IP accounting / output-packets / access-violations

I applied an access list to a VLAN interface and also added IP accounting output-packets and ip accounting access-violations. Interestingly, the devices that are allowed off the subnet can the ones that should be blocked are blocked by the ACL and show up in the show IP accounting access-v command. What I don't understand is why the show IP accounting doesn't show any packets. Also why a show access-list doesn't show any hits on the list. Is it because I'm using a VLAN interface? I would think I should see output packets and hits on the ACL. I do see dropped packets on the ACL for the violators.

Hello,
On certain platforms (hw/sw) packets are switched in hardware and not software. The RP doesn't have to make a forwarding decision. The ip accounting output-packets tracks statistics for packets via the RP. Applying a an ACL to a VLAN would typically breaks the flow of hardware switching and forces those packets to be further interrogated.
More granular traffic flows and statistics can be recorded with netflow switching. This does work on an SVI.
I hope this helps.
Regards,
James

Similar Messages

0xC0000005 Access Violation in cvirte.dll (SetWindowsErrorMode?)

Hello,
We will occasionally see a crash with our CVI LabWindows based 2010 SP1 application, a 0xC0000005 Access Violation exception thrown from within cvirte.dll. The app is working primarily from a spawned thread when the crash occurs. I've been able to get it consistently on a Win7 x64 VirtualBox VM and have some data that may be of use if someone there would like to investigate.
When I track down the location of the instruction pointer (work below) it seems to be in the "SetWindowsErrorMode()" function (at least going by the exports in DependencyWalker):
1. The IP is 0x687B5F1C at the time of the crash.
2. The base module address for cvirte.dll is 0x68420000, so the IP is 0x395F1C bytes into the DLL.
3. Using DependencyWalker on cvirte.dll and sorting by entry point indicates that the IP is inside of "SetWindowsErrorMode()" at 0x003938D0, which comes before "MinimizeAllWindows()" at 0x003984B0.
Coincidentally, this crash happens in CVI 2013 F1 as well, the offset within "SetWindowsErrorMode()" is a bit different (0x264C past entry in 2010 SP1, 0x2D0C past entry in 2013), but locally the code looks the same in my VS2010 disassembler:
CVI2010 SP1
*Address *Code Bytes *Instruction
687B5F02 89 17 mov dword ptr [edi],edx
687B5F04 8B 48 5C mov ecx,dword ptr [eax+5Ch]
687B5F07 89 78 6C mov dword ptr [eax+6Ch],edi
687B5F0A 89 4F 04 mov dword ptr [edi+4],ecx
687B5F0D 89 58 5C mov dword ptr [eax+5Ch],ebx
687B5F10 C7 40 60 00 00 00 00 mov dword ptr [eax+60h],0
687B5F17 5E pop esi
687B5F18 85 DB test ebx,ebx
687B5F1A 74 09 je 687B5F25
687B5F1C 8B 13 mov edx,dword ptr [ebx] <--- CRASH
CVI2013 F1
*Address *Code Bytes *Instruction
687CA2B2 89 17 mov dword ptr [edi],edx
687CA2B4 8B 48 5C mov ecx,dword ptr [eax+5Ch]
687CA2B7 89 78 6C mov dword ptr [eax+6Ch],edi
687CA2BA 89 4F 04 mov dword ptr [edi+4],ecx
687CA2BD 89 58 5C mov dword ptr [eax+5Ch],ebx
687CA2C0 C7 40 60 00 00 00 00 mov dword ptr [eax+60h],0
687CA2C7 5E pop esi
687CA2C8 85 DB test ebx,ebx
687CA2CA 74 09 je 687CA2D5
687CA2CC 8B 13 mov edx,dword ptr [ebx] <--- CRASH
I have dump files (mini, or mini+heap) for both builds if it would help.
This bug seems semi-similar to the thread "Is InstallPopup not threadsafe?":
http://forums.ni.com/t5/LabWindows-CVI/Is-InstallPopup-not-threadsafe/m-p/716822/highlight/true#M359...
Just for posterity, I'll add the data for the 2013 build. IP is 0x687CA2CC, DLL Module address is 0x68420000-0x68A28000, so offset is 0x3AA2CC. "SetWindowsErrorMode()" enters at 0x003A75C0 in this dll, and "MinimizeAllWindows()" is at 0x003ACB20.
Thanks-
Baker

Hi Kelsey,
Apologies for the long response time, I didn't receive a notification for your post.
> What does your application do?
Our application is used in this context to setup and run our vehicle simulations on a Windows based PC.
> And, what is it doing at the time of the crash?
At the time of the crash a simulation is being launched and run on another thread from the default thread pool like this:
CmtScheduleThreadPoolFunctionAdv (DEFAULT_THREAD_POOL_HANDLE,
sRun,
NULL,
THREAD_PRIORITY_NORMAL,
NULL,
EVENT_TP_THREAD_FUNCTION_END,
NULL,
RUN_IN_SCHEDULED_THREAD,
&sThreadFuncId);
That spawned thread will load a simulation DLL, read some data as input, run the simulation, output the results, then close the DLL.
As I noted earlier, I couldn't get it to happen on my desktop, but I could get it on the VM when I used a very slow storage device for the I/O of the simulation (a slow thumb drive attached to the VM). My boss was seeing the issue on his virtualized PC on his Mac, typically only when he used a slower storage device as well (network storage for example).
> When you reproduce this issue in 2010 and 2013 f1, are you using the same computer or using different machines?
Both of these crash dumps were produced on the virtual machine as described.
> For each dump file, which version of LabWindows/CVI were you running? You can find the version number by selecting Help»About LabWindows/CVI within LabWindows/CVI. Which version of cvirte.dll do you have? This will be located in System32 and/or SysWOW64.
The development environment installed was CVI 2010 SP1. So the 2010 dump was just using the runtimes bundled with that installation. I then installed the 2013 F1 runtimes to see if the same issue persisted.
It's possible I did a clean install with the 2013 F1 dev environment, I will double check this tomorrow when I have access to the virtual machine.
Thanks for looking into this--
Baker

JVM 1.4.2 crash "access violation" Tomcat

Hi
We're getting nasty crashes with JVM 1.4.2_03 (other versions not yet been able to test) and cannot seem to find any log file with more information. However, I do have a DrWatson log which states among other things "access violation".
Situation: We're testing a webapplication on Tomcat (runs as a Windows service (Tomcat.exe) ). During testing the Tomcat-service suddenly ends, the Windows eventlog logs states something like: "...service ended unexpectedly..."
Environment: Tomcat 4.1.29, JDK 1.4.2_03, Windows 2000ProSP4, bi-processor Xeon machine.
While analyzing the DrWatson log file, I can always find the same important (I think) information in the same order:
- function: NtReadFile
- a bit further on: function: NtWaitForMultipleObjects
- function: NtWaitForSingleObject
- etc..
Other snippets I can also find every time are texts like these, they appear in the so called "Stack Back Trace"-sections of the drwtsn32.log:
!JVM_RegisterUnsafeMethods,
!JVM_RegisterPerfMethods,
ntdll!NtDelayExecution,
kernel32!Sleep,
!JVM_Sleep,
msafd!WSPSetSockOpt,
ws2_32!WSAAccept,
ws2_32!accept,
ws2_32!recv,
!Java_java_net_SocketInputStream_socketRead0.
If needed I can post the complete drwtsn32.log file, I only left it out because it's a bad practice to dump long texts. So if you want to take a look, please don't hesitate to ask !
The problem only seems to occur when the servermachine is completely left alone (and not logged in or in locked state) Additionally, it usually occurs after between 30-60 minutes or so. When I keep monitoring (logged in) the machine while the tests are running the crash doesn't seem to occur ?! This makes me think it could be an issue with power-saving that kicks in, like e.g. with the network-adaptor ?
If we don't use JNI, and "access violation"s are stated, does this mean it's a JVM-issue or ... ? Or is it more likely it's an issue of this Tomcat.exe ?
On a sidenote, does anyone know why a logfile might not be produced, and if there is anything i could try to make the jvm produce some intelligable output upon crashing?
Kind regards,
David

Hi again,
First of all thanks for the valuable help so far !
As I'm still searching an anwser for the problem, I noticed the drwtsn32.log file also (sometimes) mentions HotSpot, this is a line from my drwtsn32.log file:
mov ecx,[gHotSpotVMLongConstantEntryValueOffset+0x13f48[/i]
Now, I'm not an expert on HotSpot, but I too know there have been numerous problems reported before with this technology.
Ramesh, it sure looks like your hypothesis about the runtime compilation corresponds to this problem a lot.
Additionally, I must also mention the fact that the problem only seems to occur during stress-tests (concurrency-problem?) and is NOT reproducable reliably. All of this makes me think even more that it's a JVM problem of some kind, what is your (anyone) opinion about this ?
Again, thanks for your support, it sure helps a lot !
Kind regards,
David

Unigraphics CPP JNI Memory Access violation.

I have written a CPP code to get datas from Unigraphics which internally calls java through jni. I have created a dll using vc++6.0.
when i run the dll from Unigraphics I am getting this problem.
Prob: memory access violation.
But i can able to create JVM using
res = JNI_CreateJavaVM(&jvm, (void**)&env, &vm_args);
But when i use cls = env->FindClass("Prog");
i am getting this error from Unigraphics.
(Note : CPP code can be invoked only from Unigraphics. b'cos Its a internal call from unigraphics through dll. This works fine when i write external cpp code to retrive datas from Unigraphics with jni code).
If needed vl send the code.

thanks for your reply.
Most of the examples I have found on the net use a 3 parameter call to getStringUTFchars looking something similar to this:
const char *str = GetStringUTFChars( env, some_jstring, 0);However when I try and add a third param in my dll file using VC++, i get a compile error saying:
error C2660: 'JNIEnv_::GetStringUTFChars' : function does not take 3 argumentseven though clearly in the stacktrace output I previously included, in one of the lines it says that JINEnv does take 3 params:
at JNIEnv_.GetStringUTFChars(JNIEnv_* , _jstring* str, Byte* isCopy)I am not sure why but using 2 params is the only way i can get the dll to compile correctly.
That is why I used      const char *cName;
     const char *wName;
     cName = env->GetStringUTFChars( className,false);
     wName = env->GetStringUTFChars( windowName, false);Also, as I said at the end of my first post, somehow the program worked a few times ( 3-4 ) without giving me the errors, and thus, gave me the intended output. However, I have not been able to get it to work since then, nor do I know what I did, or what happened so that it would work in the first place.
-Dale
Message was edited by:
smithdale87

TestExec Access violation After Exit !!

Appreciate Any help I can get with this error !! Its driving me nuts !!
Firstly, on my development PC all the compiled applications function as expected, the problem lies with the target PC. I have set all applicable executable files (labview compiled projects) to run with admin rights, even though I am using a admin windows user account just to be sure. Both PC's are running windows 7 professional with the latest service packs and updates installed. No virus software is running on the target machine either.
Overview Description of my implementation:
Parent Application (labview compiled) - launches using the command prompt (system exec) a shortcut link to my TEST STAND operator interface which through the parent application allows the operator to select specific sequence test files. I setup system exec to run minimized and wait until completion.
Operator Interface - Runs the sequence file, all error handing comes back clean and once I quite the operator interface. Returns me back to the parent application from which it was called.
As the operator interface is closed down, (modified SIMPLE USER INTERFACE, which comes standard with TESTSTAND) I get a access violation error as the parent application regains focus. This error only occurs on my test PC, not on my development PC which would indicate there is probably nothing wrong with my logic but a mystery setting on the target PC.
Has anyone encountered a similar problem before, if so how did you fix it. ANy help is appreciated.
Best regards,
Sven

Sven.S wrote:
I have done further investiation.
1 - if I call the operator interface shortcut file directly through windows, the same access violation occurs !!
So you already tested the UI without the "parent application"?
Does it crash when it shuts down or if it loses the focus?
Does the unmodified Simple OI run without crash on this machine?
Does the crash occur if you call an example sequence (the crash might be connected to your custom sequence....)?
Do you use a default process model?
You should have posted this question in the TestStand forums.....
Norbert
CEO: What exactly is stopping us from doing this?
Expert: Geometry
Marketing Manager: Just ignore it.

Access Violation within a Single Role Report displays duplicate data

The output of the 'Access Violation within a Single Role' report under Incident Reports in GRC includes some rows which repeat with identical data.
I created a test responsibility with conflicting controls in Oracle r12 instance to find out whether it gets reflectedwhen i run the report. But i didnt find the responsibility.
Is it a set-up error or is there a logic behind this occurance? Please provide inputs.
Edited by: 963133 on Oct 4, 2012 5:25 AM

I believe the conflicts shown would show up as many times as there are violations. So if a particular control had 2 entitlements and those had several access points, I would think a violation would show for each access point. Can you confirm this?
Also do you have the latest AACG? This will help verify that you have the latest with bug fixes.

BSOD due to access violation in dfsc

Our new (not yet production) file server (W2k12) crashed last night due to an access violation in dfsc.sys. Afaik it happened the first time, but I am not totally sure. I also was unable to find out whether this is a common problem with a known fix. Windbg
output is:
MODULE_NAME: dfsc
FAULTING_MODULE: fffff80363a82000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 5010aaed
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.
FAULTING_IP:
nt!RtlRemoveUnicodePrefix+7d
fffff803`63e5e6fd 483919 cmp qword ptr [rcx],rbx
CONTEXT: fffff88008692870 -- (.cxr 0xfffff88008692870)
rax=0000000000000000 rbx=fffff8a068545920 rcx=0000000000000008
rdx=fffff8a068545920 rsi=0000000000000801 rdi=0000000000000802
rip=fffff80363e5e6fd rsp=fffff88008693270 rbp=fffffa804478eec0
r8=fffff8a068545920 r9=0000000000000053 r10=0000000000000005
r11=fffff8a05f0fc5f0 r12=fffffa804478ee58 r13=0000000000400000
r14=0000000000000000 r15=fffff88001c19110
iopl=0 nv up ei ng nz ac po cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010297
nt!RtlRemoveUnicodePrefix+0x7d:
fffff803`63e5e6fd 483919 cmp qword ptr [rcx],rbx ds:002b:00000000`00000008=????????????????
Resetting default scope
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0x3B
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff88001c2be61 to fffff80363e5e6fd
STACK_TEXT:
fffff880`08693270 fffff880`01c2be61 : fffff8a0`685458e0 fffffa80`4478ee20 fffffa80`4478eec0 fffffa80`4478ee20 : nt!RtlRemoveUnicodePrefix+0x7d
fffff880`086932a0 fffff880`01c1b604 : fffff8a0`31531340 fffffa80`4478ee20 fffffa80`4478eec0 fffffa80`4478ee20 : dfsc+0x1ae61
fffff880`086932e0 fffff880`01c29799 : 00000000`00000000 fffff880`08693380 fffff8a0`0ac77d18 00000000`00000000 : dfsc+0xa604
fffff880`08693340 fffff880`01c1d7ef : fffff880`01c19140 fffff880`08693500 00000000`ffffffff fffff8a0`31531340 : dfsc+0x18799
fffff880`086933b0 fffff880`01c1dd01 : fffff880`01c19140 fffff880`08693470 00000000`ffffffff fffff880`08693508 : dfsc+0xc7ef
fffff880`08693410 fffff880`01c1d9f9 : 00000000`00000000 fffff880`08693500 00000000`ffffffff fffff8a0`62436644 : dfsc+0xcd01
fffff880`086934a0 fffff880`01c1dd01 : fffff8a0`f93fb250 fffff880`01c19130 00000000`00000009 fffff8a0`0ac77d18 : dfsc+0xc9f9
fffff880`086934d0 fffff880`01c1ca72 : fffff8a0`f93fb250 fffff8a0`0ac77d10 00000000`00000009 fffff8a0`304b6590 : dfsc+0xcd01
fffff880`08693560 fffff880`01c20151 : 00000000`00000001 fffff880`01c19110 00000000`00000000 fffff880`01c19110 : dfsc+0xba72
fffff880`086935a0 fffff880`0205c411 : fffffa80`ac0495c0 fffff8a0`0ac77d10 00000000`00000000 fffff803`63b6c967 : dfsc+0xf151
fffff880`08693620 fffff880`0205d4b6 : fffff880`086937a0 00000000`00000000 00000000`00000000 fffff880`086936d0 : mup!MupSurrogatePurgeNegativeCacheEntry+0x4975
fffff880`08693680 fffff880`00a694ee : fffffa80`57593960 00000000`00000000 00000000`0000003e 00000000`00000270 : mup!MupSurrogateGetUncProviderDeviceObject+0x806
fffff880`08693750 fffff880`00a9335d : fffffa80`590ed2e0 fffffa80`6c4b6d10 fffffa80`446fe0f0 00000000`00000801 : fltmgr!FltReleaseContext+0x90e
fffff880`086937f0 fffff803`63eae818 : 00000000`00000000 00000000`00000005 fffffa80`575939f8 00000000`000007ff : fltmgr!FltGetRequestorProcessIdEx+0x189c1
fffff880`086938a0 fffff803`63eab8c5 : fffffa80`4acf6cd0 fffffa80`4acf6cd0 00000000`00000000 fffffa80`44700190 : nt!NtAllocateVirtualMemory+0x5c98
fffff880`08693a80 fffff803`63ebb238 : 00000000`00000000 fffff880`08693c48 00000001`00000040 fffffa80`4304b080 : nt!NtAllocateVirtualMemory+0x2d45
fffff880`08693bd0 fffff803`63eb63de : 00000000`00000000 00000000`00000000 fffff8a1`b9575e01 ffffc0f0`7729e80a : nt!ObOpenObjectByName+0x258
fffff880`08693ca0 fffff803`63ec48d9 : 000000a1`34a3e430 ffffc0f0`00100080 000000a1`34a3e438 00000000`00000000 : nt!ObCreateObject+0x6ee
fffff880`08693d40 fffff803`63adb453 : 00000000`00000340 fffff803`63efa0c6 fffff880`08693df8 00000000`00000000 : nt!NtCreateFile+0x79
fffff880`08693dd0 000007ff`345f313a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeSaveStateForHibernate+0x2a33
000000a1`34a3e3c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007ff`345f313a
FOLLOWUP_IP:
dfsc+1ae61
fffff880`01c2be61 41bbfeff0000 mov r11d,0FFFEh
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: dfsc+1ae61
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: dfsc.sys
STACK_COMMAND: .cxr 0xfffff88008692870 ; kb
Does anyone know about this problem and its cause?
Thanks in advance,
Christoph

I came in this morning and found that one of my servers rebooted unexpectedly overnight. A search based on details from the crash dump brought me here. Looks like we're running into the same issue.
Hardware: HP DL580 g7
OS: Server 2012 Standard
The DFS Roles are NOT installed on this server, though we do have some DFS in use on other servers. This server does have Deduplication installed and running, I wonder if that use the DFS driver for something?
* Bugcheck Analysis *
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8028fe676fd, Address of the instruction which caused the bugcheck
Arg3: fffff88008cb8870, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!RtlRemoveUnicodePrefix+7d
fffff802`8fe676fd 483919 cmp qword ptr [rcx],rbx
CONTEXT: fffff88008cb8870 -- (.cxr 0xfffff88008cb8870)
rax=0000000000000000 rbx=fffff8a04d1dde50 rcx=0000000000000008
rdx=fffff8a04d1dde50 rsi=0000000000000801 rdi=0000000000000802
rip=fffff8028fe676fd rsp=fffff88008cb9270 rbp=fffffa809e06f780
r8=fffff8a04d1dde50 r9=0000000000000000 r10=0000000000000003
r11=fffff8a002b15470 r12=fffffa809e06f718 r13=0000000000400000
r14=0000000000000000 r15=fffff880019e1110
iopl=0 nv up ei ng nz ac pe cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010293
nt!RtlRemoveUnicodePrefix+0x7d:
fffff802`8fe676fd 483919 cmp qword ptr [rcx],rbx ds:002b:00000000`00000008=????????????????
Resetting default scope
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: rdpclip.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff880019f3e61 to fffff8028fe676fd
STACK_TEXT:
fffff880`08cb9270 fffff880`019f3e61 : fffff8a0`4d1dde10 fffffa80`9e06f6e0 fffffa80`9e06f780 fffffa80`9e06f6e0 : nt!RtlRemoveUnicodePrefix+0x7d
fffff880`08cb92a0 fffff880`019e3604 : fffff8a0`35bde8f0 fffffa80`9e06f6e0 fffffa80`9e06f780 fffffa80`9e06f6e0 : dfsc!DfscRmUnlinkReferral+0x95
fffff880`08cb92e0 fffff880`019f1799 : 00000000`00000000 fffff880`08cb9380 fffff8a0`5431f1c8 00000000`00000000 : dfsc!DfscCacheStore+0x410
fffff880`08cb9340 fffff880`019e57ef : fffff880`019e1140 fffff880`08cb9500 00000000`ffffffff fffff8a0`35bde8f0 : dfsc!DfscGetDsDCReferral+0x121
fffff880`08cb93b0 fffff880`019e5d01 : fffff880`019e1140 fffff880`08cb9470 00000000`ffffffff fffff880`08cb9508 : dfsc!DfscRmValidateDomainIterate+0x53
fffff880`08cb9410 fffff880`019e59f9 : 00000000`00000000 fffff880`08cb9500 00000000`ffffffff fffff8a0`62436644 : dfsc!DfscValidateReferral+0x109
fffff880`08cb94a0 fffff880`019e5d01 : fffff8a0`0bfde2d0 fffff880`019e1130 00000000`00000009 fffff8a0`5431f1c8 : dfsc!DfscRmValidateRootGetParent+0x79
fffff880`08cb94d0 fffff880`019e4a72 : fffff8a0`0bfde2d0 fffff8a0`5431f1c0 00000000`00000009 fffff8a0`54dc3840 : dfsc!DfscValidateReferral+0x109
fffff880`08cb9560 fffff880`019e8151 : 00000000`00000001 fffff880`019e1110 00000000`00000000 fffff880`019e1110 : dfsc!DfscCmValidateState+0x7e
fffff880`08cb95a0 fffff880`01da4411 : fffffa80`aa256a20 fffff8a0`5431f1c0 00000000`00000000 fffff802`8fb75967 : dfsc!DfscSurrogateCreate+0x105
fffff880`08cb9620 fffff880`01da54b6 : fffff880`08cb97a0 00000000`00000000 00000000`00000000 fffff880`08cb96d0 : mup!MupCallSurrogatePrePost+0xd1
fffff880`08cb9680 fffff880`00b644ee : fffffa81`6b6ff080 00000000`00000000 00000000`00000029 00000000`00000270 : mup!MupCreate+0x766
fffff880`08cb9750 fffff880`00b8e35d : fffffa81`6cb2ec80 fffffa81`63b3e990 fffffa80`9e773440 00000000`00000801 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x25e
fffff880`08cb97f0 fffff802`8feb7818 : 00000000`00000000 00000000`00000005 fffffa81`6b6ff118 00000000`000007ff : fltmgr!FltpCreate+0x34d
fffff880`08cb98a0 fffff802`8feb48c5 : fffffa81`6c459a90 fffffa81`6c459a90 00000000`00000000 fffffa80`9e76d630 : nt!IopParseDevice+0x173c
fffff880`08cb9a80 fffff802`8fec4238 : 00000000`00000000 fffff880`08cb9c48 00000001`00000040 fffffa80`9d122f20 : nt!ObpLookupObjectName+0x806
fffff880`08cb9bd0 fffff802`8febf3de : 00000000`00000000 00000000`00000000 fffff8a0`01d3ac01 ffff592b`2abb430d : nt!ObOpenObjectByName+0x258
fffff880`08cb9ca0 fffff802`8fecd8d9 : 000000d9`b3a4e5e0 ffff592b`00100080 000000d9`b3a4e5e8 00000000`00000000 : nt!IopCreateFile+0x37c
fffff880`08cb9d40 fffff802`8fae4453 : 00000000`0000039c fffff802`8ff030c6 fffff880`08cb9df8 00000000`00000000 : nt!NtCreateFile+0x79
fffff880`08cb9dd0 000007ff`0d9c313a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
000000d9`b3a4e578 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007ff`0d9c313a
FOLLOWUP_IP:
dfsc!DfscRmUnlinkReferral+95
fffff880`019f3e61 41bbfeff0000 mov r11d,0FFFEh
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: dfsc!DfscRmUnlinkReferral+95
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: dfsc
IMAGE_NAME: dfsc.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5010aaed
STACK_COMMAND: .cxr 0xfffff88008cb8870 ; kb
BUCKET_ID_FUNC_OFFSET: 95
FAILURE_BUCKET_ID: 0x3B_dfsc!DfscRmUnlinkReferral
BUCKET_ID: 0x3B_dfsc!DfscRmUnlinkReferral
Followup: MachineOwner

0xc0000005 access violation running app from mapped drive but no problem from UNC or local

I have an application (.exe - 32 bit) that is giving the access violation error when run from a mapped (net use) drive on a shared folder.   NO error if I run it using the FULL UNC path name and NO error if I copy it to my local drive and run it.
The error is below.   I have run scans for virus and malware, etc. and come up with nothing. I have run diagnostics on my memory and nothing is wrong with the hardware. Also, if I create a new user profile, the app will run fine under
that profile - initially.   The problem seems to come up after I install something new.  I know the new software is not infected (VS 2013) and the software installed before the new profile test was not the same software.
I didn't give all the info below because it's legacy software few would know about and I do NOT have the source code.   It is 32 bit and has worked fine for 15 years or more - without this problem.    Thanks in advance for any help
you can provide.
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x7501e4e4
Faulting process id: 0x31d8
Faulting application start time: 0x01d07f8a4598879e

Hi Johnny，
We wonder if you get this error on all PCs or only on your Windows 7 PCs.
If your application happens to hit a page of memory that is not present, a standard page fault will trigger, telling Windows it needs to fill that page. If the network happens to be down at that moment, Windows will be unable to satisfy the page-fault. So
Windows throws an EXCEPTION_IN_PAGE_ERROR (0xC0000005). Since you mentioned that it works under new user profile initially and already tested your memory, the most typical causes for the ‘0xC0000005: Access Violation’ error are: corrupt registry, malware,
updated software/device driver.
Check your issue with malware, VS 2013 and firewall closed under new account.
If this issue happened recently, you could simply restore your system to earlier point then check your issue.
Check your issue under clean boot and safe mode with network (using new account)
https://support.microsoft.com/en-us/kb/929135
Regards,
D. Wu
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Forms Migration Assistant Access Violation

Hi
I have just installed Forms 10g Dev Suite locally. I am in the process of converting my 6i forms to 10g. When I run the frmplsqlconv.bat file I get an access violation. The output to the screen is as follows,
An unexpected exception has been detected in native code outside the VM.
Unexpected Signal : EXCEPTION_ACCESS_VIOLATION (0xc0000005) occurred at PC=0x609001F6
Function=lxhh2ci+0x6
Library=C:\OraDevSuite10g\bin\oranls10.dll
Current Java thread:
at oracle.forms.jdapi.BaseAPI._jni_initialize(Native Method)
at oracle.forms.jdapi.Jdapi.initialize(Unknown Source)
at oracle.forms.jdapi.Jdapi.getContextPointer(Unknown Source)
at oracle.forms.jdapi.Jdapi.connectToDatabase(Unknown Source)
at oracle.forms.util.wizard.Converter.main(Unknown Source).
This is followed by a long list of dll files on my machine.
Any ideas what is happening and what I need to do to correct it.
Thanks.
Leon

No bugs have been reported on that particular function name. Please contact Oracle Support and have them analyze the problem and log a bug if necessary.

LabVIEW Access Violation Crashes from TestStand

We've been seeing numerous LabVIEW crashes when calling VIs through the LabVIEW adapter in TestStand. I've searched the knowledge base and discussion forums without success and figured I would post here before opening a help request.
The actual error we see is:
Exception: Access violation (0xC0000005) at EIP=0x012B60E6 Version: 11.0.1f1
We see these crashes several times a day, but while calling no specific VI. They happen mostly on 2 PCs that are running Windows 7 - 64 bit, but we've seen them in the past on PCs running the 32 bit version of Windows 7. Here is the data related to those 2 problematic PCs.
OS: Windows 7 Professional SP1 64 bit
LabVIEW: 2011 SP1 (11.0.1f1) 32 bit
TestStand: 2010 SP1 (4.5.1.134) 32 bit
PC: Dell Optiplex 790 with Intel Core i5
Other significant information.
We see these crashes when we're running the batch model in TestStand with multiple threads open. Some VIs are reentrant, and some are not.
The 2 PCs that run the batch model (with multiple threads) have the 64 bit version of Win 7 Pro, and crash most often.
The 3 PCs that run the sequential model or the batch model with a single thread have the 32 bit version of Win 7 Pro and rarely if ever have crashed.
Not sure if it's related to the OS version or the multi-thread usage and switching the PCs/OS versions to isolate that isn't easy.
Has anyone else seen similar issues? Does Windows 7 Pro 64 bit work reliably with TestStand and LabVIEW 2011 32 bit versions? I posted this question in the LabVIEW discussion forum, but I don't know where the issue resides, I'm posting in the TestStand forum also.
Any information would be appreciated.
John Morrissey

I just had the same error in a LVOOP Project. First I got a crash (something with out of memory). The I got subsequent Access Violations. Could trace it down to one VI that:
a) had been working just fine before
b) wasn't changed after test mentioned in a) but got (even just running on its own) subsequent access violations every time I ran it
c) VI used a class konstant, property node (to set 2 class attributes); Inputs were a string and an integer and an error cluster; outputs: one instance of the class (initialized with string an integer) and the error cluster
d) Problem could be solved by deleting the class constant used in the VI and put the same in again (an just rewired the thing); I assume this caused a recompile that solved the prob
Maybe this helps narrowing the general problem down.
P.S: I dont have a still non working version of that VI, since I was happy to have solved this and just saved the VI before thinking about making a copy.

Hi. I am using a time capsule for few PC s. I have made 5 different account to access time capsule. but in windows when i enter account name and password for one account, i cannot access other accounts, because windows saves username

Hi. I am using a time capsule for few PC s. I have made 5 different account to access time capsule. but in windows when I enter account name and password for one account, i cannot access other accounts, because windows saves username. how can i prevent this from happenning. I really need to access all my accounts and dont want it to save automaticlly.

Why have 5 accounts if you need to access all of them.. just have one account?
Sorry I cannot follow why you would even use the PC to control the Time Capsule. Apple have not kept the Windows version of the utility up to date.. so they keep making it harder and harder to run windows with apple routers.

How do I manage Google calendar account to allow access to my iCal account?

In Delegation box I see message: "You can change who can access your account by clicking the Edit button". This is what I am trying to do, but when I click Edit, Page opens on Manage Account Access which remains blank. It won't recognise account in sidebar.
Message comes up: "Cannot enable access to your account ****@gmail was not found" "Search again for the user you want to add by typing their name and selecting one of the resulting choices." Bar below offers "Cancel" or "Search Again" No choice appears in the Manage Account Access page.
I can only access new google CalDAV account in sidebar by highlighting my own account below in same sidebar. It then appears in box: Accounts I can access:
I tick box under Show, Under 'Users' new account appears correctly, but Privilege says "Read only".
I want it to allow "Read & Write". How do I set that up? Can you help? Thanks.

Many thanks for trying to help. I am afraid nothing works. I still don't know what to do: the Google Calendars page is set under the heading "Calendars I can view and modify" as Calendars with shared edit settings. These show two gmail calendars. No iCal. When I follow instructions to Get started with CalDav I get the same problem every time.
On the Delegation page when I click my gmail account in the sidebar the other account appears as "read only". I cannot edit to allow access to other account.
I can see other account's entries on my iCal Calendar. But I can't edit or add to them. Other account has no access, cannot view or edit my iCal Calendars at all on his gmail account.
When I click on the other account in the sidebar I get message mentioned before: "Cannot enable access to your account ****@gmail was not found" "Search again for the user you want to add by typing their name and selecting one of the resulting choices." Bar below offers "Cancel" or "Search Again" which repeats whole procedure without success.
Would be grateful for help.
Message was edited by: b2013

ITunes accounts can be accessed under one User but not a second User.

Hi
I'm having problems setting up iTunes on a new PC I've recently purchased. On my old PC - (Vista), myself (David) and my wife (Chris) had different Windows Users accounts, both with separate iTunes accounts which we could access with no problems.
On my new Pc (Windows 7) I have downloaded iTunes and can access my iTunes account with my ID and password when the PC is logged in as 'David' as the User, as can my wife BUT when the PC the PC is logged in as my wife as the User 'Chris' neither of us can access our iTunes account with our relative ID and passwords. We get the message.. "The iTunes Store is temporarily unavailable. Please try again later.".
I have seen this sentence on Google and on various forums including this one but cannot find a solution which fits my problem which is our iTunes accounts can be accessed when the PC is logged in under one User but not a second User.
Has anyone have ideas to attempt to resolve this issue?
Thank you

Hi DavidG56,
If you are having issues connecting to the iTunes Store from one of the user accounts, you may find the following article helpful:
Apple Support: Can't connect to the iTunes Store
http://support.apple.com/kb/ts1368
Regards,
- Brenden

TFTP Read Access Violation in Snoop while doing network boot

Hi
I have setup my Oracle dhcp server and AI on oracle 11.1.
configure the /etc/ethers and /etc/hosts file as well.
pntadm and dhtam is also setup with macro
I deplou solaris 11.1 AI sparc image as my service
create-client and manifest is also associated as per client machine Mac interface
On client machine
I created the devalias entry for my Nic interface
did now
boot net:dhcp
Requesting Internet Address for 0:e:1E:8:bf:f8
Requesting Internet Address for 0:e:1E:8:bf:f8
Time out waiting for tftp reply
On server machine in snoop its showing
tftp read "01010F19" (octet)
TFTP Error : Access violation
I check tftp service is running on server as below
/usr/sbin/in.tftpd -s /etc/netboot
Please help me i am not able to figure out whats the problem
Thanks

But even on dhcp it doesn't work without setting network-boot-arguments on OBP
If i don't feed any entry in /etc/ethers and /etc/hosts
whenvever I do on client side boot net:dhcp it always give rarp messages in the snoop on server.
What can be the reason.

How can I repair "an access violation has occurred"

I found this message after you install the update of an audio software (Pro Tools 8.0.5) and after trying to listen to an audio recording "an access violation has occurred." In a later appeared to me the message "/ System / Library / Extensions / CDSDAAudioCaptureSupport.Kext". I removed the software completely reinstalled all audio and I havethe previous version but to no avail. I also reinstalled operating system from OS 10.6.2 Leopard up to 10.6.8 but still nothing. The message reappears when I use the audio software is not allowing me to listen to the audio (only with ProTools, while iTunes feature regularly. I do not know what to do yet.

Linc Davis wrote:
It's the PACE DRM rootkit that's installed along with the Pro Tools application. Its purpose is to cripple your computer so that you can only do what the developer chooses to let you do. If you have a problem with that, you'll have to take it up with DigiDesign, or get rid of their product.
Most absurd response to a question I have ever read...
DRM protects composers life myself from theft. I just hate it when people steal my stuff. Don't you?
I've been a PT professional user for well over a decade. My computer is in no way "crippled". I can do what I want with it and what I want with that software. I run PT with iTunes open all day long with no issue. I can import audio from my iTunes library into PT with no issue. If the audio you are trying to import is protected (from being stolen and remixed etc.) than no, you can't import it into PT. I'm pretty sure that most law abiding citizens would agree that having thier own personal livelyhood protected under law would be a good thing. But for some reason, this society thinks that musicians and other creative professionals don't deserve the same level of protection and don't need to feed thier families...

IP accounting / output-packets / access-violations

Similar Messages

Maybe you are looking for