Versions / Builds Affected
GFI MailEssentials 2013 SR3Status
OpenProblem Summary
BSOD, Crash serverTT / JIRAID
746How to Identify
The crash dumps would indicate the root for the crash the fmserver.exe process which indirectly trigger the BSOD
Analyse:
===========
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Built by: 7601.18229.amd64fre.win7sp1_gdr.130801-1533
Machine Name: "501CSL02"
Kernel base = 0xfffff800`0184e000 PsLoadedModuleList = 0xfffff800`01a916d0
Debug session time: Wed Mar 26 03:40:48.562 2014 (UTC + 2:00)
System Uptime: 1 days 3:24:50.494
.bugcheck
Bugcheck code 000000F4
Arguments 00000000`00000003 fffffa80`08226890 fffffa80`08226b70 fffff800`01bca0d0
!cpuinfo
CP F/M/S Manufacturer MHz PRCB Signature MSR 8B Signature Features
0 6,45,7 GenuineIntel 2800 0000070d00000000 21193ffe
1 6,45,7 GenuineIntel 2800 0000070d00000000 21193ffe
2 6,45,7 GenuineIntel 2800 0000070d00000000 21193ffe
3 6,45,7 GenuineIntel 2800 0000070d00000000 21193ffe
4 6,45,7 GenuineIntel 2800 0000070d00000000 21193ffe
5 6,45,7 GenuineIntel 2800 0000070d00000000 21193ffe
6 6,45,7 GenuineIntel 2800 0000070d00000000 21193ffe
7 6,45,7 GenuineIntel 2800 0000070d00000000 21193ffe
Cached Update Signature 0000070d00000000
Initial Update Signature 0000070d00000000
2014.03.26 501csl02 BSOD\MEMORY.DMP
Debug session time : 2014-03-26 01:40:48.000
Kernel-Only Dump, AMD x64, 64-bit Addresses, PAE=n/a, 3GB=n/a.
Windows Server 2008 R2, Service Pack 1.
ComputerName = 501CSL02.
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8008226890, Terminating object
Arg3: fffffa8008226b70, Process image file name
Arg4: fffff80001bca0d0, Explanatory message (ascii)
0: kd> !thread
THREAD fffffa8009072540 Cid 08e4.0ec8 Teb: 000000007ee8a000 Win32Thread: 0000000000000000 RUNNING on processor 0
Not impersonating
DeviceMap fffff8a002b94250
Owning Process fffffa80097b4240 Image: fmserver.exe
Attached Process N/A Image: N/A
Wait Start TickCount 6326273 Ticks: 0
Context Switch Count 109301 IdealProcessor: 3
UserTime 00:00:03.744
KernelTime 00:00:01.263
Win32 Start Address 0x00000000004263a0
Stack Init fffff8800716cc70 Current fffff8800716c290
Base fffff8800716d000 Limit fffff88007167000 Call 0
Priority 9 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP RetAddr : Args to Child : Call Site
fffff880`0716c9c8 fffff800`01c51d92 : 00000000`000000f4 00000000`00000003 fffffa80`08226890 fffffa80`08226b70 : nt!KeBugCheckEx
fffff880`0716c9d0 fffff800`01bfe1db : ffffffff`ffffffff fffffa80`09072540 fffffa80`08226890 fffffa80`097b4240 : nt!PspCatchCriticalBreak+0x92
fffff880`0716ca10 fffff800`01b7dec4 : ffffffff`ffffffff 00000000`00000001 fffffa80`08226890 00000000`00000008 : nt!PspTerminateAllThreads+0x80c27
fffff880`0716ca60 fffff800`018c2e13 : fffffa80`08226890 fffff880`00000000 fffffa80`09072540 00000000`00000b50 : nt!NtTerminateProcess+0xf4
fffff880`0716cae0 00000000`77c8157a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0716cae0)
00000000`1398e808 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77c8157a
0: kd> !object fffffa8008226890
Object: fffffa8008226890 Type: (fffffa80069a2de0) Process
ObjectHeader: fffffa8008226860 (new version)
HandleCount: 6 PointerCount: 121
0: kd> !process fffffa8008226890
PROCESS fffffa8008226890
SessionId: 0 Cid: 0268 Peb: 7fffffd5000 ParentCid: 0220
DirBase: 21c481000 ObjectTable: fffff8a0014885c0 HandleCount: 88.
Image: wininit.exe
VadRoot fffffa80082250b0 Vads 63 Clone 0 Private 453. Modified 0. Locked 2.
DeviceMap fffff8a000008b30
Token fffff8a00146e600
ElapsedTime 1 Day 03:24:43.605
UserTime 00:00:00.000
KernelTime 00:00:00.015
QuotaPoolUsage[PagedPool] 98016
QuotaPoolUsage[NonPagedPool] 20496
Working Set Sizes (now,min,max) (1284, 50, 345) (5136KB, 200KB, 1380KB)
PeakWorkingSetSize 1300
VirtualSize 48 Mb
PeakVirtualSize 51 Mb
PageFaultCount 1386
MemoryPriority BACKGROUND
BasePriority 13
CommitCharge 540
THREAD fffffa8008229060 Cid 0268.026c Teb: 000007fffffde000 Win32Thread: fffff900c00df8f0 WAIT: (UserRequest) UserMode Non-Alertable
fffffa8008240f50 NotificationEvent
Not impersonating
DeviceMap fffff8a000008b30
Owning Process fffffa8008226890 Image: wininit.exe
Attached Process N/A Image: N/A
Wait Start TickCount 616 Ticks: 6325657 (1:03:24:40.881)
Context Switch Count 357 IdealProcessor: 2 LargeStack
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x00000000ffe06290
Stack Init fffff88003786c70 Current fffff880037867c0
Base fffff88003787000 Limit fffff8800377d000 Call 0
Priority 15 BasePriority 15 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr Call Site
fffff880`03786800 fffff800`018b95d2 nt!KiSwapContext+0x7a
fffff880`03786940 fffff800`018ca99f nt!KiCommitThreadWait+0x1d2
fffff880`037869d0 fffff800`01bbb55e nt!KeWaitForSingleObject+0x19f
fffff880`03786a70 fffff800`018c2e13 nt!NtWaitForSingleObject+0xde
fffff880`03786ae0 00000000`77c812fa nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`03786ae0)
00000000`0028fb18 00000000`00000000 0x77c812fa
THREAD fffffa8008240060 Cid 0268.02b8 Teb: 000007fffffd6000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
fffffa800823fd80 SynchronizationTimer
fffffa800823fef0 SynchronizationTimer
fffffa800822bb30 ProcessObject
fffffa800824db30 ProcessObject
fffffa8008252b30 ProcessObject
fffffa800823fc10 SynchronizationTimer
Not impersonating
DeviceMap fffff8a000008b30
Owning Process fffffa8008226890 Image: wininit.exe
Attached Process N/A Image: N/A
Wait Start TickCount 12235 Ticks: 6314038 (1:03:21:39.624)
Context Switch Count 11 IdealProcessor: 3
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x0000000077c4aef0
Stack Init fffff88002ba5c70 Current fffff88002ba4e80
Base fffff88002ba6000 Limit fffff88002ba0000 Call 0
Priority 13 BasePriority 13 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr Call Site
fffff880`02ba4ec0 fffff800`018b95d2 nt!KiSwapContext+0x7a
fffff880`02ba5000 fffff800`018c60ea nt!KiCommitThreadWait+0x1d2
fffff880`02ba5090 fffff800`01bbb88f nt!KeWaitForMultipleObjects+0x272
fffff880`02ba5350 fffff800`01bbbbfe nt!ObpWaitForMultipleObjects+0x294
fffff880`02ba5820 fffff800`018c2e13 nt!NtWaitForMultipleObjects+0xe5
fffff880`02ba5a70 00000000`77c8186a nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`02ba5ae0)
00000000`00bff8d8 00000000`00000000 0x77c8186a
THREAD fffffa8008f92b50 Cid 0268.17e0 Teb: 000007fffffdc000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
fffffa800822dac0 QueueObject
Not impersonating
DeviceMap fffff8a000008b30
Owning Process fffffa8008226890 Image: wininit.exe
Attached Process N/A Image: N/A
Wait Start TickCount 6325857 Ticks: 416 (0:00:00:06.489)
Context Switch Count 1472 IdealProcessor: 2
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x0000000077c4fbf0
Stack Init fffff8800804dc70 Current fffff8800804d680
Base fffff8800804e000 Limit fffff88008048000 Call 0
Priority 13 BasePriority 13 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP RetAddr Call Site
fffff880`0804d6c0 fffff800`018b95d2 nt!KiSwapContext+0x7a
fffff880`0804d800 fffff800`018cb1e3 nt!KiCommitThreadWait+0x1d2
fffff880`0804d890 fffff800`01bad267 nt!KeRemoveQueueEx+0x323
fffff880`0804d950 fffff800`018aede6 nt!IoRemoveIoCompletion+0x47
fffff880`0804d9e0 fffff800`018c2e13 nt!NtWaitForWorkViaWorkerFactory+0x285
fffff880`0804dae0 00000000`77c82bba nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0804dae0)
00000000`00eaf718 00000000`00000000 0x77c82bba
\\\
>>> Ready Threads
///
Cur Bas zContext Kernel Time User Time Elapsed Ticks Q-TSA Thread Wait Waiting | Overview | Start
PROC Image Name No. Thread Id Pri Pri Switches d:hh:mm:ss.ttt d:hh:mm:ss.ttt d:hh:mm:ss.ttt RrBLsrl State Reason Notes Waiting On Function | Function | Function
CPU 00:
08E4 fmserver.exe 1 !t fffffa80`09c00060 052c 8 8 9660756 .156 .514 0 -r----- Ready Delay
08E4 fmserver.exe 2 !t fffffa80`09c46640 1238 8 8 3983 0 .062 0 -r----- Ready Delay
08E4 fmserver.exe 3 !t fffffa80`09ba9640 047c 8 8 68173 .124 1.497 0 -r----- Ready Delay
0BF8 tmcsvc.exe 4 !t fffffa80`097da760 0fa8 8 8 905763 0 0 0 -r----- Ready Delay
0004 System 5 !t fffffa80`069e8b50 0008 1 0 1124752 38.719 0 0 -r---r- Ready FreePg.
CPU 01: No Ready Threads
CPU 02: No Ready Threads
CPU 03: No Ready Threads
CPU 04: No Ready Threads
CPU 05: No Ready Threads
CPU 06: No Ready Threads
CPU 07: No Ready Threads
5 Ready Threads found
0: kd> !process 0268 0
Searching for Process with Cid == 268
PROCESS fffffa8008226890
SessionId: 0 Cid: 0268 Peb: 7fffffd5000 ParentCid: 0220
DirBase: 21c481000 ObjectTable: fffff8a0014885c0 HandleCount: 88.
Image: wininit.exe
0: kd> !process 0220 0
Searching for Process with Cid == 220
PROCESS fffffa800b8dfb30
SessionId: 0 Cid: 0220 Peb: 7efdf000 ParentCid: 08e4
DirBase: 12972d000 ObjectTable: fffff8a007eba1d0 HandleCount: 121.
Image: shex.exe
0: kd> !process 08e4 0
Searching for Process with Cid == 8e4
PROCESS fffffa80097b4240
SessionId: 0 Cid: 08e4 Peb: 7efdf000 ParentCid: 0d34
DirBase: 1e0887000 ObjectTable: fffff8a00adf1200 HandleCount: 752.
Image: fmserver.exe
0: kd> !process 0d34 0
Searching for Process with Cid == d34
PROCESS fffffa8009a55060
SessionId: 0 Cid: 0d34 Peb: 7efdf000 ParentCid: 02c4
DirBase: 1162f6000 ObjectTable: fffff8a002429f90 HandleCount: 59.
Image: fmservic.exeWorkaround / Fix Details
not availableRequired Actions
Escalate the case with crash dumps, so that development can investigate identify the sub process which cause the BSOD
