Opened 11 years ago
Last modified 11 years ago
#12010 closed defect
VirtualBox.exe Heap Corruption (0xc0000374) — at Initial Version
Reported by: | Kostya253 | Owned by: | |
---|---|---|---|
Component: | other | Version: | VirtualBox 4.2.16 |
Keywords: | Heap corruption | Cc: | |
Guest type: | other | Host type: | other |
Description
Version 4.2.16 ProductVersion: 4.2.16.r86992
I took mini dump - if someone interested
!analyze -v output
FAULTING_IP: ntdllRtlReportCriticalFailure+57 77a6380b eb12 jmp ntdllRtlReportCriticalFailure+0x6b (77a6381f)
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff) ExceptionAddress: 77a6380b (ntdllRtlReportCriticalFailure+0x00000057)
ExceptionCode: c0000374
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 77a7cdd8
PROCESS_NAME: VirtualBox.exe
ERROR_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
EXCEPTION_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
EXCEPTION_PARAMETER1: 77a7cdd8
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
APP: virtualbox.exe
LAST_CONTROL_TRANSFER: from 77a6473b to 77a6380b
FAULTING_THREAD: ffffffff
BUGCHECK_STR: APPLICATION_FAULT_ACTIONABLE_HEAP_CORRUPTION_heap_failure_block_not_busy_DOUBLE_FREE_AFTER_CALL
PRIMARY_PROBLEM_CLASS: ACTIONABLE_HEAP_CORRUPTION_heap_failure_block_not_busy_AFTER_CALL
DEFAULT_BUCKET_ID: ACTIONABLE_HEAP_CORRUPTION_heap_failure_block_not_busy_AFTER_CALL
STACK_TEXT: 77a7ce10 77a1ddff ntdllRtlFreeHeap+0x64 77a7ce14 762cc3d4 kernel32HeapFree+0x14 77a7ce18 5bc2016a msvcr100!free+0x1c 77a7ce1c 578ba5b1 vboxrt!RTMemFree+0x11 77a7ce20 6139dbcd vboxrem32!REMR3NotifyFF+0x1748d
FOLLOWUP_IP: VBoxREM32!REMR3NotifyFF+1748d 6139dbcd 83fb03 cmp ebx,3
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: vboxrem32!REMR3NotifyFF+1748d
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: VBoxREM32
IMAGE_NAME: VBoxREM32.DLL
DEBUG_FLR_IMAGE_TIMESTAMP: 51d588d8
STACK_COMMAND: dps 77a7ce10 ; kb
FAILURE_BUCKET_ID: ACTIONABLE_HEAP_CORRUPTION_heap_failure_block_not_busy_AFTER_CALL_c0000374_VBoxREM32.DLL!REMR3NotifyFF
BUCKET_ID: APPLICATION_FAULT_ACTIONABLE_HEAP_CORRUPTION_heap_failure_block_not_busy_DOUBLE_FREE_AFTER_CALL_vboxrem32!REMR3NotifyFF+1748d
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/VirtualBox_exe/4_2_16_0/51d588dc/ntdll_dll/6_1_7601_17725/4ec49b60/c0000374/000c380b.htm?Retriage=1
Followup: MachineOwner
0:007> lmvm virtualbox start end module name 01350000 01a32000 VirtualBox (export symbols) VirtualBox.exe
Loaded symbol image file: VirtualBox.exe Image path: C:\Program Files\Oracle\VirtualBox\VirtualBox.exe Image name: VirtualBox.exe Timestamp: Thu Jul 04 17:38:20 2013 (51D588DC) CheckSum: 006EA5FD ImageSize: 006E2000 File version: 4.2.16.0 Product version: 4.2.16.0 File flags: 0 (Mask 3F) File OS: 4 Unknown Win32 File type: 1.0 App File date: 00000000.00000000 Translations: 0409.04e4 CompanyName: Oracle Corporation ProductName: Oracle VM VirtualBox InternalName: VirtualBox.exe OriginalFilename: VirtualBox.exe ProductVersion: 4.2.16.r86992 FileVersion: 4.2.16.86992 FileDescription: Oracle VM VirtualBox Manager LegalCopyright: Copyright (C) 2009-2013 Oracle Corporation
0:007> lmvm VBoxREM32 start end module name 61380000 61461000 VBoxREM32 (export symbols) VBoxREM32.DLL
Loaded symbol image file: VBoxREM32.DLL Image path: C:\Program Files\Oracle\VirtualBox\VBoxREM32.DLL Image name: VBoxREM32.DLL Timestamp: Thu Jul 04 17:38:16 2013 (51D588D8) CheckSum: 000B6DA4 ImageSize: 000E1000 File version: 0.0.0.0 Product version: 0.0.0.0 File flags: 0 (Mask 0) File OS: 0 Unknown Base File type: 0.0 Unknown File date: 00000000.00000000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
0:007> kv ChildEBP RetAddr Args to Child 040df590 77a6473b c0000374 77a7cdd8 040df5d4 ntdllRtlReportCriticalFailure+0x57 (FPO: [Non-Fpo]) 040df5a0 77a6481b 00000002 7676d452 00000000 ntdllRtlpReportHeapFailure+0x21 (FPO: [Non-Fpo]) 040df5d4 77a1ddff 00000008 00390000 02aa06b8 ntdllRtlpLogHeapFailure+0xa1 (FPO: [Non-Fpo]) 040df604 762cc3d4 00390000 00000000 02aa06c0 ntdllRtlFreeHeap+0x64 (FPO: [Non-Fpo]) 040df618 5bc2016a 00390000 00000000 02aa06c0 kernel32HeapFree+0x14 (FPO: [Non-Fpo]) 040df62c 578ba5b1 02aa06c0 040df658 6139dbcd msvcr100!free+0x1c (FPO: [Non-Fpo]) WARNING: Stack unwind information not available. Following frames may be wrong. 040df638 6139dbcd 02aa06c0 02aa06c0 ffffffff VBoxRT!RTMemFree+0x11 040df688 61387291 003badc0 804e02d4 00000000 VBoxREM32!REMR3NotifyFF+0x1748d 00000000 00000000 00000000 00000000 00000000 VBoxREM32!REMR3NotifyFF+0xb51