XADM: Store Crash on Security Credentials Check

ID: Q184828

The information in this article applies to:

Microsoft Exchange Server, version 4.0

SYMPTOMS

When the information store is verifying a security message from an RPC client, the information store may crash, producing a Drwtsn32.log file similar to the one below:


Microsoft (R) Windows NT (TM) Version 3.51 DrWtsn32
Copyright (C) 1985-1995 Microsoft Corp. All rights reserved.

Application exception occurred:
        App: SECURITY.DBG (pid=79)
        When: 12/9/1996 @ 17:52:26.45
        Exception number: c0000005 (Access Violation)

State Dump for Thread Id 0x199

 eax=001442c0 ebx=00000038 ecx=00143970 edx=00000000 esi=0012fdfc
 edi=00000000
 eip=77f8904b esp=0012fd68 ebp=0012fdd0 iopl=0         nv up ei pl zr na po
 nc
 cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000
 efl=00000246

 function: SECURITY!SspHandleVerifyMessage
 0x76692c19  f8           clc
 0x76692c1a  753d         jne          76692c59
 0x76692c1c  8d7de8       lea          edi,dword ptr [ebp-18]
 0x76692c1f  33c0         xor          eax,eax
 0x76692c21  8d75e8       lea          esi,dword ptr [ebp-18]
 0x76692c24  b910000000   mov          ecx,00000010
 0x76692c29  ab           stosd
 0x76692c2a  ab           stosd
 0x76692c2b  ab           stosd
 0x76692c2c  ab           stosd
 0x76692c2d  8b7df8       mov          edi,dword ptr [ebp-08]
 0x76692c30  2bc0         sub          eax,eax
 0x76692c32  c745e801     mov          eax, ptr[ebp-8]
 FAULT--->   0x76692c39  f3a6         repe cmpsb
 0x76692c3b  7405         je           76692c42
 0x76692c3d  1bc0         sbb          eax,eax
 0x76692c3f  83d8ff       sbb          eax,ff
 0x76692c42  85c0         test         eax,eax


*----> Stack Back Trace <----*

 FramePtr  RetAddr   Param1   Param2   Param3   Function Name
 0846fdf0  766925bc  08d3cf2c 0846fe18 0000004a
 SECURITY!SspHandleVerifyMessage+0x8c
 0846fe08  76693884  08d3cf2c 0846fe98 0000004a
 SECURITY!SspVerifySignature+0x15
 0846fe1c  77e82311  08d3cf2c 0846fe98 0000004a
 SECURITY!VerifySignature+0x23
 0846febc  77e6c18c  08d40178 0846ff1c 08d38f58
 RPCRT4!?Receive@OSF_CCONNECTION@@UAEJPAU_RPC_MESSAGE@@I@Z+0xa1
 0846fef8  77e6bf79  0846ff10 08d38f58 08d3cdb0
 RPCRT4!?ReceiveMessage@OSF_CCONNECTION@@AAEJPAU_RPC_MESSAGE@@PAII1@Z+0x23
 0846ff18  00000078  00000002 00165e28 0846ff84
RPCRT4!?TransReceive@TRANS_ADDRESS@@UAEJPAPAVOSF_SCONNECTION@@PAPAXPAI@Z+0x
 8f

STATUS

Microsoft has confirmed this to be a problem in Exchange Server version 4.0. We are researching this problem and will post additional information here in the Microsoft Knowledge Base as it becomes available.

Keywords : kbusage XADM
Version : WINDOWS:4.0
Platform : WINDOWS
Issue type : kbbug