Repeatedly Loading an XML Document May Crash in MSXML.dll

ID: Q247717

The information in this article applies to:

Microsoft Internet Explorer version 5 for Windows NT 4.0
Microsoft Internet Information Server version 4.0

SYMPTOMS

While repeatedly loading an XML document using MSXML.dll version 5.0.2314.1000, an application may stop responding with the following application error:

The instruction at "0x7111a681" referenced memory at "0x00000000". The memory could not be read. Click on OK to terminate the application. Click on CANCEL to debug the application.

If you click CANCEL, Microsoft Visual C++ is installed as the default debugger, a Visual C++ dialog box displays an Unhandled exception in xxx.exe (MSXML.dll): 0xC0000005: Access Violation.

RESOLUTION

A supported fix for the MSXML.dll that corrects this problem is now available from Microsoft, however it has not been fully regression tested and should be applied only to systems experiencing this specific problem.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information on support costs, please go to the following address on the World Wide Web:

http://support.microsoft.com/support/supportnet/default.asp

NOTE: If you contact Microsoft to obtain this fix, a fee may be charged. This fee is refundable if it is determined that you only require the fix you requested. However, this fee is non-refundable if you request additional technical support, if your no-charge technical support period has expired, or if you are not eligible for standard no-charge technical support.

For more information about eligibility for no-charge technical support, see the following article in the Microsoft Knowledge Base:

Q154871 Determining If Your Product Is Eligible for No-Charge Technical Support

STATUS

Microsoft has confirmed this to be a problem in MSXML.dll version 5.0.2314.1000.

MORE INFORMATION

If a debugger is started upon the application error, the last two calls in the call stack before the crash may show as:


MSXML! 7111a681()
MSXML! 71101315()


MSXML+0x1a681	
MSXML+0x1315

With the following disassembly code:


7111A659   cmp         dword ptr [esi],0
7111A65C   mov         edi,esi
7111A65E   je          7111A686
7111A660   mov         ecx,edi
7111A662   call        71105105
7111A667   mov         ebx,eax
7111A669   cmp         ebx,0FFh
7111A66C   je          711050AB
7111A672   add         edi,4
7111A675   push        ebx
7111A676   push        edi
7111A677   call        71101266
7111A67C   and         ebx,0F9h
7111A67F   mov         edi,ebx
7111A681   cmp         dword ptr [edi],0
7111A684   jne         7111A660

The crash occurs at instruction 7111A681 where the register EDI = 00000000.

Additional query words: MSXML.DLL load crash AV access violation 7111a681 1a681

Keywords : kbIE500 kbIE500bug kbXML kbiis400
Version : WINDOWS:5; winnt:4.0
Platform : WINDOWS winnt
Issue type : kbbug