Notes/Domino Fix List
SPR # THTO6YVTNJFixed in 7.0.3; 6.5.5 FP3; 7.0.2 FP2; 6.5.6 FP2 releaseSecurity fix



Product Area: Server Technical Area: Mail Server Platform: Cross Platform

Lotus Customer Support APAR: LO19881

SPR# THTO6YVTNJ - Error "PANIC: Invalid pool free chain" displayed during a server crash with DPOOL corruption. The crash occurred while processing a MIME message.

Technote Number: 1256494

Problem:
This issue was reported to Quality Engineering as SPR #THTO6YVTNJ and is fixed
in Domino 6.5.5 Fix Pack 3 (FP3). A fix is being researched for Domino 7.x. A
hotfix is available by contacting IBM Support.

Excerpt from the Lotus Domino Release 6.5.5 FP3 fix list (available at
http://www.ibm.com/developerworks/lotus):
Server
SPR# THTO6YVTNJ - Error "PANIC: Invalid pool free chain" displayed during a
server crash with DPOOL corruption. The crash occurred while processing a MIME
message.


Refer to the Upgrade Central site for details on upgrading Notes/Domino.

Crash stacks:

(with DEBUG_CHECKMARKER=1 on)

###########################################################
### FATAL THREAD 24/47 [ nsmtp: 0a58: 1008]
### FP=0x1032fc14, PC=0x60193297, SP=0x1032f09c
### stkbase=10330000, total stksize=262144, used stksize=3940
### EAX=0x0110088c, EBX=0x00000000, ECX=0x008f0000, EDX=0x008f0000
### ESI=0x1032f7a8, EDI=0x180940f8, CS=0x0000001b, SS=0x00000023
### DS=0x00000023, ES=0x00000023, FS=0x0000003b, GS=0x00000000 Flags=0x00010202
Exception code: c0000005 (ACCESS_VIOLATION)
############################################################
@[ 1] 0x60193297 nnotes.Panic@4+631 (60a30016,f0b26d0,d6f879,1032fc3c)
@[ 2] 0x6019539f nnotes.CheckMarkers@8+127 (180940f8,a,d6f879,1032fc4c)
@[ 3] 0x601953dd nnotes.CheckDescMarkers@4+45
(d6f879,f01041dd,1032fc5c,6060454d)
@[ 4] 0x60002b38 nnotes.OSMemoryUnlock@4+56 (60c1fd40,f0b0e08,1032fc6c,600473e3)
@[ 5] 0x6060454d nnotes.AllocStoreFree+13 (f01041dd,f0b0e08,1032fc98,60601cff)
@[ 6] 0x600473e3 nnotes.CStream::Clear+35 (f0b0e08,f0b0de0,41f590,0)
@[ 7] 0x60601cff nnotes.CStr::~CStr+15 (1,d554a4,19,d554a4)
@[ 8] 0x00401cc5 nSMTP.CSMTPSrv::OnDisconnect+85 (434c28,f0b0dc8,d554a4,434c28)
@[ 9] 0x00401c35 nSMTP.CSMTPSrv::OnConnect+197 (434c28,d554c0,2cb80001,d554a4)
@[10] 0x0041873c nSMTP.CIServ::ServerTaskProtocolMachine+268 (434c28,d554a4,3,0)
@[11] 0x00417f9c nSMTP.CIServ::ServerTaskIOCP+1052 (0,0,60116d74,0)
@[12] 0x0041740d nSMTP.ServerThread@4+29 (0,0,0,0)
[13] 0x77e6608b KERNEL32.GetModuleFileNameA+235 (60116ca0,0,0,fffe0129)
Invalid stack frame detected: Invalid frame pointer (BP): 0

############################################################
### FATAL THREAD 35/47 [ nsmtp: 08b8: 08c0]
### FP=0x0fd3fbd8, PC=0x60007a87, SP=0x0fd3fbb8
### stkbase=0fd40000, total stksize=262144, used stksize=1096
### EAX=0x00000000, EBX=0x00000000, ECX=0x0000012a, EDX=0x00d472f4
### ESI=0x0042c9d0, EDI=0x62734541, CS=0x0000001b, SS=0x00000023
### DS=0x00000023, ES=0x00000023, FS=0x0000003b, GS=0x00000000 Flags=0x00010246
Exception code: c0000005 (ACCESS_VIOLATION)
############################################################
@[ 1] 0x60007a87 nnotes.OSAllocBBlock@12+23 (62734541,12a,fd3fc00,0)
@[ 2] 0x60008133 nnotes.OSLocalAllocNZ@8+179 (11e,fd3fc34,59,fd3fc38)
@[ 3] 0x601a0b81 nnotes.OSLocalAlloc@8+17 (11e,fd3fc34,42c9d0,0)
@[ 4] 0x606296f4 nnotes.DumpText@20+20 (e063221,59,ffffffff,41fbb0)
@[ 5] 0x0041fc5e nSMTP.DebugLogData+78 (e063221,59,5934254,434c28)
@[ 6] 0x0041e48b nSMTP.CBaseTask::StateMachine+9627
(e0630b0,5934254,434c28,5934270)
@[ 7] 0x00401c24 nSMTP.CSMTPSrv::OnConnect+180 (434c28,5934270,13e80001,5934254)
@[ 8] 0x0041873c nSMTP.CIServ::ServerTaskProtocolMachine+268
(434c28,5934254,3,0)
@[ 9] 0x00417f9c nSMTP.CIServ::ServerTaskIOCP+1052 (0,0,60116d74,0)
@[10] 0x0041740d nSMTP.ServerThread@4+29 (0,0,0,0)
[11] 0x77e6608b KERNEL32.GetModuleFileNameA+235
Invalid stack frame detected: Unable to read process memory for frame

############################################################
### FATAL THREAD 6/8 [ nsmtp: 0724: 0268]
### FP=0x057ee46c, PC=0x60177011, SP=0x057edcf8
### stkbase=057f0000, total stksize=262144, used stksize=8968
### EAX=0x00f70648, EBX=0x00000cb9, ECX=0x00930000, EDX=0x00930000
### ESI=0x057ee300, EDI=0x00002800, CS=0x0000001b, SS=0x00000023
### DS=0x00000023, ES=0x00000023, FS=0x0000003b, GS=0x00000000 Flags=0x00010206
Exception code: c0000005 (ACCESS_VIOLATION)
############################################################
@[ 1] 0x60177011 nnotes._Panic@4+417 (60ae0c2a)
@[ 2] 0x605ff0d0 nnotes._HandleBadFreeChain@4+640 (57ee484)
@[ 3] 0x60001dee nnotes._AllocDBlock@12+542 (60d85634,2fc,57ee53c)
@[ 4] 0x6000204f nnotes._DPoolAlloc@16+543 (60d2e370,2fc,384,e6033a)
@[ 5] 0x600042d6 nnotes._AllocObject@24+294
(60d2e370,60d2e3e0,e6032c,2fc,5,57ed924)
@[ 6] 0x60006ed4 nnotes._OSMemAllocExtended@16+244 (384,2f6,0,57ee614)
@[ 7] 0x60007517 nnotes._OSMemAlloc@12+23 (384,2f5,57ee614)
@[ 8] 0x602af491 nnotes.RFC822HeaderBodytoLMBCS+161 (2f5,0,0)
@[ 9] 0x602af8b5 nnotes._NSFItemSetRFC822TextExt@36+149
(d,60020000,57ee694,8,9,57ed924,1003f,0,0)
@[10] 0x602a55da nnotes._MIMEItemizeMessageHeader@32+4890
(d,0,7,57ee858,a,57ed924,1003f,0)
@[11] 0x602a69e4 nnotes.MIMEItemizeMessageHeaders+1908
(d,7,57eea08,57ee900,b,57ed924,1003f,0)
@[12] 0x602a6bf3 nnotes.MIMEItemizeMessage+51
(57eea30,d,60af32e8,4,c,57ed924,1003f,0)
@[13] 0x602a7614 nnotes._MIMEItemizeUsingCallback@28+372
(d,60af32e8,4,7,d,57ed924,1003f)
@[14] 0x602a784a nnotes._MIMEItemizeStream@24+90 (d,0,4,7,e,57ed924)
@[15] 0x60219d70 nnotes.CIMsgImport::Import+224 (36f3334,3ea9c0,d,3,f,57ed924)
@[16] 0x00412d76 nSMTP.CSMTPProtocol::SubmitMessage+502
(36f3334,57efb3a,2,3716014,10,57ed924)
@[17] 0x00411229 nSMTP.CSMTPProtocol::CommandDATA+1417
(6014,2,3716014,60e6a140,11,57ed924)
@[18] 0x004123e4 nSMTP.CSMTPProtocol::StateConnected+1076
(3716014,3e0000,3ea9a0,3ea998,12,57ed924)
@[19] 0x004126dd nSMTP.CSMTPProtocol::Run+429
(3716014,e7aaf0,43ae28,e7aaf0,13,57ed924)
@[20] 0x0042099e nSMTP.CBaseTask::StateMachine+398
(3ea998,e7aaf0,43ae28,e7ab0c,14,57ed924)
@[21] 0x00402fc3 nSMTP.CSMTPSrv::OnConnect+211
(43ae28,e7ab0c,c3c0001,e7aaf0,15,57ed924)
@[22] 0x004167d6 nSMTP.CIServ::ServerTaskProtocolMachine+262
(43ae28,e7aaf0,3,0,16,57ed924)
@[23] 0x0041b007 nSMTP.CIServ::ServerTaskIOCP+1127
(43ae28,0,60103820,0,17,57ed924)
@[24] 0x0041b93d nSMTP._ServerThread@4+29 (0)
[25] 0x77e6608b KERNEL32 (60103750)
Invalid stack frame detected: Invalid frame pointer (BP): 0

############################################################


i5/OS call stack
(debug_checkmarkers=1 was not enabled):

Invocation stack trace

JOB: 844313/QNOTES/SMTP THREAD: 0x117
LE_Create_Thread2__FP12crtth_parm_t 20 QLECRTTH QLESPI
ThreadWrapper 16 THREAD LIBNOTES
ServerThread 3194 CISERV SMTP
ServerTaskIOCP__6CIServFi 3538
ServerTaskProtocolMachine__6CIServFP8INETTASK 3723
OnConnect__8CSMTPSrvFR9SESSIONIDUlP8INETTASK 2019 CSMTPSRV
OnDisconnect__8CSMTPSrvFP8INETTASK 2062
__dt__9CSMTPTaskFv 2110
__dt__6CITaskFv 2952 ITASK
__dt__9CBaseTaskFv 1580
__dt__13CTaskProtocolFv 1385
__dt__4CStrFv 694 STRING LIBNOTES
Clear__7CStreamFv 753 STREAM
AllocStoreFree__FUl 690
OSMemoryFree 12 MEMORY
Discard 6 MEMLOCK
DPoolFree 8 MEMALLOC
OSFreeDBlock 2 DPOOL
FreeDBlock 12
OS400ExceptionOccurred 1 BREAK
fatal_error 32
OSFaultCleanup 85 CLEANUP
OSRunExternalScript 19
__system_a 2 STDLIB_A
system 6 QC2SYS QC2SYS
297 QCMDEXC
_C_pep 0 NSD NSD

MCH3601 Escape 40 02/27/07 15:39:59.324528 LIBNOTES QDOMINO655 *STMT
LIBNOTES QDOMINO655 *STMT
From module . . . . . . . . : DPOOL
From procedure . . . . . . : FreeDBlock
Statement . . . . . . . . . : 12
To module . . . . . . . . . : DPOOL
To procedure . . . . . . . : FreeDBlock
Statement . . . . . . . . . : 12
Thread . . . . : 00000022
Message . . . . : Pointer not set for location referenced.
Cause . . . . . : A pointer was used, either directly or as a basing
pointer, that has not been set to an address. More >



Last Modified on 12/11/2013

Go back