Re: Silverlight 崩溃问题

.Net程序调试

Silverlight 崩溃问题

losesoul 2010-01-15, 12:32 下午
我的一个Silverlight程序，偶尔出现崩溃问题，用windbg得到了它的Crashed Dump,发现是agcore内部异常了，请问如何进一步获取这个SetValue方法下的参数信息，最好能在sos下看到这个对象的具体信息
FAULTING_IP:
+5ba952f051ddf74
9122086c ??              ???

EXCEPTION_RECORD: 0b11f888 -- (.exr 0xb11f888)
ExceptionAddress: 9122086c
   ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 9122086c
Attempt to read from address 9122086c

FAULTING_THREAD: 00001470

DEFAULT_BUCKET_ID: INVALID_POINTER_READ

PROCESS_NAME: iexplore.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 9122086c

READ_ADDRESS: 9122086c

FOLLOWUP_IP:
agcore!CFrameworkElement::SetValue+1d7
6c914fd4 84c0            test    al,al

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

CONTEXT: 0b11f8a4 -- (.cxr 0xb11f8a4)
eax=9122086c ebx=00000000 ecx=05f20ae8 edx=6c90ffff esi=00000000 edi=04b5e9d8
eip=9122086c esp=0b11fb70 ebp=0b11fb8c iopl=0         nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000             efl=00010202
9122086c ??              ???
Resetting default scope

PRIMARY_PROBLEM_CLASS: INVALID_POINTER_READ

BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ

LAST_CONTROL_TRANSFER: from 6c914fd4 to 9122086c

IP_ON_HEAP: 9122086c

STACK_TEXT:
9122086c unknown+0x0
6c914fd4 agcore!CFrameworkElement::SetValue+0x1d7
6c9224fc agcore!CShape::SetValue+0x72
6c922544 agcore!CEllipse::SetValue+0x3b
6c91aac7 agcore!CAnimation::DoSetValue+0x50
6c95859b agcore!CAnimation::UpdateAnimationUsingKeyFrames+0x3b5
6c9b7df4 agcore!CAnimation::UpdateAnimation+0x184
6c91716e agcore!CTimeline::ComputeState+0x13a
6c91720d agcore!CTimelineGroup::ComputeState+0x8c
6c916d73 agcore!CStoryboard::ComputeState+0x48
6c9169f7 agcore!CTimeManager::Tick+0x79
6c916a59 agcore!CCoreServices::Tick+0x21
6c99f796 agcore!CCoreServices::Draw+0x140
6c916af2 agcore!CCoreServices::Draw+0x2d
6d8314f5 npctrl!CXcpBrowserHost::OnTick+0x1b1
6d8033c2 npctrl!CXcpDispatcher::Tick+0xf3
6d8027c6 npctrl!CXcpDispatcher::OnReentrancyProtectedWindowMessage+0xcd
6d802709 npctrl!CXcpDispatcher::WindowProc+0xb8
7e418734 USER32!InternalCallWinProc+0x28
7e418816 USER32!UserCallWinProcCheckWow+0x150
7e4189cd USER32!DispatchMessageWorker+0x306
7e418a10 USER32!DispatchMessageW+0xf
4093e6b3 IEFRAME!CTabWindow::_TabWindowThreadProc+0x189
7c80b729 kernel32!BaseThreadStart+0x37

STACK_COMMAND: .cxr 0B11F8A4 ; kb ; dds b11fb70 ; kb

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: agcore!CFrameworkElement::SetValue+1d7

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: agcore

IMAGE_NAME: agcore.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 4a8a2b0b

FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_agcore.dll!CFrameworkElement::SetValue

BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_agcore!CFrameworkElement::SetValue+1d7

WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/iexplore_exe/7_0_6000_16850/49f04471/coreclr_dll/3_0_40818_0/4a8a2a97/c0000005/00060634.htm?Retriage=1

Followup: MachineOwner
0:020> kb
ChildEBP RetAddr Args to Child
0b11f6f0 7b7e0693 9122086c 9122086c 045fdc60 coreclr!VirtualCallStubManager::predictStubKind+0x7d
0b11f704 7b7e06de 9122086c 0b11f8a4 0b11f730 coreclr!VirtualCallStubManager::getStubKind+0x10
0b11f714 7b8f8db2 9122086c 0b11f72c 0b11f8a4 coreclr!VirtualCallStubManager::FindStubManager+0x20
0b11f730 7b8f8f08 0b11f888 0b11f8a4 0b11f7f0 coreclr!AdjustContextForVirtualStub+0x23
0b11f74c 7b8f93c5 c0000005 089b639d 00004000 coreclr!CLRVectoredExceptionHandlerPhase3+0x53
0b11f780 7b8f9d5d 0b11f7f0 089b63b1 00000000 coreclr!CLRVectoredExceptionHandlerPhase2+0x20
0b11f7ac 7b892241 0b11f7f0 089b63c5 7c97e3c0 coreclr!CLRVectoredExceptionHandler+0xad
0b11f7d8 7c9444a8 0b11f7f0 0b11f888 0b11f888 coreclr!CLRVectoredExceptionHandlerShim+0x57
0b11f7f8 7c933f56 0b11f888 0b11f8a4 00000000 ntdll!RtlCallVectoredExceptionHandlers+0x48
0b11f870 7c90e48a 0b11f888 0b11f8a4 0b11f888 ntdll!RtlDispatchException+0x19
0b11f870 9122086c 0b11f888 0b11f8a4 0b11f888 ntdll!KiUserExceptionDispatcher+0xe
WARNING: Frame IP not in any known module. Following frames may be wrong.
0b11fb6c 6c914fd4 10bc0c84 04b5e9d8 054487ac 0x9122086c
0b11fb8c 6c9224fc 054487ac 10bc0c84 054487ac agcore!CFrameworkElement::SetValue+0x1d7
0b11fba8 6c922544 054487ac 10bc0c84 054487ac agcore!CShape::SetValue+0x72
0b11fbc0 6c91aac7 054487ac 10bc0c84 00000000 agcore!CEllipse::SetValue+0x3b
0b11fbf0 6c95859b 10bc0be0 04b5e9d8 00000000 agcore!CAnimation::DoSetValue+0x50
0b11fc30 6c9b7df4 0b11fca4 0b11fc88 10bc0be0 agcore!CAnimation::UpdateAnimationUsingKeyFrames+0x3b5
0b11fc4c 6c91716e 00000003 00000000 00000000 agcore!CAnimation::UpdateAnimation+0x184
0b11fc9c 6c91720d 3ea20800 0b11fcec 00000000 agcore!CTimeline::ComputeState+0x13a
0b11fcbc 6c916d73 048cbd88 0b11fcec 0b11fcf4 agcore!CTimelineGroup::ComputeState+0x8c

Re: Silverlight 崩溃问题

格蠹老雷 2010-01-16, 13:41 下午
感觉是agcore!CFrameworkElement::SetValue内部调用对象的方法时，方法的地址被意外覆盖成了错误的值，即0x9122086c，这个地址是指向内核态的，不可以从用户态访问，所以触发异常了。
对象方法的地址被覆盖掉的原因可能有多种，比如缓冲区溢出，使用已经释放了对象等。

Google了一下，有人遇到同样的问题：
http://stackoverflow.com/questions/1324890/debugging-silverlight-crash
宏观上看，与IE的某些插件有关，可以在IE的Add-on对话框中把不用的插件禁止掉试试看。或者使用即时调试（JIT）...

Re: Silverlight 崩溃问题

victor12 2011-04-12, 11:53 上午

What affectionate of golf clubs can be admired as great

If you are application golf clubs that you accept been application for absolutely for time now that are abominably adapted to you, there is a addiction for you to try and atone because you anticipate your golf beat is traveling wrong. This agency that ping g15 irons

you are putting the faults into your golf beat or into your golf bold to atone for abominably adapted golf clubs.Always bethink that the absolute golf clubs can enhance the bold of a player. Accessible in a avant-garde array of styles and Ping G15

designs, golf clubs are advised to fit all golfers and all budgets. You should aces the able set of absolute golf clubs and the capital accessories to acclaim your golf game.The admeasurement of the golf club active is important. The active are either fabricated of either animate or titanium. Animate active are added than titanium and can impede a golf swing. Titanium active can be bigger and allows for added brawl associate but advance a lower weight than steel