoad: 02b40000 02c9c000 C:\Windows\SysWOW64\ole32.dll
(213c.2580): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=012600c4 ebx=00000001 ecx=012622b0 edx=00000000 esi=012622b0
edi=00000111
eip=00000000 esp=0018f3dc ebp=0018f3f8 iopl=0 nv up ei pl nz
na po nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b
efl=00010202
00000000 ?? ???
0:000> !analyze -v
*******************************************************************************
*
*
* Exception
Analysis *
*
*
*******************************************************************************

GetPageUrlData failed, server returned HTTP status 404
URL requested:
http://watson.microsoft.com/StageOne/CrashProg_exe/1_0_0_1/4e5e30a8/unknown/0_0_0_0/bbbbbbb4/c0000005/00000000.htm?Retriage=1

FAULTING_IP:
+78
00000000 ?? ???

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000008
Parameter[1]: 00000000
Attempt to execute non-executable address 00000000

FAULTING_THREAD: 00002580

PROCESS_NAME: CrashProg.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist
auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef
hrt werden.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx
verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher
durchgef hrt werden.

EXCEPTION_PARAMETER1: 00000008

EXCEPTION_PARAMETER2: 00000000

WRITE_ADDRESS: 00000000

FOLLOWUP_IP:
CrashProg!CCrashProgDlg::OnBnClickedAccessViolation+78 [e:\visual_c++
\crashprog\crashprog\crashprogdlg.cpp @ 183]
012c1c68 8b4df4 mov ecx,dword ptr [ebp-0Ch]

FAILED_INSTRUCTION_ADDRESS:
+4ce2faf0483da00
00000000 ?? ???

MOD_LIST: <ANALYSIS/>

NTGLOBALFLAG: 70

APPLICATION_VERIFIER_FLAGS: 0

BUGCHECK_STR: APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL

PRIMARY_PROBLEM_CLASS: SOFTWARE_NX_FAULT_NULL

DEFAULT_BUCKET_ID: SOFTWARE_NX_FAULT_NULL

LAST_CONTROL_TRANSFER: from 012c1c68 to 00000000

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be
wrong.
0018f3d8 012c1c68 ba7e060d 014039b0 012622b0 0x0
0018f3f8 012c7d78 014039b0 0018fb10 0018f438 CrashProg!
CCrashProgDlg::OnBnClickedAccessViolation+0x78 [e:\visual_c++\crashprog
\crashprog\crashprogdlg.cpp @ 183]
0018f408 012c7f87 0018fb10 000003e9 00000000 CrashProg!
_AfxDispatchCmdMsg+0x45 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\cmdtarg.cpp @ 82]
0018f438 012c45f8 000003e9 00000000 00000000 CrashProg!
CCmdTarget::OnCmdMsg+0x11c [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\cmdtarg.cpp @ 381]
0018f45c 012cf339 000003e9 00000000 00000000 CrashProg!
CDialog::OnCmdMsg+0x1d [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\dlgcore.cpp @ 87]
0018f4ac 012c9352 00000000 00260a16 0018fb10 CrashProg!CWnd::OnCommand
+0x92 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 2728]
0018f4c0 012cfca1 000003e9 00260a16 ba7e008d CrashProg!
CDialogEx::OnCommand+0x2f [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\afxdialogex.cpp @ 290]
0018f578 012cb334 00000111 000003e9 00260a16 CrashProg!CWnd::OnWndMsg
+0x39 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 2101]
0018f598 012ce7e3 00000111 000003e9 00260a16 CrashProg!CWnd::WindowProc
+0x24 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 2087]
0018f60c 012ce872 0018fb10 00110814 00000111 CrashProg!AfxCallWndProc
+0xac [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 257]
0018f62c 76bb62fa 00110814 00000111 000003e9 CrashProg!AfxWndProc+0x36
[f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 419]
0018f658 76bb6d3a 012ce83c 00110814 00000111 USER32!InternalCallWinProc
+0x23
0018f6d0 76bb6de8 00000000 012ce83c 00110814 USER32!
UserCallWinProcCheckWow+0x109
0018f72c 76bb6e44 016403e0 00000000 00000111 USER32!
DispatchClientMessage+0xe0
0018f768 77a4011a 0018f780 00000000 0018f934 USER32!__fnDWORD+0x2b
0018f77c 016403e0 00000000 00000111 000003e9 ntdll!
KiUserCallbackDispatcher+0x2e
0018f7e0 76bb96c5 016403e0 00000000 012ce83c 0x16403e0
0018f804 741e4601 00110814 00000111 000003e9 USER32!SendMessageW+0x7f
0018f824 741e4663 006b5190 00000000 00260a16 COMCTL32!
Button_NotifyParent+0x3d
0018f840 741e44ed 50010001 00000001 00000000 COMCTL32!
Button_ReleaseCapture+0x113
0018f8a0 76bb62fa 00260a16 00000202 00000000 COMCTL32!Button_WndProc
+0xa18
0018f8cc 76bb6d3a 7416b495 00260a16 00000202 USER32!InternalCallWinProc
+0x23
0018f944 76bb77c4 00000000 7416b495 00260a16 USER32!
UserCallWinProcCheckWow+0x109
0018f9a4 76bb788a 7416b495 00000000 0018f9e0 USER32!
DispatchMessageWorker+0x3bc
0018f9b4 76bdc81f 006b3110 76bc3559 0018fb10 USER32!DispatchMessageW
+0xf
0018f9e0 012d10c8 00110814 00000000 0018fb10 USER32!IsDialogMessageW
+0x5f6
0018f9f4 012cc1b2 006b3110 0018fa14 012c45d5 CrashProg!
CWnd::IsDialogMessageW+0x32 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\winocc.cpp @ 197]
0018fa00 012c45d5 006b3110 006b3110 0018fb10 CrashProg!
CWnd::PreTranslateInput+0x2d [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\wincore.cpp @ 4712]
0018fa14 012c930d 006b3110 00110814 0018fa38 CrashProg!
CDialog::PreTranslateMessage+0xa3 [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\dlgcore.cpp @ 81]
0018fa24 012cddc2 006b3110 006b3110 0018fb10 CrashProg!
CDialogEx::PreTranslateMessage+0x29 [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\afxdialogex.cpp @ 275]
0018fa38 012c866a 00110814 006b3110 006b30e0 CrashProg!
CWnd::WalkPreTranslateTree+0x23 [f:\dd\vctools\vc7libs\ship\atlmfc\src
\mfc\wincore.cpp @ 3311]
0018fa50 012c87c4 006b3110 0018fa68 012c86b5 CrashProg!
AfxInternalPreTranslateMessage+0x41 [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\thrdcore.cpp @ 233]
0018fa5c 012c86b5 006b3110 0018faa0 012c8811 CrashProg!
CWinThread::PreTranslateMessage+0xd [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\thrdcore.cpp @ 777]
0018fa68 012c8811 006b3110 00000000 0018fb10 CrashProg!
AfxPreTranslateMessage+0x19 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\thrdcore.cpp @ 255]
0018fa78 012ccfd5 00000004 0018fb10 00000000 CrashProg!
AfxInternalPumpMessage+0x2d [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\thrdcore.cpp @ 178]
0018faa0 012c4d08 00000004 ba7e0f19 01268038 CrashProg!
CWnd::RunModalLoop+0xc5 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\wincore.cpp @ 4767]
0018faec 012c1140 ba7e0f0d 01429088 01429088 CrashProg!CDialog::DoModal
+0x130 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dlgcore.cpp @ 638]
0018fbe8 013cc5b2 77a401f8 00000000 000501a2 CrashProg!
CCrashProgApp::InitInstance+0x100 [e:\visual_c++\crashprog\crashprog
\crashprog.cpp @ 83]
0018fbfc 013b5ee7 012c0000 00000000 006a3122 CrashProg!AfxWinMain+0x48
[f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winmain.cpp @ 37]
0018fc8c 758d339a 7efde000 0018fcd8 77a69ed2 CrashProg!
__tmainCRTStartup+0x11a [f:\dd\vctools\crt_bld\self_x86\crt\src\crt0.c
@ 275]
0018fc98 77a69ed2 7efde000 76005a17 00000000 kernel32!
BaseThreadInitThunk+0xe
0018fcd8 77a69ea5 013b5f3a 7efde000 00000000 ntdll!__RtlUserThreadStart
+0x70
0018fcf0 00000000 013b5f3a 7efde000 00000000 ntdll!_RtlUserThreadStart
+0x1b


FAULTING_SOURCE_CODE:
179:
180: pDlg->DoModal();
181:
182: int nHallo = 0;
> 183: }
184:
185:
186: void CCrashProgDlg::OnCancel()
187: {
188: CAboutDlg* pDlg = new CAboutDlg();


SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: crashprog!CCrashProgDlg::OnBnClickedAccessViolation+78

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: CrashProg

IMAGE_NAME: CrashProg.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4e5e30a8

STACK_COMMAND: dt ntdll!LdrpLastDllInitializer BaseDllName ; dt ntdll!
LdrpFailureData ; ~0s ; kb

FAILURE_BUCKET_ID: SOFTWARE_NX_FAULT_NULL_c0000005_CrashProg.exe!
CCrashProgDlg::OnBnClickedAccessViolation

BUCKET_ID: APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL_NULL_IP_crashprog!
CCrashProgDlg::OnBnClickedAccessViolation+78

WATSON_STAGEONE_URL:
http://watson.microsoft.com/StageOne/CrashProg_exe/1_0_0_1/4e5e30a8/unknown/0_0_0_0/bbbbbbb4/c0000005/00000000.htm?Retriage=1

Followup: MachineOwner
---------

0:000> g
(213c.2580): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=009900c4 ebx=00000001 ecx=00996cb8 edx=00000000 esi=014039b0
edi=00000111
eip=00000000 esp=0018f3fc ebp=0018f408 iopl=0 nv up ei pl nz
na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b
efl=00010206
00000000 ?? ???
0:000> !analyze -v
*******************************************************************************
*
*
* Exception
Analysis *
*
*
*******************************************************************************

GetPageUrlData failed, server returned HTTP status 404
URL requested:
http://watson.microsoft.com/StageOne/CrashProg_exe/1_0_0_1/4e5e30a8/unknown/0_0_0_0/bbbbbbb4/c0000005/00000000.htm?Retriage=1

FAULTING_IP:
+45
00000000 ?? ???

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000008
Parameter[1]: 00000000
Attempt to execute non-executable address 00000000

FAULTING_THREAD: 00002580

PROCESS_NAME: CrashProg.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist
auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef
hrt werden.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx
verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher
durchgef hrt werden.

EXCEPTION_PARAMETER1: 00000008

EXCEPTION_PARAMETER2: 00000000

WRITE_ADDRESS: 00000000

FOLLOWUP_IP:
CrashProg!_AfxDispatchCmdMsg+45 [f:\dd\vctools\vc7libs\ship\atlmfc\src
\mfc\cmdtarg.cpp @ 82]
012c7d78 e9b1000000 jmp CrashProg!_AfxDispatchCmdMsg+0xfb
(012c7e2e)

FAILED_INSTRUCTION_ADDRESS:
+4ce2faf0483da00
00000000 ?? ???

MOD_LIST: <ANALYSIS/>

NTGLOBALFLAG: 70

APPLICATION_VERIFIER_FLAGS: 0

BUGCHECK_STR: APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL

PRIMARY_PROBLEM_CLASS: SOFTWARE_NX_FAULT_NULL

DEFAULT_BUCKET_ID: SOFTWARE_NX_FAULT_NULL

LAST_CONTROL_TRANSFER: from 012c7d78 to 00000000

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be
wrong.
0018f3f8 012c7d78 014039b0 0018fb10 0018f438 0x0
0018f408 012c7f87 0018fb10 000003ea 00000000 CrashProg!
_AfxDispatchCmdMsg+0x45 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\cmdtarg.cpp @ 82]
0018f438 012c45f8 000003ea 00000000 00000000 CrashProg!
CCmdTarget::OnCmdMsg+0x11c [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\cmdtarg.cpp @ 381]
0018f45c 012cf339 000003ea 00000000 00000000 CrashProg!
CDialog::OnCmdMsg+0x1d [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\dlgcore.cpp @ 87]
0018f4ac 012c9352 00000000 001804f2 0018fb10 CrashProg!CWnd::OnCommand
+0x92 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 2728]
0018f4c0 012cfca1 000003ea 001804f2 ba7e008d CrashProg!
CDialogEx::OnCommand+0x2f [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\afxdialogex.cpp @ 290]
0018f578 012cb334 00000111 000003ea 001804f2 CrashProg!CWnd::OnWndMsg
+0x39 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 2101]
0018f598 012ce7e3 00000111 000003ea 001804f2 CrashProg!CWnd::WindowProc
+0x24 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 2087]
0018f60c 012ce872 0018fb10 00110814 00000111 CrashProg!AfxCallWndProc
+0xac [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 257]
0018f62c 76bb62fa 00110814 00000111 000003ea CrashProg!AfxWndProc+0x36
[f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 419]
0018f658 76bb6d3a 012ce83c 00110814 00000111 USER32!InternalCallWinProc
+0x23
0018f6d0 76bb6de8 00000000 012ce83c 00110814 USER32!
UserCallWinProcCheckWow+0x109
0018f72c 76bb6e44 016403e0 00000000 00000111 USER32!
DispatchClientMessage+0xe0
0018f768 77a4011a 0018f780 00000000 0018f934 USER32!__fnDWORD+0x2b
0018f77c 016403e0 00000000 00000111 000003ea ntdll!
KiUserCallbackDispatcher+0x2e
0018f7e0 76bb96c5 016403e0 00000000 012ce83c 0x16403e0
0018f804 741e4601 00110814 00000111 000003ea USER32!SendMessageW+0x7f
0018f824 741e4663 006b5260 00000000 001804f2 COMCTL32!
Button_NotifyParent+0x3d
0018f840 741e44ed 50010001 00000001 00000000 COMCTL32!
Button_ReleaseCapture+0x113
0018f8a0 76bb62fa 001804f2 00000202 00000000 COMCTL32!Button_WndProc
+0xa18
0018f8cc 76bb6d3a 7416b495 001804f2 00000202 USER32!InternalCallWinProc
+0x23
0018f944 76bb77c4 00000000 7416b495 001804f2 USER32!
UserCallWinProcCheckWow+0x109
0018f9a4 76bb788a 7416b495 00000000 0018f9e0 USER32!
DispatchMessageWorker+0x3bc
0018f9b4 76bdc81f 006b3110 76bc3559 0018fb10 USER32!DispatchMessageW
+0xf
0018f9e0 012d10c8 00110814 00000000 0018fb10 USER32!IsDialogMessageW
+0x5f6
0018f9f4 012cc1b2 006b3110 0018fa14 012c45d5 CrashProg!
CWnd::IsDialogMessageW+0x32 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\winocc.cpp @ 197]
0018fa00 012c45d5 006b3110 006b3110 0018fb10 CrashProg!
CWnd::PreTranslateInput+0x2d [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\wincore.cpp @ 4712]
0018fa14 012c930d 006b3110 00110814 0018fa38 CrashProg!
CDialog::PreTranslateMessage+0xa3 [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\dlgcore.cpp @ 81]
0018fa24 012cddc2 006b3110 006b3110 0018fb10 CrashProg!
CDialogEx::PreTranslateMessage+0x29 [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\afxdialogex.cpp @ 275]
0018fa38 012c866a 00110814 006b3110 006b30e0 CrashProg!
CWnd::WalkPreTranslateTree+0x23 [f:\dd\vctools\vc7libs\ship\atlmfc\src
\mfc\wincore.cpp @ 3311]
0018fa50 012c87c4 006b3110 0018fa68 012c86b5 CrashProg!
AfxInternalPreTranslateMessage+0x41 [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\thrdcore.cpp @ 233]
0018fa5c 012c86b5 006b3110 0018faa0 012c8811 CrashProg!
CWinThread::PreTranslateMessage+0xd [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\thrdcore.cpp @ 777]
0018fa68 012c8811 006b3110 00000000 0018fb10 CrashProg!
AfxPreTranslateMessage+0x19 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\thrdcore.cpp @ 255]
0018fa78 012ccfd5 00000004 0018fb10 00000000 CrashProg!
AfxInternalPumpMessage+0x2d [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\thrdcore.cpp @ 178]
0018faa0 012c4d08 00000004 ba7e0f19 01268038 CrashProg!
CWnd::RunModalLoop+0xc5 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\wincore.cpp @ 4767]
0018faec 012c1140 ba7e0f0d 01429088 01429088 CrashProg!CDialog::DoModal
+0x130 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dlgcore.cpp @ 638]
0018fbe8 013cc5b2 77a401f8 00000000 000501a2 CrashProg!
CCrashProgApp::InitInstance+0x100 [e:\visual_c++\crashprog\crashprog
\crashprog.cpp @ 83]
0018fbfc 013b5ee7 012c0000 00000000 006a3122 CrashProg!AfxWinMain+0x48
[f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winmain.cpp @ 37]
0018fc8c 758d339a 7efde000 0018fcd8 77a69ed2 CrashProg!
__tmainCRTStartup+0x11a [f:\dd\vctools\crt_bld\self_x86\crt\src\crt0.c
@ 275]
0018fc98 77a69ed2 7efde000 76005a17 00000000 kernel32!
BaseThreadInitThunk+0xe
0018fcd8 77a69ea5 013b5f3a 7efde000 00000000 ntdll!__RtlUserThreadStart
+0x70
0018fcf0 00000000 013b5f3a 7efde000 00000000 ntdll!_RtlUserThreadStart
+0x1b


FAULTING_SOURCE_CODE:
No source found for 'f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\cmdtarg.cpp'


SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: crashprog!_AfxDispatchCmdMsg+45

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: CrashProg

IMAGE_NAME: CrashProg.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4e5e30a8

STACK_COMMAND: dt ntdll!LdrpLastDllInitializer BaseDllName ; dt ntdll!
LdrpFailureData ; ~0s ; kb

FAILURE_BUCKET_ID: SOFTWARE_NX_FAULT_NULL_c0000005_CrashProg.exe!
_AfxDispatchCmdMsg

BUCKET_ID: APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL_NULL_IP_crashprog!
_AfxDispatchCmdMsg+45

WATSON_STAGEONE_URL:
http://watson.microsoft.com/StageOne/CrashProg_exe/1_0_0_1/4e5e30a8/unknown/0_0_0_0/bbbbbbb4/c0000005/00000000.htm?Retriage=1

Followup: MachineOwner
---------

[Saulius Menkevičius]

Hi,

Just wondering, if there is something like "statically linked DLLs" at
all, sounds like oxymoron. DLL stands for "dynamically linked
library". Do you mean your DLL project is compiled to statically
linked .lib, instead of a .dll in the case where it fails to show the
callstack?

-saulius

[Marcel Leu]

Hi,

yes my way of writing is really easy to misunderstand. No it is
dynamic linked libraray, no class lib. It is included to the C++
application with header file an linked with the .lib file. In other
projects I used "LoadLibrary" and "GetProcAddress" function, but
that's not the case in my test project.

Marcel

[Saulius Menkevičius]

You could try !sym noisy command before loading the exe in windbg to
check the reason why windbg fails to load symbols for a dll

[Marcel Leu]

Thanks for the advice Saulius,

in the plot I copied belowed it now clearly states that even the DLL
"CrashDll.dll" was loaded, WinDbg did not even attempt to load
"CrashDll.pdb" I actually have no clue why. CrashProg.pdb was loaded
properly. I can't honestly believe that I am the first one trying to
get a call stack of an exception occuring in a DLL's API function, so
any advice would be appreciated very much.

Regards
Marcel

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: E:\Visual_C++\CrashProg\Release\CrashProg.exe

Symbol search path is: srv*c:\websymbols*http://msdl.microsoft.com/

download/symbols;E:\Visual_C++\CrashProg\Release\
Executable search path is:

ModLoad: 003d0000 0057a000 CrashProg.exe
ModLoad: 77560000 776e0000 ntdll.dll
ModLoad: 755a0000 756b0000 C:\Windows\syswow64\kernel32.dll
ModLoad: 76290000 762d6000 C:\Windows\syswow64\KERNELBASE.dll
ModLoad: 666e0000 66877000 E:\Visual_C++\CrashProg\Release
\CrashDll.dll
ModLoad: 75c20000 75d20000 C:\Windows\syswow64\USER32.dll
ModLoad: 75730000 757c0000 C:\Windows\syswow64\GDI32.dll
ModLoad: 756d0000 756da000 C:\Windows\syswow64\LPK.dll
ModLoad: 75500000 7559d000 C:\Windows\syswow64\USP10.dll
ModLoad: 75450000 754fc000 C:\Windows\syswow64\msvcrt.dll
ModLoad: 75ee0000 75f80000 C:\Windows\syswow64\ADVAPI32.dll
ModLoad: 75260000 75279000 C:\Windows\SysWOW64\sechost.dll
ModLoad: 758d0000 759c0000 C:\Windows\syswow64\RPCRT4.dll
ModLoad: 750c0000 75120000 C:\Windows\syswow64\SspiCli.dll
ModLoad: 750b0000 750bc000 C:\Windows\syswow64\CRYPTBASE.dll
ModLoad: 74680000 74685000 C:\Windows\SysWOW64\MSIMG32.dll
ModLoad: 75fb0000 7602b000 C:\Windows\syswow64\COMDLG32.dll
ModLoad: 75e80000 75ed7000 C:\Windows\syswow64\SHLWAPI.dll
ModLoad: 73a20000 73bbe000 C:\Windows\WinSxS
\x86_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll
ModLoad: 762e0000 76f2a000 C:\Windows\syswow64\SHELL32.dll
ModLoad: 745c0000 74611000 C:\Windows\SysWOW64\WINSPOOL.DRV
ModLoad: 752f0000 7544c000 C:\Windows\syswow64\ole32.dll
ModLoad: 75df0000 75e7f000 C:\Windows\syswow64\OLEAUT32.dll
ModLoad: 74820000 7485c000 C:\Windows\SysWOW64\OLEACC.dll
ModLoad: 74690000 74820000 C:\Windows\WinSxS
\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
ModLoad: 76030000 76090000 C:\Windows\syswow64\IMM32.dll
ModLoad: 75d20000 75dec000 C:\Windows\syswow64\MSCTF.dll
ModLoad: 74640000 74672000 C:\Windows\SysWOW64\WINMM.dll
(1ab8.360): Break instruction exception - code 80000003 (first chance)
eax=00000000 ebx=00000000 ecx=17dc0000 edx=001addd8 esi=fffffffe
edi=00000000
eip=77600f3b esp=002bf8dc ebp=002bf908 iopl=0 nv up ei pl zr

na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b
efl=00000246
ntdll!LdrpDoDebuggerBreak+0x2c:

77600f3b cc int 3
0:000> !sym noisy
noisy mode - symbol prompts on
0:000> g
ModLoad: 74540000 745c0000 C:\Windows\SysWOW64\UxTheme.dll
ModLoad: 74520000 74533000 C:\Windows\SysWOW64\dwmapi.dll
ModLoad: 71210000 71261000 c:\program files (x86)\f-secure\hips
\fshook32.dll
ModLoad: 752e0000 752e5000 C:\Windows\syswow64\PSAPI.DLL
ModLoad: 10000000 10011000 C:\Program Files (x86)\Hardcopy
\HcDLL2_F_Win32.dll
ModLoad: 03800000 0395c000 C:\Windows\SysWOW64\ole32.dll
(1ab8.360): Access violation - code c0000005 (first chance)

First chance exceptions are reported before any exception handling.
This exception may be expected and handled.

eax=003300c4 ebx=00000001 ecx=00336cb8 edx=00000000 esi=005139b0
edi=00000111
eip=00000000 esp=002bf4cc ebp=002bf4d8 iopl=0 nv up ei pl nz

na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b
efl=00010206
00000000 ?? ???
0:000> !analyze -v

SYMSRV: WinInet Interface using proxy server: proxy:8080
SYMSRV: c:\websymbols\CrashProg.pdb\0AD99BE6A1C74293B0CBF039B05B7C1Cb
\CrashProg.pdb not found
SYMSRV: http://msdl.microsoft.com/download/symbols/CrashProg.pdb/0AD99BE6A1C74293B0CBF039B05B7C1Cb/CrashProg.pdb
not found
DBGHELP: CrashProg - private symbols & lines
e:\visual_c++\crashprog\release\CrashProg.pdb

*******************************************************************************
*
*
* Exception
Analysis *
*
*
*******************************************************************************

DBGHELP: USER32 - public symbols
c:\websymbols\wuser32.pdb
\0FCE9CC301ED4567A819705B2718E1D62\wuser32.pdb
DBGHELP: COMCTL32 - public symbols
c:\websymbols\comctl32.pdb
\B4CE90AAB95E4B89A22A7711DFD7E6EF2\comctl32.pdb
DBGHELP: kernel32 - public symbols
c:\websymbols\wkernel32.pdb
\DFB4E9EBD1654DB2ACF1290CD316CEA22\wkernel32.pdb
SYMSRV: c:\websymbols\CrashProg.exe\4E5E30A81aa000\CrashProg.exe not
found
SYMSRV: http://msdl.microsoft.com/download/symbols/CrashProg.exe/4E5E30A81aa000/CrashProg.exe
not found
DBGHELP: E:\Visual_C++\CrashProg\Release\CrashProg.exe - OK
DBGHELP: c:\websymbols\COMCTL32.dll\4CE7B71C19e000\COMCTL32.dll - OK
DBGHELP: c:\websymbols\kernel32.dll\4E211318110000\kernel32.dll - OK
DBGHELP: c:\websymbols\GDI32.dll\4CE7BA5390000\GDI32.dll - OK
DBGHELP: c:\websymbols\USER32.dll\4CE7BA59100000\USER32.dll - OK
DBGHELP: c:\websymbols\ntdll.dll\4CE7BA58180000\ntdll.dll - OK
DBGHELP: ole32 - public symbols
c:\websymbols\ole32.pdb
\5061F11A9A57433595EA5EA75A156F4B2\ole32.pdb
SYMSRV: c:\websymbols\CrashProg.exe\4E5E30A81aa000\CrashProg.exe not
found
SYMSRV: http://msdl.microsoft.com/download/symbols/CrashProg.exe/4E5E30A81aa000/CrashProg.exe
not found
DBGHELP: E:\Visual_C++\CrashProg\Release\CrashProg.exe - OK
DBGHELP: c:\websymbols\COMCTL32.dll\4CE7B71C19e000\COMCTL32.dll - OK
DBGHELP: c:\websymbols\kernel32.dll\4E211318110000\kernel32.dll - OK
DBGHELP: c:\websymbols\GDI32.dll\4CE7BA5390000\GDI32.dll - OK
DBGHELP: c:\websymbols\USER32.dll\4CE7BA59100000\USER32.dll - OK
DBGHELP: c:\websymbols\ntdll.dll\4CE7BA58180000\ntdll.dll - OK

GetPageUrlData failed, server returned HTTP status 404
URL requested:
http://watson.microsoft.com/StageOne/CrashProg_exe/1_0_0_1/4e5e30a8/unknown/0_0_0_0/bbbbbbb4/c0000005/00000000.htm?Retriage=1

FAULTING_IP:
+45
00000000 ?? ???

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000008
Parameter[1]: 00000000
Attempt to execute non-executable address 00000000

FAULTING_THREAD: 00000360

PROCESS_NAME: CrashProg.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist
auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef
hrt werden.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx
verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher
durchgef hrt werden.

EXCEPTION_PARAMETER1: 00000008

EXCEPTION_PARAMETER2: 00000000

WRITE_ADDRESS: 00000000

FOLLOWUP_IP:
CrashProg!_AfxDispatchCmdMsg+45 [f:\dd\vctools\vc7libs\ship\atlmfc\src
\mfc\cmdtarg.cpp @ 82]

003d7d78 e9b1000000 jmp CrashProg!_AfxDispatchCmdMsg+0xfb
(003d7e2e)

FAILED_INSTRUCTION_ADDRESS:
+67212faf046cdd60

00000000 ?? ???

MOD_LIST: <ANALYSIS/>

NTGLOBALFLAG: 70

APPLICATION_VERIFIER_FLAGS: 0

BUGCHECK_STR: APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL

PRIMARY_PROBLEM_CLASS: SOFTWARE_NX_FAULT_NULL

DEFAULT_BUCKET_ID: SOFTWARE_NX_FAULT_NULL

LAST_CONTROL_TRANSFER: from 003d7d78 to 00000000

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be
wrong.

002bf4c8 003d7d78 005139b0 002bfbe0 002bf508 0x0
002bf4d8 003d7f87 002bfbe0 000003ea 00000000 CrashProg!

_AfxDispatchCmdMsg+0x45 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\cmdtarg.cpp @ 82]

002bf508 003d45f8 000003ea 00000000 00000000 CrashProg!

CCmdTarget::OnCmdMsg+0x11c [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\cmdtarg.cpp @ 381]

002bf52c 003df339 000003ea 00000000 00000000 CrashProg!

CDialog::OnCmdMsg+0x1d [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\dlgcore.cpp @ 87]

002bf57c 003d9352 00000000 000607fa 002bfbe0 CrashProg!CWnd::OnCommand

+0x92 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 2728]

002bf590 003dfca1 000003ea 000607fa 54ce5095 CrashProg!

CDialogEx::OnCommand+0x2f [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\afxdialogex.cpp @ 290]

002bf648 003db334 00000111 000003ea 000607fa CrashProg!CWnd::OnWndMsg

+0x39 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 2101]

002bf668 003de7e3 00000111 000003ea 000607fa CrashProg!CWnd::WindowProc

+0x24 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 2087]

002bf6dc 003de872 002bfbe0 000b08e2 00000111 CrashProg!AfxCallWndProc

+0xac [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 257]

002bf6fc 75c362fa 000b08e2 00000111 000003ea CrashProg!AfxWndProc+0x36

[f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp @ 419]

002bf728 75c36d3a 003de83c 000b08e2 00000111 USER32!InternalCallWinProc
+0x23
002bf7a0 75c36de8 00000000 003de83c 000b08e2 USER32!
UserCallWinProcCheckWow+0x109
002bf7fc 75c36e44 00c7d850 00000000 00000111 USER32!
DispatchClientMessage+0xe0
002bf838 7757011a 002bf850 00000000 002bfa04 USER32!__fnDWORD+0x2b
002bf84c 00c7d850 00000000 00000111 000003ea ntdll!
KiUserCallbackDispatcher+0x2e
002bf8b0 75c396c5 00c7d850 00000000 003de83c 0xc7d850
002bf8d4 73ac4601 000b08e2 00000111 000003ea USER32!SendMessageW+0x7f
002bf8f4 73ac4663 00795260 00000000 000607fa COMCTL32!
Button_NotifyParent+0x3d
002bf910 73ac44ed 50010001 00000001 00000000 COMCTL32!
Button_ReleaseCapture+0x113
002bf970 75c362fa 000607fa 00000202 00000000 COMCTL32!Button_WndProc
+0xa18
002bf99c 75c36d3a 73a4b495 000607fa 00000202 USER32!InternalCallWinProc
+0x23
002bfa14 75c377c4 00000000 73a4b495 000607fa USER32!
UserCallWinProcCheckWow+0x109
002bfa74 75c3788a 73a4b495 00000000 002bfab0 USER32!
DispatchMessageWorker+0x3bc
002bfa84 75c5c81f 00793110 75c43559 002bfbe0 USER32!DispatchMessageW
+0xf
002bfab0 003e10c8 000b08e2 00000000 002bfbe0 USER32!IsDialogMessageW
+0x5f6
002bfac4 003dc1b2 00793110 002bfae4 003d45d5 CrashProg!

CWnd::IsDialogMessageW+0x32 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\winocc.cpp @ 197]

002bfad0 003d45d5 00793110 00793110 002bfbe0 CrashProg!

CWnd::PreTranslateInput+0x2d [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\wincore.cpp @ 4712]

002bfae4 003d930d 00793110 000b08e2 002bfb08 CrashProg!

CDialog::PreTranslateMessage+0xa3 [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\dlgcore.cpp @ 81]

002bfaf4 003dddc2 00793110 00793110 002bfbe0 CrashProg!

CDialogEx::PreTranslateMessage+0x29 [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\afxdialogex.cpp @ 275]

002bfb08 003d866a 000b08e2 00793110 007930e0 CrashProg!

CWnd::WalkPreTranslateTree+0x23 [f:\dd\vctools\vc7libs\ship\atlmfc\src
\mfc\wincore.cpp @ 3311]

002bfb20 003d87c4 00793110 002bfb38 003d86b5 CrashProg!

AfxInternalPreTranslateMessage+0x41 [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\thrdcore.cpp @ 233]

002bfb2c 003d86b5 00793110 002bfb70 003d8811 CrashProg!

CWinThread::PreTranslateMessage+0xd [f:\dd\vctools\vc7libs\ship\atlmfc
\src\mfc\thrdcore.cpp @ 777]

002bfb38 003d8811 00793110 00000000 002bfbe0 CrashProg!

AfxPreTranslateMessage+0x19 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\thrdcore.cpp @ 255]

002bfb48 003dcfd5 00000004 002bfbe0 00000000 CrashProg!

AfxInternalPumpMessage+0x2d [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\thrdcore.cpp @ 178]

002bfb70 003d4d08 00000004 54ce5d61 028b8038 CrashProg!

CWnd::RunModalLoop+0xc5 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc
\wincore.cpp @ 4767]

002bfbbc 003d1140 54ce5d15 00539088 00539088 CrashProg!CDialog::DoModal

+0x130 [f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dlgcore.cpp @ 638]

002bfcb8 004dc5b2 775701f8 00000000 000501a2 CrashProg!

CCrashProgApp::InitInstance+0x100 [e:\visual_c++\crashprog\crashprog
\crashprog.cpp @ 83]

002bfccc 004c5ee7 003d0000 00000000 00783122 CrashProg!AfxWinMain+0x48

[f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winmain.cpp @ 37]

002bfd5c 755b339a 7efde000 002bfda8 77599ed2 CrashProg!

__tmainCRTStartup+0x11a [f:\dd\vctools\crt_bld\self_x86\crt\src\crt0.c
@ 275]

002bfd68 77599ed2 7efde000 772f5bfc 00000000 kernel32!
BaseThreadInitThunk+0xe
002bfda8 77599ea5 004c5f3a 7efde000 00000000 ntdll!__RtlUserThreadStart
+0x70
002bfdc0 00000000 004c5f3a 7efde000 00000000 ntdll!_RtlUserThreadStart

[Saulius Menkevičius]

in the last log you pasted there is no reference to crash.dll in the
stack:

ModLoad: 666e0000 66877000 E:\Visual_C++\CrashProg\Release
\CrashDll.dll

this dll resides in the address from 666e* to 6687*, but

LAST_CONTROL_TRANSFER: from 003d7d78 to 00000000

could you paste a dump where fault actually occurs within the address
of the .dll? i think windbg does on-demand loading of pdbs, but i am
not sure, though