locked
Exception Code c0000005 AFTER extension terminates RRS feed

  • Question

  • User-936241996 posted

    I recently upgraded to Windows 2019 Server for my development environment. After reinstalling my ISAPI extensions, I am encountering an access violation when the extension terminates. This seems to be happening AFTER TerminateExtension() completes. I have both added code to create an event in the event viewer, and removed all code executed in the exported TerminateExtension() function. It doesn't make a difference. Also, I have checked the permissions in the internet cache folder, and turned off compression for static items. The error still occurs.

    The name of the extension is 'iisapi_caddata.dll.' As you see below, the Fault Module Name is 'iisapi_caddata.dll_unloaded.'  This seems to cause no problems, unlike programming errors I have made where iisreset must be run before the web server is able to be relaunched.

    The event created is strangely similar to a post at Rick Strahl's web log: ISAPI-Module-Crashing-on-Application-Pool-Shutdown

    Does anyone have any thoughts?

    Event:

    Log Name: Application
    Source: Application Error
    Date: 6/4/2019 4:37:52 PM
    Event ID: 1000
    Task Category: (100)
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: Andromeda.OrionTEK.local
    Description:
    Faulting application name: w3wp.exe, version: 10.0.17763.1, time stamp: 0xcfdb13d8
    Faulting module name: iisapi_caddata.dll_unloaded, version: 1.0.0.0, time stamp: 0x5cf434ad
    Exception code: 0xc0000005
    Fault offset: 0x0000000000034230
    Faulting process id: 0x2be8
    Faulting application start time: 0x01d51b13623668b5
    Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
    Faulting module path: iisapi_caddata.dll
    Report Id: 9cb4ecad-c28b-493b-972c-6c0bd5bfafa2
    Faulting package full name:
    Faulting package-relative application ID:
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2019-06-04T20:37:52.915762200Z" />
    <EventRecordID>24823</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Andromeda.OrionTEK.local</Computer>
    <Security />
    </System>
    <EventData>
    <Data>w3wp.exe</Data>
    <Data>10.0.17763.1</Data>
    <Data>cfdb13d8</Data>
    <Data>iisapi_caddata.dll_unloaded</Data>
    <Data>1.0.0.0</Data>
    <Data>5cf434ad</Data>
    <Data>c0000005</Data>
    <Data>0000000000034230</Data>
    <Data>2be8</Data>
    <Data>01d51b13623668b5</Data>
    <Data>c:\windows\system32\inetsrv\w3wp.exe</Data>
    <Data>iisapi_caddata.dll</Data>
    <Data>9cb4ecad-c28b-493b-972c-6c0bd5bfafa2</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    </EventData>
    </Event>

    Report.wer

    Version=1
    EventType=BEX64
    EventTime=132041542729557634
    ReportType=2
    Consent=1
    UploadTime=132041542730607624
    ReportStatus=268435456
    ReportIdentifier=c1fd700f-9f24-4403-a312-2a36197d92b9
    IntegratorReportIdentifier=9cb4ecad-c28b-493b-972c-6c0bd5bfafa2
    Wow64Host=34404
    NsAppName=w3wp.exe
    OriginalFilename=w3wp.exe
    AppSessionGuid=00002be8-0000-0012-b568-3662131bd501
    TargetAppId=W:0000f519feec486de87ed73cb92d3cac802400000000!0000447ec979c4b2c53c21b17bd9c2f7d67a9f967108!w3wp.exe
    TargetAppVer=2080//07//03:14:06:16!108b8!w3wp.exe
    BootId=4294967295
    TargetAsId=14953
    IsFatal=1
    EtwNonCollectReason=1
    Response.BucketId=d73cf89fc1fa91d763ee26bf284c32db
    Response.BucketTable=5
    Response.LegacyBucketId=1436127933634458331
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=w3wp.exe
    Sig[1].Name=Application Version
    Sig[1].Value=10.0.17763.1
    Sig[2].Name=Application Timestamp
    Sig[2].Value=cfdb13d8
    Sig[3].Name=Fault Module Name
    Sig[3].Value=iisapi_caddata.dll_unloaded
    Sig[4].Name=Fault Module Version
    Sig[4].Value=1.0.0.0
    Sig[5].Name=Fault Module Timestamp
    Sig[5].Value=5cf434ad
    Sig[6].Name=Exception Offset
    Sig[6].Value=0000000000034230
    Sig[7].Name=Exception Code
    Sig[7].Value=c0000005
    Sig[8].Name=Exception Data
    Sig[8].Value=0000000000000008
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=10.0.17763.2.0.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=bb08
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=bb08800a2317686d9f61dcfc07802c0e
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=32c4
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=32c4c8f28f697a775e89cd6f81db5615
    UI[2]=c:\windows\system32\inetsrv\w3wp.exe
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=IIS Worker Process stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=c:\windows\system32\inetsrv\w3wp.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\System32\KERNEL32.DLL
    LoadedModule[3]=C:\Windows\System32\KERNELBASE.dll
    LoadedModule[4]=C:\Windows\System32\msvcrt.dll
    LoadedModule[5]=C:\Windows\System32\combase.dll
    LoadedModule[6]=C:\Windows\System32\ucrtbase.dll
    LoadedModule[7]=C:\Windows\System32\RPCRT4.dll
    LoadedModule[8]=C:\Windows\System32\bcryptPrimitives.dll
    LoadedModule[9]=c:\windows\system32\inetsrv\iisutil.dll
    LoadedModule[10]=C:\Windows\System32\advapi32.dll
    LoadedModule[11]=C:\Windows\System32\sechost.dll
    LoadedModule[12]=C:\Windows\System32\WS2_32.dll
    LoadedModule[13]=C:\Windows\System32\kernel.appcore.dll
    LoadedModule[14]=C:\Windows\SYSTEM32\ntmarta.dll
    LoadedModule[15]=C:\Windows\System32\user32.dll
    LoadedModule[16]=C:\Windows\System32\win32u.dll
    LoadedModule[17]=C:\Windows\System32\GDI32.dll
    LoadedModule[18]=C:\Windows\System32\gdi32full.dll
    LoadedModule[19]=C:\Windows\System32\msvcp_win.dll
    LoadedModule[20]=c:\windows\system32\inetsrv\w3wphost.dll
    LoadedModule[21]=C:\Windows\System32\OLEAUT32.dll
    LoadedModule[22]=c:\windows\system32\inetsrv\nativerd.dll
    LoadedModule[23]=C:\Windows\System32\bcrypt.dll
    LoadedModule[24]=C:\Windows\SYSTEM32\ncrypt.dll
    LoadedModule[25]=C:\Windows\SYSTEM32\XmlLite.dll
    LoadedModule[26]=C:\Windows\SYSTEM32\ktmw32.dll
    LoadedModule[27]=C:\Windows\SYSTEM32\NTASN1.dll
    LoadedModule[28]=c:\windows\system32\inetsrv\IISRES.DLL
    LoadedModule[29]=C:\Windows\System32\CRYPTSP.dll
    LoadedModule[30]=C:\Windows\system32\rsaenh.dll
    LoadedModule[31]=C:\Windows\SYSTEM32\CRYPTBASE.dll
    LoadedModule[32]=C:\Windows\System32\clbcatq.dll
    LoadedModule[33]=C:\Windows\system32\mlang.dll
    LoadedModule[34]=C:\Windows\system32\ncryptprov.dll
    LoadedModule[35]=C:\Windows\System32\profapi.dll
    LoadedModule[36]=C:\Windows\system32\inetsrv\iiscore.dll
    LoadedModule[37]=C:\Windows\SYSTEM32\SspiCli.dll
    LoadedModule[38]=c:\windows\system32\inetsrv\W3TP.dll
    LoadedModule[39]=c:\windows\system32\inetsrv\w3dt.dll
    LoadedModule[40]=C:\Windows\SYSTEM32\HTTPAPI.dll
    LoadedModule[41]=C:\Windows\system32\napinsp.dll
    LoadedModule[42]=C:\Windows\System32\mswsock.dll
    LoadedModule[43]=C:\Windows\SYSTEM32\DNSAPI.dll
    LoadedModule[44]=C:\Windows\System32\NSI.dll
    LoadedModule[45]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
    LoadedModule[46]=C:\Windows\System32\winrnr.dll
    LoadedModule[47]=C:\Windows\system32\NLAapi.dll
    LoadedModule[48]=C:\Windows\system32\wshbth.dll
    LoadedModule[49]=C:\Windows\System32\rasadhlp.dll
    LoadedModule[50]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[51]=C:\Windows\System32\inetsrv\loghttp.dll
    LoadedModule[52]=C:\Windows\System32\inetsrv\cachuri.dll
    LoadedModule[53]=C:\Windows\System32\inetsrv\cachfile.dll
    LoadedModule[54]=C:\Windows\System32\inetsrv\cachtokn.dll
    LoadedModule[55]=C:\Windows\System32\inetsrv\cachhttp.dll
    LoadedModule[56]=C:\Windows\System32\inetsrv\compdyn.dll
    LoadedModule[57]=C:\Windows\System32\inetsrv\compstat.dll
    LoadedModule[58]=C:\Windows\System32\inetsrv\defdoc.dll
    LoadedModule[59]=C:\Windows\System32\inetsrv\dirlist.dll
    LoadedModule[60]=C:\Windows\System32\inetsrv\protsup.dll
    LoadedModule[61]=C:\Windows\System32\inetsrv\static.dll
    LoadedModule[62]=C:\Windows\System32\inetsrv\authanon.dll
    LoadedModule[63]=C:\Windows\System32\inetsrv\authsspi.dll
    LoadedModule[64]=C:\Windows\SYSTEM32\wkscli.dll
    LoadedModule[65]=C:\Windows\SYSTEM32\netutils.dll
    LoadedModule[66]=C:\Windows\System32\inetsrv\modrqflt.dll
    LoadedModule[67]=C:\Windows\System32\inetsrv\custerr.dll
    LoadedModule[68]=C:\Windows\System32\inetsrv\isapi.dll
    LoadedModule[69]=C:\Windows\System32\inetsrv\filter.dll
    LoadedModule[70]=C:\Windows\System32\inetsrv\validcfg.dll
    LoadedModule[71]=C:\Windows\System32\inetsrv\iiswsock.dll
    LoadedModule[72]=C:\Windows\SYSTEM32\websocket.dll
    LoadedModule[73]=C:\Windows\System32\inetsrv\redirect.dll
    LoadedModule[74]=C:\Windows\System32\inetsrv\iisetw.dll
    LoadedModule[75]=C:\Windows\System32\inetsrv\iisfreb.dll
    LoadedModule[76]=C:\Windows\System32\inetsrv\iisreqs.dll
    LoadedModule[77]=C:\Windows\System32\CRYPT32.dll
    LoadedModule[78]=C:\Windows\System32\MSASN1.dll
    LoadedModule[79]=C:\Windows\SYSTEM32\DPAPI.DLL
    LoadedModule[80]=C:\Windows\SYSTEM32\mpr.dll
    State[0].Key=Transport.DoneStage1
    State[0].Value=1
    OsInfo[0].Key=vermaj
    OsInfo[0].Value=10
    OsInfo[1].Key=vermin
    OsInfo[1].Value=0
    OsInfo[2].Key=verbld
    OsInfo[2].Value=17763
    OsInfo[3].Key=ubr
    OsInfo[3].Value=503
    OsInfo[4].Key=versp
    OsInfo[4].Value=0
    OsInfo[5].Key=arch
    OsInfo[5].Value=9
    OsInfo[6].Key=lcid
    OsInfo[6].Value=1033
    OsInfo[7].Key=geoid
    OsInfo[7].Value=244
    OsInfo[8].Key=sku
    OsInfo[8].Value=7
    OsInfo[9].Key=domain
    OsInfo[9].Value=1
    OsInfo[10].Key=prodsuite
    OsInfo[10].Value=272
    OsInfo[11].Key=ntprodtype
    OsInfo[11].Value=2
    OsInfo[12].Key=platid
    OsInfo[12].Value=10
    OsInfo[13].Key=sr
    OsInfo[13].Value=0
    OsInfo[14].Key=tmsi
    OsInfo[14].Value=27158
    OsInfo[15].Key=osinsty
    OsInfo[15].Value=2
    OsInfo[16].Key=iever
    OsInfo[16].Value=11.503.17763.0-11.0.125
    OsInfo[17].Key=portos
    OsInfo[17].Value=0
    OsInfo[18].Key=ram
    OsInfo[18].Value=57301
    OsInfo[19].Key=svolsz
    OsInfo[19].Value=929
    OsInfo[20].Key=wimbt
    OsInfo[20].Value=0
    OsInfo[21].Key=blddt
    OsInfo[21].Value=180914
    OsInfo[22].Key=bldtm
    OsInfo[22].Value=1434
    OsInfo[23].Key=bldbrch
    OsInfo[23].Value=rs5_release
    OsInfo[24].Key=bldchk
    OsInfo[24].Value=0
    OsInfo[25].Key=wpvermaj
    OsInfo[25].Value=0
    OsInfo[26].Key=wpvermin
    OsInfo[26].Value=0
    OsInfo[27].Key=wpbuildmaj
    OsInfo[27].Value=0
    OsInfo[28].Key=wpbuildmin
    OsInfo[28].Value=0
    OsInfo[29].Key=osver
    OsInfo[29].Value=10.0.17763.503.amd64fre.rs5_release.180914-1434
    OsInfo[30].Key=buildflightid
    OsInfo[31].Key=edition
    OsInfo[31].Value=ServerStandard
    OsInfo[32].Key=ring
    OsInfo[32].Value=Retail
    OsInfo[33].Key=expid
    OsInfo[34].Key=containerid
    OsInfo[35].Key=containertype
    OsInfo[36].Key=edu
    OsInfo[36].Value=0
    FriendlyEventName=Stopped working
    ConsentKey=BEX64
    AppName=IIS Worker Process
    AppPath=c:\windows\system32\inetsrv\w3wp.exe
    NsPartner=windows
    NsGroup=windows8
    ApplicationIdentity=E9EC6E123F811C94990CB1A4C48A79BA
    MetadataHash=809339209

    Tuesday, June 4, 2019 9:11 PM

Answers

  • User-936241996 posted

    Ok, so I loaded DebugDiag 1.2, and now the problem has stopped occurring.

    I have no idea why. This thread can be closed.

    • Marked as answer by Anonymous Tuesday, September 28, 2021 12:00 AM
    Thursday, June 6, 2019 11:23 PM

All replies

  • User-2114649853 posted

    Hi richalgeni,

    According to your description,since iis  use w3wp.exe to solve the request ,this error means the w3wp.exe crash due to the iisapi_caddata.dll module.

    In logs ,“Faulting module name” refers to the component that causes the crash. So I suggest that Upgrading or repairing the related module could fix the issue.

    Here is the link I hope it could help you.

    https://techcommunity.microsoft.com/t5/IIS-Support-Blog/w3wp-exe-crash-Exception-code-0xc0000005/ba-p/334351

    Best Regards

    Able

    Wednesday, June 5, 2019 7:39 AM
  • User-936241996 posted

    Ok, so I loaded DebugDiag 1.2, and now the problem has stopped occurring.

    I have no idea why. This thread can be closed.

    • Marked as answer by Anonymous Tuesday, September 28, 2021 12:00 AM
    Thursday, June 6, 2019 11:23 PM