SPR

Technote

SPR# JPIU7QHQ3M - Server could crash on various tasks while processing messages with an inline image. Here are some possible stacks:

Thread=[07C0:0002-0BE8]
Stack base=0x0012E6E4, Stack size = 9120 bytes
PANIC: Invalid pool free chain
60068AB8 [load addr 0x05110000] nnotes! OSWalkStack +0x98(0x0, 0x60009030, 0x12cbc8, 0x0), stackwlk.c line 301
60008E1F [load addr 0x05110000] nnotes! Panic +0x22f(0x12c3c0, 0x2800, 0x10000, 0x6fd00f4), ospanic.c line 341
609E747E [load addr 0x05110000] nnotes! HandleBadFreeChain +0x37e(0x6fd0000, 0x0, 0x0, 0x0), dpool.c line 2282
609E62E0 [load addr 0x05110000] nnotes! AllocDBlock +0x160(0x61de4702, 0x200a, 0x12f6c0, 0x61de4702), dpool.c line 1289
609E6125 [load addr 0x05110000] nnotes! OSAllocDBlock +0x15(0x61de4702, 0x200a, 0x12f6c0, 0x6fbfde4), dpool.c line 1149
600803D1 [load addr 0x05110000] nnotes! DPoolAlloc +0x431(0x61d7e600, 0x200a, 0x156d, 0x15a20aa), memalloc.c line 2232
6007F574 [load addr 0x05110000] nnotes! AllocObject +0x224(0x61d7e600, 0x61d7e695, 0x15a209c, 0x200a), memalloc.c line 1161
60082548 [load addr 0x05110000] nnotes! OSMemoryAllocate +0xe8(0x156d, 0x2004, 0x12f798, 0x12f7b0), memory.c line 321
6093368B [load addr 0x05110000] nnotes! AllocStoreAllocate +0x1b(0x2001, 0x12f9cc, 0x12f9d0, 0x12f9d4), stream.cpp line 222
60933665 [load addr 0x05110000] nnotes! CreateAllocStore +0x15(0x12f9cc, 0x12f9d0, 0x12f7dc, 0x3d75e0), stream.cpp line 329
60933C1E [load addr 0x05110000] nnotes! CStream::SetFileStore +0xae(0x12fa9c, 0xfffffffd, 0x12fa58, 0x0), stream.cpp line 1512
6084BBF6 [load addr 0x05110000] nnotes! GifEncoder::Initialize +0xd6(0x8, 0x3d72d0, 0x100, 0x3d75cd), gifencod.cpp line 100
60843AC3 [load addr 0x05110000] nnotes! grEncodeGIFFile +0x373(0x7050004, 0x3d6b92, 0x12535aa, 0x490008), gifen.cpp line 111
609743D5 [load addr 0x05110000] nnotes! ConvertNotesBitmap +0x3c5(0xf0104019, 0x0, 0x0, 0x4012c0), nbitmapcvt.c line 444
004013EC [load addr 0x04aa0000] test1! test +0x10c(0x3d6f90, 0x10f6, 0x0, 0x29a), test1.cpp line 97
00401288 [load addr 0x04aa0000] test1! NotesMain +0x88(0x3, 0x3d6ec4, 0x3e0000, 0x0), test1.cpp line 32
0040113E [load addr 0x04aa0000] test1! main +0x13e(0x0, 0x0, 0x0, 0x3), sdkmain.c line 230
00401016 [load addr 0x04aa0000] test1! main +0x16(0x3, 0x3e3710, 0x3e3740, 0x94), sdkmain.c line 113
00401A8D [load addr 0x04aa0000] test1! mainCRTStartup +0x16c(0xdf22185c, 0x1c9ac03, 0x7ffda000, 0x805502fa), crt0.c line 259
7C816FD7 [load addr 0x07d70000] kernel32! RegisterWaitForInputIdle +0x49(0x401921, 0x0, 0x78746341, 0x20)


Using Debug_Checmarkers=1 we can get one of the 2 fatal stacks below

Thread=[15A8:0002-13A8]
Stack base=0x0012E73C, Stack size = 7916 bytes
PANIC: Memory following pool block has been destroyed
600678A8 [load addr 0x05120000] nnotes! OSWalkStack +0x98(0x0, 0x60008c00, 0x12d0d4, 0x0), stackwlk.c line 301
600089EF [load addr 0x05120000] nnotes! Panic +0x22f(0x12c8cc, 0x15b0, 0x15bc, 0x162e99c), ospanic.c line 341
60988454 [load addr 0x05120000] nnotes! DEBUGCheckDBlock +0xb4(0x61de26fa, 0x7e9a4, 0x15b0000, 0x7e99c), pooldeb.c line 283
609E51F8 [load addr 0x05120000] nnotes! OSFreeDBlockWithSize +0xa8(0x61de26fa, 0x7e9a4, 0x15b0, 0x1), dpool.c line 1561
609E5148 [load addr 0x05120000] nnotes! OSFreeDBlockExt +0x28(0x61de26fa, 0x7e9a4, 0x1, 0x61de26f6), dpool.c line 1494
6007FCCC [load addr 0x05120000] nnotes! DPoolFree +0x9c(0x713bd8e, 0x1, 0x1, 0x12fc14), memalloc.c line 2696
6000FBCC [load addr 0x05120000] nnotes! Discard +0x33c(0x713bd80, 0x474, 0x15aa, 0x474), memlock.c line 310
600805F6 [load addr 0x05120000] nnotes! OSMemFree +0x5c6(0x4b, 0x1, 0x407484,0xc), memalloc.c line 3098
60972DDE [load addr 0x05120000] nnotes! ConvertNotesBitmap +0x6de(0xf0104019,0x0, 0x0, 0x4012c0), nbitmapcvt.c line 482
004013F1 [load addr 0x04ab0000] test1! test +0x111(0x3d6f90, 0x10f6, 0x0, 0x29a), test1.cpp line 97
00401288 [load addr 0x04ab0000] test1! NotesMain +0x88(0x3, 0x3d6ec4, 0x3e0000, 0x0), test1.cpp line 32
0040113E [load addr 0x04ab0000] test1! main +0x13e(0x0, 0x0, 0x0, 0x3), sdkmain.c line 230
00401016 [load addr 0x04ab0000] test1! main +0x16(0x3, 0x3e3710, 0x3e3740, 0x94), sdkmain.c line 113
00401BDF [load addr 0x04ab0000] test1! mainCRTStartup +0x16c(0x816075a3, 0x1c9b180, 0x7ffd5000, 0x805502fa), crt0.c line 259
7C816FD7 [load addr 0x06fe0000] kernel32! RegisterWaitForInputIdle +0x49(0x401a73, 0x0, 0x78746341, 0x20)


Thread=[14AC:0002-1414]
Stack base=0x0012E6E4, Stack size = 7400 bytes
PANIC: CheckMarkers: Memory preceding object has been destroyed
60068AB8 [load addr 0x05110000] nnotes! OSWalkStack +0x98(0x0, 0x60009030, 0x12d280, 0x0), stackwlk.c line 301
60008E1F [load addr 0x05110000] nnotes! Panic +0x22f(0x12ca78, 0x6fd00f0, 0x12fc28, 0x600104b9), ospanic.c line 341
60010A0E [load addr 0x05110000] nnotes! CheckMarkers +0x4e(0x6fd00f0, 0x1a76, 0x1, 0x1a76), memlock.c line 1267
600104B9 [load addr 0x05110000] nnotes! OSLockObject +0xf9(0x18, 0x5dc, 0x60083da5, 0x15a0590), memlock.c line 722
609743E8 [load addr 0x05110000] nnotes! ConvertNotesBitmap +0x358(0xf0104019, 0x0, 0x0, 0x4012c0), nbitmapcvt.c line 336
004013EC [load addr 0x04aa0000] test1! test +0x10c(0x3d6f90, 0x10f6, 0x0, 0x29a), test1.cpp line 97
00401288 [load addr 0x04aa0000] test1! NotesMain +0x88(0x3, 0x3d6ec4, 0x3e0000, 0x0), test1.cpp line 32
0040113E [load addr 0x04aa0000] test1! main +0x13e(0x0, 0x0, 0x0, 0x3), sdkmain.c line 230

This problem is now fixed.



APAR: LO39033
What is an APAR?


Last Modified on 12/08/2013