Exception Code c0000005 AFTER extension terminates [Answered]RSS

2 replies

Last post Jun 06, 2019 11:23 PM by richalgeni

  • Exception Code c0000005 AFTER extension terminates

    Jun 04, 2019 09:11 PM|richalgeni|LINK

    I recently upgraded to Windows 2019 Server for my development environment. After reinstalling my ISAPI extensions, I am encountering an access violation when the extension terminates. This seems to be happening AFTER TerminateExtension() completes. I have both added code to create an event in the event viewer, and removed all code executed in the exported TerminateExtension() function. It doesn't make a difference. Also, I have checked the permissions in the internet cache folder, and turned off compression for static items. The error still occurs.

    The name of the extension is 'iisapi_caddata.dll.' As you see below, the Fault Module Name is 'iisapi_caddata.dll_unloaded.'  This seems to cause no problems, unlike programming errors I have made where iisreset must be run before the web server is able to be relaunched.

    The event created is strangely similar to a post at Rick Strahl's web log: ISAPI-Module-Crashing-on-Application-Pool-Shutdown

    Does anyone have any thoughts?

    Event:

    Log Name: Application
    Source: Application Error
    Date: 6/4/2019 4:37:52 PM
    Event ID: 1000
    Task Category: (100)
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: Andromeda.OrionTEK.local
    Description:
    Faulting application name: w3wp.exe, version: 10.0.17763.1, time stamp: 0xcfdb13d8
    Faulting module name: iisapi_caddata.dll_unloaded, version: 1.0.0.0, time stamp: 0x5cf434ad
    Exception code: 0xc0000005
    Fault offset: 0x0000000000034230
    Faulting process id: 0x2be8
    Faulting application start time: 0x01d51b13623668b5
    Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
    Faulting module path: iisapi_caddata.dll
    Report Id: 9cb4ecad-c28b-493b-972c-6c0bd5bfafa2
    Faulting package full name:
    Faulting package-relative application ID:
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2019-06-04T20:37:52.915762200Z" />
    <EventRecordID>24823</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Andromeda.OrionTEK.local</Computer>
    <Security />
    </System>
    <EventData>
    <Data>w3wp.exe</Data>
    <Data>10.0.17763.1</Data>
    <Data>cfdb13d8</Data>
    <Data>iisapi_caddata.dll_unloaded</Data>
    <Data>1.0.0.0</Data>
    <Data>5cf434ad</Data>
    <Data>c0000005</Data>
    <Data>0000000000034230</Data>
    <Data>2be8</Data>
    <Data>01d51b13623668b5</Data>
    <Data>c:\windows\system32\inetsrv\w3wp.exe</Data>
    <Data>iisapi_caddata.dll</Data>
    <Data>9cb4ecad-c28b-493b-972c-6c0bd5bfafa2</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    </EventData>
    </Event>

    Report.wer

    Version=1
    EventType=BEX64
    EventTime=132041542729557634
    ReportType=2
    Consent=1
    UploadTime=132041542730607624
    ReportStatus=268435456
    ReportIdentifier=c1fd700f-9f24-4403-a312-2a36197d92b9
    IntegratorReportIdentifier=9cb4ecad-c28b-493b-972c-6c0bd5bfafa2
    Wow64Host=34404
    NsAppName=w3wp.exe
    OriginalFilename=w3wp.exe
    AppSessionGuid=00002be8-0000-0012-b568-3662131bd501
    TargetAppId=W:0000f519feec486de87ed73cb92d3cac802400000000!0000447ec979c4b2c53c21b17bd9c2f7d67a9f967108!w3wp.exe
    TargetAppVer=2080//07//03:14:06:16!108b8!w3wp.exe
    BootId=4294967295
    TargetAsId=14953
    IsFatal=1
    EtwNonCollectReason=1
    Response.BucketId=d73cf89fc1fa91d763ee26bf284c32db
    Response.BucketTable=5
    Response.LegacyBucketId=1436127933634458331
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=w3wp.exe
    Sig[1].Name=Application Version
    Sig[1].Value=10.0.17763.1
    Sig[2].Name=Application Timestamp
    Sig[2].Value=cfdb13d8
    Sig[3].Name=Fault Module Name
    Sig[3].Value=iisapi_caddata.dll_unloaded
    Sig[4].Name=Fault Module Version
    Sig[4].Value=1.0.0.0
    Sig[5].Name=Fault Module Timestamp
    Sig[5].Value=5cf434ad
    Sig[6].Name=Exception Offset
    Sig[6].Value=0000000000034230
    Sig[7].Name=Exception Code
    Sig[7].Value=c0000005
    Sig[8].Name=Exception Data
    Sig[8].Value=0000000000000008
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=10.0.17763.2.0.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=bb08
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=bb08800a2317686d9f61dcfc07802c0e
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=32c4
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=32c4c8f28f697a775e89cd6f81db5615
    UI[2]=c:\windows\system32\inetsrv\w3wp.exe
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=IIS Worker Process stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=c:\windows\system32\inetsrv\w3wp.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\System32\KERNEL32.DLL
    LoadedModule[3]=C:\Windows\System32\KERNELBASE.dll
    LoadedModule[4]=C:\Windows\System32\msvcrt.dll
    LoadedModule[5]=C:\Windows\System32\combase.dll
    LoadedModule[6]=C:\Windows\System32\ucrtbase.dll
    LoadedModule[7]=C:\Windows\System32\RPCRT4.dll
    LoadedModule[8]=C:\Windows\System32\bcryptPrimitives.dll
    LoadedModule[9]=c:\windows\system32\inetsrv\iisutil.dll
    LoadedModule[10]=C:\Windows\System32\advapi32.dll
    LoadedModule[11]=C:\Windows\System32\sechost.dll
    LoadedModule[12]=C:\Windows\System32\WS2_32.dll
    LoadedModule[13]=C:\Windows\System32\kernel.appcore.dll
    LoadedModule[14]=C:\Windows\SYSTEM32\ntmarta.dll
    LoadedModule[15]=C:\Windows\System32\user32.dll
    LoadedModule[16]=C:\Windows\System32\win32u.dll
    LoadedModule[17]=C:\Windows\System32\GDI32.dll
    LoadedModule[18]=C:\Windows\System32\gdi32full.dll
    LoadedModule[19]=C:\Windows\System32\msvcp_win.dll
    LoadedModule[20]=c:\windows\system32\inetsrv\w3wphost.dll
    LoadedModule[21]=C:\Windows\System32\OLEAUT32.dll
    LoadedModule[22]=c:\windows\system32\inetsrv\nativerd.dll
    LoadedModule[23]=C:\Windows\System32\bcrypt.dll
    LoadedModule[24]=C:\Windows\SYSTEM32\ncrypt.dll
    LoadedModule[25]=C:\Windows\SYSTEM32\XmlLite.dll
    LoadedModule[26]=C:\Windows\SYSTEM32\ktmw32.dll
    LoadedModule[27]=C:\Windows\SYSTEM32\NTASN1.dll
    LoadedModule[28]=c:\windows\system32\inetsrv\IISRES.DLL
    LoadedModule[29]=C:\Windows\System32\CRYPTSP.dll
    LoadedModule[30]=C:\Windows\system32\rsaenh.dll
    LoadedModule[31]=C:\Windows\SYSTEM32\CRYPTBASE.dll
    LoadedModule[32]=C:\Windows\System32\clbcatq.dll
    LoadedModule[33]=C:\Windows\system32\mlang.dll
    LoadedModule[34]=C:\Windows\system32\ncryptprov.dll
    LoadedModule[35]=C:\Windows\System32\profapi.dll
    LoadedModule[36]=C:\Windows\system32\inetsrv\iiscore.dll
    LoadedModule[37]=C:\Windows\SYSTEM32\SspiCli.dll
    LoadedModule[38]=c:\windows\system32\inetsrv\W3TP.dll
    LoadedModule[39]=c:\windows\system32\inetsrv\w3dt.dll
    LoadedModule[40]=C:\Windows\SYSTEM32\HTTPAPI.dll
    LoadedModule[41]=C:\Windows\system32\napinsp.dll
    LoadedModule[42]=C:\Windows\System32\mswsock.dll
    LoadedModule[43]=C:\Windows\SYSTEM32\DNSAPI.dll
    LoadedModule[44]=C:\Windows\System32\NSI.dll
    LoadedModule[45]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
    LoadedModule[46]=C:\Windows\System32\winrnr.dll
    LoadedModule[47]=C:\Windows\system32\NLAapi.dll
    LoadedModule[48]=C:\Windows\system32\wshbth.dll
    LoadedModule[49]=C:\Windows\System32\rasadhlp.dll
    LoadedModule[50]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[51]=C:\Windows\System32\inetsrv\loghttp.dll
    LoadedModule[52]=C:\Windows\System32\inetsrv\cachuri.dll
    LoadedModule[53]=C:\Windows\System32\inetsrv\cachfile.dll
    LoadedModule[54]=C:\Windows\System32\inetsrv\cachtokn.dll
    LoadedModule[55]=C:\Windows\System32\inetsrv\cachhttp.dll
    LoadedModule[56]=C:\Windows\System32\inetsrv\compdyn.dll
    LoadedModule[57]=C:\Windows\System32\inetsrv\compstat.dll
    LoadedModule[58]=C:\Windows\System32\inetsrv\defdoc.dll
    LoadedModule[59]=C:\Windows\System32\inetsrv\dirlist.dll
    LoadedModule[60]=C:\Windows\System32\inetsrv\protsup.dll
    LoadedModule[61]=C:\Windows\System32\inetsrv\static.dll
    LoadedModule[62]=C:\Windows\System32\inetsrv\authanon.dll
    LoadedModule[63]=C:\Windows\System32\inetsrv\authsspi.dll
    LoadedModule[64]=C:\Windows\SYSTEM32\wkscli.dll
    LoadedModule[65]=C:\Windows\SYSTEM32\netutils.dll
    LoadedModule[66]=C:\Windows\System32\inetsrv\modrqflt.dll
    LoadedModule[67]=C:\Windows\System32\inetsrv\custerr.dll
    LoadedModule[68]=C:\Windows\System32\inetsrv\isapi.dll
    LoadedModule[69]=C:\Windows\System32\inetsrv\filter.dll
    LoadedModule[70]=C:\Windows\System32\inetsrv\validcfg.dll
    LoadedModule[71]=C:\Windows\System32\inetsrv\iiswsock.dll
    LoadedModule[72]=C:\Windows\SYSTEM32\websocket.dll
    LoadedModule[73]=C:\Windows\System32\inetsrv\redirect.dll
    LoadedModule[74]=C:\Windows\System32\inetsrv\iisetw.dll
    LoadedModule[75]=C:\Windows\System32\inetsrv\iisfreb.dll
    LoadedModule[76]=C:\Windows\System32\inetsrv\iisreqs.dll
    LoadedModule[77]=C:\Windows\System32\CRYPT32.dll
    LoadedModule[78]=C:\Windows\System32\MSASN1.dll
    LoadedModule[79]=C:\Windows\SYSTEM32\DPAPI.DLL
    LoadedModule[80]=C:\Windows\SYSTEM32\mpr.dll
    State[0].Key=Transport.DoneStage1
    State[0].Value=1
    OsInfo[0].Key=vermaj
    OsInfo[0].Value=10
    OsInfo[1].Key=vermin
    OsInfo[1].Value=0
    OsInfo[2].Key=verbld
    OsInfo[2].Value=17763
    OsInfo[3].Key=ubr
    OsInfo[3].Value=503
    OsInfo[4].Key=versp
    OsInfo[4].Value=0
    OsInfo[5].Key=arch
    OsInfo[5].Value=9
    OsInfo[6].Key=lcid
    OsInfo[6].Value=1033
    OsInfo[7].Key=geoid
    OsInfo[7].Value=244
    OsInfo[8].Key=sku
    OsInfo[8].Value=7
    OsInfo[9].Key=domain
    OsInfo[9].Value=1
    OsInfo[10].Key=prodsuite
    OsInfo[10].Value=272
    OsInfo[11].Key=ntprodtype
    OsInfo[11].Value=2
    OsInfo[12].Key=platid
    OsInfo[12].Value=10
    OsInfo[13].Key=sr
    OsInfo[13].Value=0
    OsInfo[14].Key=tmsi
    OsInfo[14].Value=27158
    OsInfo[15].Key=osinsty
    OsInfo[15].Value=2
    OsInfo[16].Key=iever
    OsInfo[16].Value=11.503.17763.0-11.0.125
    OsInfo[17].Key=portos
    OsInfo[17].Value=0
    OsInfo[18].Key=ram
    OsInfo[18].Value=57301
    OsInfo[19].Key=svolsz
    OsInfo[19].Value=929
    OsInfo[20].Key=wimbt
    OsInfo[20].Value=0
    OsInfo[21].Key=blddt
    OsInfo[21].Value=180914
    OsInfo[22].Key=bldtm
    OsInfo[22].Value=1434
    OsInfo[23].Key=bldbrch
    OsInfo[23].Value=rs5_release
    OsInfo[24].Key=bldchk
    OsInfo[24].Value=0
    OsInfo[25].Key=wpvermaj
    OsInfo[25].Value=0
    OsInfo[26].Key=wpvermin
    OsInfo[26].Value=0
    OsInfo[27].Key=wpbuildmaj
    OsInfo[27].Value=0
    OsInfo[28].Key=wpbuildmin
    OsInfo[28].Value=0
    OsInfo[29].Key=osver
    OsInfo[29].Value=10.0.17763.503.amd64fre.rs5_release.180914-1434
    OsInfo[30].Key=buildflightid
    OsInfo[31].Key=edition
    OsInfo[31].Value=ServerStandard
    OsInfo[32].Key=ring
    OsInfo[32].Value=Retail
    OsInfo[33].Key=expid
    OsInfo[34].Key=containerid
    OsInfo[35].Key=containertype
    OsInfo[36].Key=edu
    OsInfo[36].Value=0
    FriendlyEventName=Stopped working
    ConsentKey=BEX64
    AppName=IIS Worker Process
    AppPath=c:\windows\system32\inetsrv\w3wp.exe
    NsPartner=windows
    NsGroup=windows8
    ApplicationIdentity=E9EC6E123F811C94990CB1A4C48A79BA
    MetadataHash=809339209

  • Re: Exception Code c0000005 AFTER extension terminates

    Jun 05, 2019 07:39 AM|Able|LINK

    Hi richalgeni,

    According to your description,since iis  use w3wp.exe to solve the request ,this error means the w3wp.exe crash due to the iisapi_caddata.dll module.

    In logs ,“Faulting module name” refers to the component that causes the crash. So I suggest that Upgrading or repairing the related module could fix the issue.

    Here is the link I hope it could help you.

    https://techcommunity.microsoft.com/t5/IIS-Support-Blog/w3wp-exe-crash-Exception-code-0xc0000005/ba-p/334351

    Best Regards

    Able

    Please remember to click "Mark as Answer" the responses that resolved your issue.
    If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.
  • Re: Exception Code c0000005 AFTER extension terminates

    Jun 06, 2019 11:23 PM|richalgeni|LINK

    Ok, so I loaded DebugDiag 1.2, and now the problem has stopped occurring.

    I have no idea why. This thread can be closed.