Opened 13 years ago

Last modified 7 years ago

#227 closed defect (None)

Infrequent crash

Reported by: Catschon Owned by:
Priority: Low Milestone:
Component: Core Tor/Tor Version:
Severity: Keywords:
Cc: Catschon Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Crash is not repeatable. Tor client has crashed twice during two days. Earlier it was harmless, being installed for about 20 days.

Pure speculation: This might be related to Torcp, which is new in my configuration. Or to firewalls. Or it receives something what it doesn't like.

I haven't configured Tor for use, Tor is supposed to be idle with default configuration. I think it is connected, though.

Modified stamp in tor.exe is 24.9.2005 7.49; should be Tor 0.1.0.15; TorCP 0.03/0.03a

DrWatson says:

Application exception occurred:

App: (pid=1544)
When: 12/27/2005 @ 23:53:47.875
Exception number: 80000003 (hardcoded breakpoint)

*----> System Information <----*

Computer Name: *
User Name:
Number of Processors: 1
Processor Type: x86 Family 15 Model 4 Stepping 10
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Uniprocessor Free
Registered Organization:
Registered Owner:

*----> Task List <----*

0 Idle.exe
8 System.exe

188 SMSS.exe
208 CSRSS.exe
228 WINLOGON.exe
256 SERVICES.exe
268 LSASS.exe
432 ASECSS.exe
444 GemServ.exe
456 gemback.exe
468 kpf4ss.exe
540 kpf4gui.exe
560 nvsvc32.exe
608 pg_ctl.exe
660 svchost.exe
676 svchost.exe
724 svchost.exe
764 mstask.exe
772 postmaster.exe
812 vsmon.exe
860 postgres.exe
880 postgres.exe
904 postgres.exe
940 postgres.exe
912 WinMgmt.exe

1216 explorer.exe
1184 kpf4gui.exe
1268 SOUNDMAN.exe
1308 rundll32.exe
1320 PDVDServ.exe
1352 zlclient.exe
1360 jusched.exe
1376 vbptask.exe
1400 guard.exe
1136 gcasServ.exe

312 internat.exe

1416 TorCP.exe
1444 ASECMON.exe

960 gcasDtServ.exe
708 privoxy.exe

1288 BSTrayicon.exe
1544 tor.exe
1480 wuauclt.exe
1552 WarpSpdr.exe
1432 firefox.exe
1276 DRWTSN32.exe

0 _Total.exe

(00400000 - 0056D000)
(77F80000 - 77FFC000)
(75050000 - 75058000)
(7C570000 - 7C623000)
(75030000 - 75044000)
(78000000 - 78045000)
(7C2D0000 - 7C335000)
(77D30000 - 77DA8000)
(75020000 - 75028000)
(10000000 - 10027000)
(00240000 - 00311000)
(77F40000 - 77F7C000)
(77E10000 - 77E79000)
(7CF30000 - 7D175000)
(70A70000 - 70AD6000)
(71710000 - 71794000)
(7CE20000 - 7CF0F000)
(6E420000 - 6E426000)
(75E60000 - 75E7A000)
(779B0000 - 77A4B000)
(7C950000 - 7C9DF000)
(77840000 - 7787E000)
(770C0000 - 770E3000)
(74FD0000 - 74FEE000)
(75010000 - 75017000)
(7CA00000 - 7CA23000)
(7C0F0000 - 7C154000)
(7C740000 - 7C7CC000)
(77430000 - 77441000)

State Dump for Thread Id 0x604

eax=00000001 ebx=7ffdf000 ecx=88b4daa9 edx=00400002 esi=0012f860 edi=0012efe8
eip=00510812 esp=0012ed98 ebp=0012eec0 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246

function: <nosymbols>

005107f5 8b04d5e44c5500 mov eax,[00554ce4+edx*8] ds:00400002=00030090
005107fc 50 push eax
005107fd 6a00 push 0x0
005107ff 6a00 push 0x0
00510801 6a00 push 0x0
00510803 6a01 push 0x1
00510805 e8651cf5ff call 0046246f
0051080a 83c414 add esp,0x14
0051080d 83f801 cmp eax,0x1
00510810 7501 jnz 0051d413

FAULT ->00510812 cc int 3

00510813 833dcc7a560001 cmp dword ptr [00567acc],0x1 ds:00567acc=00000000
0051081a 7412 jz 00518b2e
0051081c 833dcc7a560000 cmp dword ptr [00567acc],0x0 ds:00567acc=00000000
00510823 7542 jnz 00518b67
00510825 833dc448550001 cmp dword ptr [005548c4],0x1 ds:005548c4=00000001
0051082c 7539 jnz 00517267
0051082e 6a00 push 0x0
00510830 8d4df8 lea ecx,[ebp+0xf8] ss:00c08da6=????????
00510833 51 push ecx
00510834 8b55fc mov edx,[ebp+0xfc] ss:00c08da6=????????
00510837 8b04d5e44c5500 mov eax,[00554ce4+edx*8] ds:00400002=00030090

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0012EEC0 005003DA 0000000A 0012EFE8 004E019E 0012F11C !<nosymbols>
0012EECC 004E019E 0012F11C 0012F860 7FFDF000 CCCCCCCC !<nosymbols>
0012EFE8 004E0914 0012F0F4 0012F2EC 0012F860 7FFDF000 !<nosymbols>
0012F11C 004A7B99 0012F2B0 0012F464 0012F4B4 0012F860 !<nosymbols>
0012F2EC 004A816B 01576F70 0012F47C 0012F464 0012F44C !<nosymbols>
0012F4B4 004A8020 013B4E80 0012F674 0012F860 7FFDF000 !<nosymbols>
0012F598 00489B25 013B4E80 0012F768 0012F860 7FFDF000 !<nosymbols>
0012F674 00486A10 013B4E80 0012F84C 0012F860 7FFDF000 !<nosymbols>
0012F768 004B8222 013B4E80 0012F95C 0012F860 7FFDF000 !<nosymbols>
0012F84C 004F8DBF 000001A8 01290002 013B4E80 0012FA88 !<nosymbols>
0012F95C 004F8B3B 00A18388 0012FB64 00000000 7FFDF000 !<nosymbols>
0012FA88 004F890E 00A18388 00000000 0012FC3C 00000000 !<nosymbols>
0012FB64 004F8745 00000000 0012FD28 00000000 7FFDF000 !<nosymbols>
0012FC3C 004B9CDC 0012FE00 00000000 7FFDF000 CCCCCCCC !<nosymbols>
0012FD28 004BBC13 0012FEDC 00000000 7FFDF000 00000000 !<nosymbols>
0012FE00 004DA99B 00000001 00A12A50 00000000 00000000 !<nosymbols>
0012FEDC 00509083 00000001 00A12A50 00A12AA8 00000094 !<nosymbols>
0012FFC0 7C598989 00000000 00000000 7FFDF000 80000003 !<nosymbols>
0012FFF0 00000000 00462960 00000000 7C58E891 000055B8 kernel32ProcessIdToSessionId

*----> Raw Stack Dump <----*
0012ed98 60 f8 12 00 d8 ed 12 00 - f0 a4 50 00 00 00 a1 00 `.........P.....
0012eda8 00 00 00 00 24 10 00 00 - e8 ef 12 00 60 f8 12 00 ....$.......`...
0012edb8 00 f0 fd 7f ba 9f 47 00 - f4 ed 12 00 16 c7 4f 00 ......G.......O.
0012edc8 24 ee 12 00 1e 34 46 00 - e8 ef 12 00 7a c9 4f 00 $....4F.....z.O.
0012edd8 3a 1a 52 00 bc 1f a1 00 - e8 ef 12 00 60 f8 12 00 :.R.........`...
0012ede8 00 f0 fd 7f c8 63 31 01 - b0 1f a1 00 f4 a0 50 00 .....c1.......P.
0012edf8 48 7b 56 00 30 ee 12 00 - b4 1a 52 00 bc 1f a1 00 H{V.0.....R.....
0012ee08 40 ee 12 00 5c 74 51 00 - 02 00 00 00 51 74 51 00 @...\tQ.....QtQ.
0012ee18 e8 ef 12 00 60 f8 12 00 - 00 f0 fd 7f 40 00 00 00 ....`.......@...
0012ee28 1e 34 46 00 18 b7 54 00 - a4 ee 12 00 1e 34 46 00 .4F...T......4F.
0012ee38 70 e2 54 00 ff ff ff ff - 60 ee 12 00 fa 42 50 00 p.T.....`....BP.
0012ee48 02 00 00 00 e8 63 31 01 - 40 00 00 00 10 43 55 00 .....c1.@....CU.
0012ee58 40 00 00 00 f4 a0 50 00 - 38 7c 56 00 70 ee 12 00 @.....P.8|V.p...
0012ee68 99 07 50 00 12 00 00 00 - b4 ee 12 00 d7 04 50 00 ..P...........P.
0012ee78 10 43 55 00 cc 04 50 00 - e8 ef 12 00 60 f8 12 00 .CU...P.....`...
0012ee88 00 f0 fd 7f 01 00 00 00 - 40 00 00 00 10 43 55 00 ........@....CU.
0012ee98 c4 ee 12 00 1f 5d 54 00 - cc cc cc cc b0 ff 12 00 .....]T.........
0012eea8 1e 34 46 00 a9 da b4 88 - ff ff ff ff e8 ef 12 00 .4F.............
0012eeb8 96 01 4e 00 03 00 00 00 - cc ee 12 00 da 03 50 00 ..N...........P.
0012eec8 0a 00 00 00 e8 ef 12 00 - 9e 01 4e 00 1c f1 12 00 ..........N.....

State Dump for Thread Id 0x478

eax=77d4aefc ebx=80064bd4 ecx=0012b7c4 edx=00000000 esi=00157ff8 edi=00158038
eip=77f88b37 esp=00f8fe28 ebp=00f8ff74 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202

function: ZwReplyWaitReceivePortEx

77f88b2c b8ac000000 mov eax,0xac
77f88b31 8d542404 lea edx,[esp+0x4] ss:01a69d0f=00001000
77f88b35 cd2e int 2e
77f88b37 c21400 ret 0x14
77f88b3a 8bff mov edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00F8FF74 77D4E0C0 77D4E003 00157FF8 77D4F701 00140000 ntdllZwReplyWaitReceivePortEx
00F8FFA8 77D4AF16 001578D8 00F8FFEC 7C57B388 00158110 rpcrt4UuidCreate
00F8FFB4 7C57B388 00158110 77D4F701 00140000 00158110 rpcrt4RpcMgmtSetCancelTimeout
00F8FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW

State Dump for Thread Id 0x624

eax=74fd6311 ebx=0014be90 ecx=cccccccc edx=00000000 esi=74fea3a0 edi=00000000
eip=77f88af7 esp=0108ff84 ebp=0108ffb4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202

function: NtRemoveIoCompletion

77f88aec b8a8000000 mov eax,0xa8
77f88af1 8d542404 lea edx,[esp+0x4] ss:01b69e6b=????????
77f88af5 cd2e int 2e
77f88af7 c21400 ret 0x14
77f88afa 8bff mov edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0108FFB4 7C57B388 74FD9048 CCCCCCCC CCCCCCCC 0014BE90 ntdllNtRemoveIoCompletion
0108FFEC 00000000 74FD6311 0014BE90 00000000 00000008 kernel32!lstrcmpiW

*----> Raw Stack Dump <----*
0108ff84 63 63 fd 74 68 01 00 00 - bc ff 08 01 b0 ff 08 01 cc.th...........
0108ff94 a4 ff 08 01 08 64 fd 74 - cc cc cc cc cc cc cc cc .....d.t........
0108ffa4 00 00 00 00 00 00 00 00 - 00 00 fd 74 78 c8 14 00 ...........tx...
0108ffb4 ec ff 08 01 88 b3 57 7c - 48 90 fd 74 cc cc cc cc ......W|H..t....
0108ffc4 cc cc cc cc 90 be 14 00 - 00 c0 fd 7f cc cc cc cc ................
0108ffd4 c0 ff 08 01 cc cc cc cc - ff ff ff ff 54 1f 5c 7c ............T.\|
0108ffe4 08 2b 57 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 .+W|............
0108fff4 11 63 fd 74 90 be 14 00 - 00 00 00 00 08 00 00 00 .c.t............
01090004 01 01 00 00 ee ff ee ff - 00 00 00 00 00 00 3e 00 ..............>.
01090014 00 20 01 00 00 00 09 01 - 00 01 00 00 40 00 09 01 . ..........@...
01090024 00 00 19 01 1d 00 00 00 - 05 00 00 00 a8 05 3e 00 ..............>.
01090034 00 00 00 00 60 4a 11 01 - 00 00 00 00 13 00 08 00 ....`J..........
01090044 01 01 08 00 30 81 89 02 - 81 81 00 b4 f2 25 fd cb ....0........%..
01090054 4b 5d 3b 4c 70 03 22 ad - e1 91 a5 68 d1 08 46 36 K];Lp."....h..F6
01090064 e2 c1 e5 87 86 d6 77 93 - 98 0c 69 3b ad 6c 17 1d ......w...i;.l..
01090074 9c 73 36 84 66 56 27 91 - 1e 3a 56 fc 91 3b 97 e3 .s6.fV'..:V..;..
01090084 f9 aa 42 16 11 e8 cd 83 - e7 31 20 0b 9c b9 18 f2 ..B......1 .....
01090094 a0 b8 29 9d f0 11 2e 36 - 11 f7 d0 1b c2 b1 a3 67 ..)....6.......g
010900a4 cb 69 cb 8e 2f 4a 9a ad - e6 9d 21 19 91 35 e8 f9 .i../J....!..5..
010900b4 01 52 1e b0 5f a1 3f 4c - f1 2e 15 84 51 29 cf 77 .R.._.?L....Q).w

[Automatically added by flyspray2trac: Operating System: Windows 2k/XP]

Child Tickets

Change History (4)

comment:1 Changed 13 years ago by nickm

Please let us know if this comes up again; it's not a lot of information to go on. Did Tor log
anything before it died?

comment:2 Changed 13 years ago by arma

I'm going to close this, since there have been two bugfix releases out since
this bug report, and also the upcoming 0.1.1.x. release has even more fixes.

Let us know if the new releases crash too.

comment:3 Changed 13 years ago by arma

flyspray2trac: bug closed.

comment:4 Changed 7 years ago by nickm

Component: Tor ClientTor
Note: See TracTickets for help on using tickets.