Note that there are some explanatory texts on larger screens.

plurals
  1. POw3wp.exe crash - ThreadAbortException
    primarykey
    data
    text
    <p>we have a problem that we can't reproduce, it happens randomly on our web server (Windows Server 2008 Datacenter 64-bit, hosted on Amazon EC2) running ASP.NET 4.</p> <p><strong>It starts with a ASP.NET warning in the error log (a strange GET request with a really long URL):</strong></p> <blockquote> <p>Exception information:<br> Exception type: HttpException<br> Exception message: The length of the URL for this request exceeds the configured maxUrlLength value.<br> at System.Web.HttpRequest.ValidateInputIfRequiredByConfig()<br> at System.Web.HttpApplication.PipelineStepManager.ValidateHelper(HttpContext context) </p> </blockquote> <p><strong>Then an error:</strong></p> <blockquote> <p>Application ID: /LM/W3SVC/2/ROOT<br> Process ID: 4604<br> Exception: System.Threading.ThreadAbortException<br> Message: Thread was being aborted.<br> StackTrace: at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context)<br> at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr managedHttpContext, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)<br> at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr managedHttpContext, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags) </p> </blockquote> <p><strong>Then another error:</strong></p> <blockquote> <p>Application ID: DefaultDomain<br> Process ID: 4604<br> Exception: System.Threading.ThreadAbortException<br> Message: Thread was being aborted.<br> StackTrace: </p> </blockquote> <p><strong>And then the application error:</strong></p> <blockquote> <p>Faulting application w3wp.exe, version 7.0.6002.18005, time stamp 0x49e03238, faulting module kernel32.dll, version 6.0.6002.18005, time stamp 0x49e041d1, exception code 0xe0434352, fault offset 0x00000000000176fd, process id 0x%9, application start time 0x%10. </p> </blockquote> <p><strong>Windbg</strong></p> <p>I managed to get a dump for a crash with adplus, but I really don't know what to look for. I've troubleshooted some stackoverflows with Windbg before, but I don't know which approach to use for this error.</p> <p><strong>!pe on the thread with the error:</strong> </p> <blockquote> <p>Exception object: 00000001c323d948<br> Exception type: System.Threading.ThreadAbortException<br> Message: Thread was being aborted.<br> InnerException: <br> StackTrace (generated):<br> <br> StackTraceString: <br> HResult: 80131530 </p> </blockquote> <p><strong>!clrstack</strong></p> <blockquote> <p>Child SP IP Call Site<br> 0000000015f7f078 0000000076c176fd [GCFrame: 0000000015f7f078]<br> 0000000015f7f258 0000000076c176fd [GCFrame: 0000000015f7f258] </p> </blockquote> <p><strong>k</strong></p> <blockquote> <p>Child-SP RetAddr Call Site<br> 00000000<code>15f7edf0 000007fe</code>f2826e39 kernel32!RaiseException+0x39<br> 00000000<code>15f7eec0 000007fe</code>f2bbbfb4 clr!RaiseTheExceptionInternalOnly+0x363<br> 00000000<code>15f7eff0 000007fe</code>f2bbc906 clr!RaiseTheException+0xa4<br> 00000000<code>15f7f020 000007fe</code>f2c3b99b clr!BStrFromString+0x66<br> 00000000<code>15f7f050 000007fe</code>f2c3b9a9 clr!RealCOMPlusThrow+0x3b<br> 00000000<code>15f7f0c0 000007fe</code>f2c93156 clr!RealCOMPlusThrow+0x9<br> 00000000<code>15f7f0f0 000007fe</code>f2b229f3 clr!Thread::RaiseCrossContextException+0x2a7<br> 00000000<code>15f7f310 000007fe</code>f2830886 clr! ?? ::FNODOBFM::<code>string'+0xafb03<br> 00000000</code>15f7f4c0 000007fe<code>f27fcce3 clr!UM2MDoADCallBack+0x9e<br> 00000000</code>15f7f530 000007fe<code>f845ba59 clr!UMThunkStubAMD64+0x273<br> 00000000</code>15f7f5c0 000007fe<code>f8458f02 webengine4!W3_MGD_HANDLER::ProcessNotification+0x79<br> 00000000</code>15f7f5f0 000007fe<code>f27d4595 webengine4!ProcessNotificationCallback+0x43<br> 00000000</code>15f7f620 000007fe<code>f27d3ac8 clr!UnManagedPerAppDomainTPCount::DispatchWorkItem+0x181<br> 00000000</code>15f7f6d0 000007fe<code>f294658f clr!ThreadpoolMgr::NewWorkerThreadStart+0x2e5<br> 00000000</code>15f7f770 000007fe<code>f29447c6 clr!ThreadpoolMgr::WorkerThreadStart+0x3b<br> 00000000</code>15f7f810 00000000<code>76c1be3d clr!Thread::intermediateThreadProc+0x7d<br> 00000000</code>15f7fbd0 00000000<code>76d56a51 kernel32!BaseThreadInitThunk+0xd<br> 00000000</code>15f7fc00 00000000`00000000 ntdll!RtlUserThreadStart+0x1d </p> </blockquote> <p>Anybody have a clue what this could be? Or can point me in the right direction for analyzing it with Windbg?</p> <p>Edit: The incoming urls usually looks like this: foo.bar.com/wEPDwULLTE1MTk5MzIzMTFkGAMFFmN0bDAwJGRiMSRkZGxEYXRhYmFzZXMPFCsAAmRkZAU7Y3RsMDAkU2VhcmNoQ2xvdWQxJF9SaWdodENvbHVtbiRfU2VhcmNoQ2xvdWQkbHN2U2VhcmNoVGVybXMPFCsADmRkZGRkZGQ8KwAUAAIUZGRkZgL/D2QFK2N0bDAwJHN1cnZleTEkX1JpZ2h0Q29sdW1uJF9JUiR1c2VyQ29tbWVudHMPFCsAA2VnZGQeuUcvQDsShDIp1k7YjJw70Ry 9/Q1B9Sd1egrovYgkw==/</p> <p>but I found in the event log that this happen for this urls like this aswell: foo.bar.com/&amp; ("dangerous request" in .NET 4)</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload