Answered by:
Exception Code c0000005 AFTER extension terminates

Question
-
User-936241996 posted
I recently upgraded to Windows 2019 Server for my development environment. After reinstalling my ISAPI extensions, I am encountering an access violation when the extension terminates. This seems to be happening AFTER TerminateExtension() completes. I have both added code to create an event in the event viewer, and removed all code executed in the exported TerminateExtension() function. It doesn't make a difference. Also, I have checked the permissions in the internet cache folder, and turned off compression for static items. The error still occurs.
The name of the extension is 'iisapi_caddata.dll.' As you see below, the Fault Module Name is 'iisapi_caddata.dll_unloaded.' This seems to cause no problems, unlike programming errors I have made where iisreset must be run before the web server is able to be relaunched.
The event created is strangely similar to a post at Rick Strahl's web log: ISAPI-Module-Crashing-on-Application-Pool-Shutdown
Does anyone have any thoughts?
Event:
Log Name: Application
Source: Application Error
Date: 6/4/2019 4:37:52 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Andromeda.OrionTEK.local
Description:
Faulting application name: w3wp.exe, version: 10.0.17763.1, time stamp: 0xcfdb13d8
Faulting module name: iisapi_caddata.dll_unloaded, version: 1.0.0.0, time stamp: 0x5cf434ad
Exception code: 0xc0000005
Fault offset: 0x0000000000034230
Faulting process id: 0x2be8
Faulting application start time: 0x01d51b13623668b5
Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
Faulting module path: iisapi_caddata.dll
Report Id: 9cb4ecad-c28b-493b-972c-6c0bd5bfafa2
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-06-04T20:37:52.915762200Z" />
<EventRecordID>24823</EventRecordID>
<Channel>Application</Channel>
<Computer>Andromeda.OrionTEK.local</Computer>
<Security />
</System>
<EventData>
<Data>w3wp.exe</Data>
<Data>10.0.17763.1</Data>
<Data>cfdb13d8</Data>
<Data>iisapi_caddata.dll_unloaded</Data>
<Data>1.0.0.0</Data>
<Data>5cf434ad</Data>
<Data>c0000005</Data>
<Data>0000000000034230</Data>
<Data>2be8</Data>
<Data>01d51b13623668b5</Data>
<Data>c:\windows\system32\inetsrv\w3wp.exe</Data>
<Data>iisapi_caddata.dll</Data>
<Data>9cb4ecad-c28b-493b-972c-6c0bd5bfafa2</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>Report.wer
Version=1
EventType=BEX64
EventTime=132041542729557634
ReportType=2
Consent=1
UploadTime=132041542730607624
ReportStatus=268435456
ReportIdentifier=c1fd700f-9f24-4403-a312-2a36197d92b9
IntegratorReportIdentifier=9cb4ecad-c28b-493b-972c-6c0bd5bfafa2
Wow64Host=34404
NsAppName=w3wp.exe
OriginalFilename=w3wp.exe
AppSessionGuid=00002be8-0000-0012-b568-3662131bd501
TargetAppId=W:0000f519feec486de87ed73cb92d3cac802400000000!0000447ec979c4b2c53c21b17bd9c2f7d67a9f967108!w3wp.exe
TargetAppVer=2080//07//03:14:06:16!108b8!w3wp.exe
BootId=4294967295
TargetAsId=14953
IsFatal=1
EtwNonCollectReason=1
Response.BucketId=d73cf89fc1fa91d763ee26bf284c32db
Response.BucketTable=5
Response.LegacyBucketId=1436127933634458331
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=w3wp.exe
Sig[1].Name=Application Version
Sig[1].Value=10.0.17763.1
Sig[2].Name=Application Timestamp
Sig[2].Value=cfdb13d8
Sig[3].Name=Fault Module Name
Sig[3].Value=iisapi_caddata.dll_unloaded
Sig[4].Name=Fault Module Version
Sig[4].Value=1.0.0.0
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=5cf434ad
Sig[6].Name=Exception Offset
Sig[6].Value=0000000000034230
Sig[7].Name=Exception Code
Sig[7].Value=c0000005
Sig[8].Name=Exception Data
Sig[8].Value=0000000000000008
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.17763.2.0.0.272.7
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
DynamicSig[22].Name=Additional Information 1
DynamicSig[22].Value=bb08
DynamicSig[23].Name=Additional Information 2
DynamicSig[23].Value=bb08800a2317686d9f61dcfc07802c0e
DynamicSig[24].Name=Additional Information 3
DynamicSig[24].Value=32c4
DynamicSig[25].Name=Additional Information 4
DynamicSig[25].Value=32c4c8f28f697a775e89cd6f81db5615
UI[2]=c:\windows\system32\inetsrv\w3wp.exe
UI[5]=Check online for a solution (recommended)
UI[6]=Check for a solution later (recommended)
UI[7]=Close
UI[8]=IIS Worker Process stopped working and was closed
UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
UI[10]=&Close
LoadedModule[0]=c:\windows\system32\inetsrv\w3wp.exe
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\System32\KERNEL32.DLL
LoadedModule[3]=C:\Windows\System32\KERNELBASE.dll
LoadedModule[4]=C:\Windows\System32\msvcrt.dll
LoadedModule[5]=C:\Windows\System32\combase.dll
LoadedModule[6]=C:\Windows\System32\ucrtbase.dll
LoadedModule[7]=C:\Windows\System32\RPCRT4.dll
LoadedModule[8]=C:\Windows\System32\bcryptPrimitives.dll
LoadedModule[9]=c:\windows\system32\inetsrv\iisutil.dll
LoadedModule[10]=C:\Windows\System32\advapi32.dll
LoadedModule[11]=C:\Windows\System32\sechost.dll
LoadedModule[12]=C:\Windows\System32\WS2_32.dll
LoadedModule[13]=C:\Windows\System32\kernel.appcore.dll
LoadedModule[14]=C:\Windows\SYSTEM32\ntmarta.dll
LoadedModule[15]=C:\Windows\System32\user32.dll
LoadedModule[16]=C:\Windows\System32\win32u.dll
LoadedModule[17]=C:\Windows\System32\GDI32.dll
LoadedModule[18]=C:\Windows\System32\gdi32full.dll
LoadedModule[19]=C:\Windows\System32\msvcp_win.dll
LoadedModule[20]=c:\windows\system32\inetsrv\w3wphost.dll
LoadedModule[21]=C:\Windows\System32\OLEAUT32.dll
LoadedModule[22]=c:\windows\system32\inetsrv\nativerd.dll
LoadedModule[23]=C:\Windows\System32\bcrypt.dll
LoadedModule[24]=C:\Windows\SYSTEM32\ncrypt.dll
LoadedModule[25]=C:\Windows\SYSTEM32\XmlLite.dll
LoadedModule[26]=C:\Windows\SYSTEM32\ktmw32.dll
LoadedModule[27]=C:\Windows\SYSTEM32\NTASN1.dll
LoadedModule[28]=c:\windows\system32\inetsrv\IISRES.DLL
LoadedModule[29]=C:\Windows\System32\CRYPTSP.dll
LoadedModule[30]=C:\Windows\system32\rsaenh.dll
LoadedModule[31]=C:\Windows\SYSTEM32\CRYPTBASE.dll
LoadedModule[32]=C:\Windows\System32\clbcatq.dll
LoadedModule[33]=C:\Windows\system32\mlang.dll
LoadedModule[34]=C:\Windows\system32\ncryptprov.dll
LoadedModule[35]=C:\Windows\System32\profapi.dll
LoadedModule[36]=C:\Windows\system32\inetsrv\iiscore.dll
LoadedModule[37]=C:\Windows\SYSTEM32\SspiCli.dll
LoadedModule[38]=c:\windows\system32\inetsrv\W3TP.dll
LoadedModule[39]=c:\windows\system32\inetsrv\w3dt.dll
LoadedModule[40]=C:\Windows\SYSTEM32\HTTPAPI.dll
LoadedModule[41]=C:\Windows\system32\napinsp.dll
LoadedModule[42]=C:\Windows\System32\mswsock.dll
LoadedModule[43]=C:\Windows\SYSTEM32\DNSAPI.dll
LoadedModule[44]=C:\Windows\System32\NSI.dll
LoadedModule[45]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
LoadedModule[46]=C:\Windows\System32\winrnr.dll
LoadedModule[47]=C:\Windows\system32\NLAapi.dll
LoadedModule[48]=C:\Windows\system32\wshbth.dll
LoadedModule[49]=C:\Windows\System32\rasadhlp.dll
LoadedModule[50]=C:\Windows\System32\fwpuclnt.dll
LoadedModule[51]=C:\Windows\System32\inetsrv\loghttp.dll
LoadedModule[52]=C:\Windows\System32\inetsrv\cachuri.dll
LoadedModule[53]=C:\Windows\System32\inetsrv\cachfile.dll
LoadedModule[54]=C:\Windows\System32\inetsrv\cachtokn.dll
LoadedModule[55]=C:\Windows\System32\inetsrv\cachhttp.dll
LoadedModule[56]=C:\Windows\System32\inetsrv\compdyn.dll
LoadedModule[57]=C:\Windows\System32\inetsrv\compstat.dll
LoadedModule[58]=C:\Windows\System32\inetsrv\defdoc.dll
LoadedModule[59]=C:\Windows\System32\inetsrv\dirlist.dll
LoadedModule[60]=C:\Windows\System32\inetsrv\protsup.dll
LoadedModule[61]=C:\Windows\System32\inetsrv\static.dll
LoadedModule[62]=C:\Windows\System32\inetsrv\authanon.dll
LoadedModule[63]=C:\Windows\System32\inetsrv\authsspi.dll
LoadedModule[64]=C:\Windows\SYSTEM32\wkscli.dll
LoadedModule[65]=C:\Windows\SYSTEM32\netutils.dll
LoadedModule[66]=C:\Windows\System32\inetsrv\modrqflt.dll
LoadedModule[67]=C:\Windows\System32\inetsrv\custerr.dll
LoadedModule[68]=C:\Windows\System32\inetsrv\isapi.dll
LoadedModule[69]=C:\Windows\System32\inetsrv\filter.dll
LoadedModule[70]=C:\Windows\System32\inetsrv\validcfg.dll
LoadedModule[71]=C:\Windows\System32\inetsrv\iiswsock.dll
LoadedModule[72]=C:\Windows\SYSTEM32\websocket.dll
LoadedModule[73]=C:\Windows\System32\inetsrv\redirect.dll
LoadedModule[74]=C:\Windows\System32\inetsrv\iisetw.dll
LoadedModule[75]=C:\Windows\System32\inetsrv\iisfreb.dll
LoadedModule[76]=C:\Windows\System32\inetsrv\iisreqs.dll
LoadedModule[77]=C:\Windows\System32\CRYPT32.dll
LoadedModule[78]=C:\Windows\System32\MSASN1.dll
LoadedModule[79]=C:\Windows\SYSTEM32\DPAPI.DLL
LoadedModule[80]=C:\Windows\SYSTEM32\mpr.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=17763
OsInfo[3].Key=ubr
OsInfo[3].Value=503
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=1033
OsInfo[7].Key=geoid
OsInfo[7].Value=244
OsInfo[8].Key=sku
OsInfo[8].Value=7
OsInfo[9].Key=domain
OsInfo[9].Value=1
OsInfo[10].Key=prodsuite
OsInfo[10].Value=272
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=2
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=27158
OsInfo[15].Key=osinsty
OsInfo[15].Value=2
OsInfo[16].Key=iever
OsInfo[16].Value=11.503.17763.0-11.0.125
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=57301
OsInfo[19].Key=svolsz
OsInfo[19].Value=929
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=180914
OsInfo[22].Key=bldtm
OsInfo[22].Value=1434
OsInfo[23].Key=bldbrch
OsInfo[23].Value=rs5_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.17763.503.amd64fre.rs5_release.180914-1434
OsInfo[30].Key=buildflightid
OsInfo[31].Key=edition
OsInfo[31].Value=ServerStandard
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[34].Key=containerid
OsInfo[35].Key=containertype
OsInfo[36].Key=edu
OsInfo[36].Value=0
FriendlyEventName=Stopped working
ConsentKey=BEX64
AppName=IIS Worker Process
AppPath=c:\windows\system32\inetsrv\w3wp.exe
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=E9EC6E123F811C94990CB1A4C48A79BA
MetadataHash=809339209Tuesday, June 4, 2019 9:11 PM
Answers
-
User-936241996 posted
Ok, so I loaded DebugDiag 1.2, and now the problem has stopped occurring.
I have no idea why. This thread can be closed.
- Marked as answer by Anonymous Tuesday, September 28, 2021 12:00 AM
Thursday, June 6, 2019 11:23 PM
All replies
-
User-2114649853 posted
Hi richalgeni,
According to your description,since iis use w3wp.exe to solve the request ,this error means the w3wp.exe crash due to the iisapi_caddata.dll module.
In logs ,“Faulting module name” refers to the component that causes the crash. So I suggest that Upgrading or repairing the related module could fix the issue.
Here is the link I hope it could help you.
Best Regards
Able
Wednesday, June 5, 2019 7:39 AM -
User-936241996 posted
Ok, so I loaded DebugDiag 1.2, and now the problem has stopped occurring.
I have no idea why. This thread can be closed.
- Marked as answer by Anonymous Tuesday, September 28, 2021 12:00 AM
Thursday, June 6, 2019 11:23 PM