Crash in parse_getattr() with line numbers
Posted by Anonymous on Wed 1st Nov 2023 21:30
raw | new post

1694: handle_getattr: Invalid session pointer 0xdddddddddddddddd
2298: handle_getattr: Invalid session pointer 0xdddddddddddddddd
1588: handle_getattr: Invalid session pointer 0xdddddddddddddddd
1fdc: ASSERTION 'state != NULL' in 'C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\open.c'/115 failed.
(1698.1fdc): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
nfsd!parse_getattr+0xfc:
00007ff6`9ee6402c 0fb78900050000  movzx   ecx,word ptr [rcx+500h] ds:00000000`00000500=????
0:015> kp
Child-SP          RetAddr           Call Site
00000013`3abfda00 00007ff6`9eeadbc8 nfsd!parse_getattr(unsigned char * buffer = 0x00000013`3abfdda8 "", unsigned int length = 0, struct __nfs41_upcall * upcall = 0x00000013`3abfee00)+0xfc
00000013`3abfdb50 00007ff6`9ee7d484 nfsd!upcall_parse(unsigned char * buffer = 0x00000013`3abfdda0 "???", unsigned int length = 8, struct __nfs41_upcall * upcall = 0x00000013`3abfee00)+0x358
00000013`3abfdcd0 00007ffe`73d34c7c nfsd!thread_main(void * args = 0x00007ff6`9eee6090)+0x144
00000013`3abffa20 00007ffe`9d927344 ucrtbased!thread_start<unsigned int (void * parameter = 0x00000170`62652020)+0x9c
00000013`3abffa80 00007ffe`9efc26b1 KERNEL32!BaseThreadInitThunk+0x14
00000013`3abffab0 00000000`00000000 ntdll!RtlUserThreadStart+0x21
0:015> dv
         buffer = 0x00000013`3abfdda8 ""
         length = 0
         upcall = 0x00000013`3abfee00
           args = 0x00000013`3abfee18
         status = 0n0
0:015> dt
0:015> l+s
  WARNING: Line information loading disabled
Source options are 4:
     4/s - List source code at prompt
0:015> 4/s
       ^ Syntax error in '4/s'
0:015> .lines -e
Line number information will be loaded
0:015> l+s
Source options are 4:
     4/s - List source code at prompt
0:015> kp
Child-SP          RetAddr           Call Site
00000013`3abfda00 00007ff6`9eeadbc8 nfsd!parse_getattr(unsigned char * buffer = 0x00000013`3abfdda8 "", unsigned int length = 0, struct __nfs41_upcall * upcall = 0x00000013`3abfee00)+0xfc [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapp
ing\ms-nfs41-client\daemon\getattr.c @ 75]
00000013`3abfdb50 00007ff6`9ee7d484 nfsd!upcall_parse(unsigned char * buffer = 0x00000013`3abfdda0 "???", unsigned int length = 8, struct __nfs41_upcall * upcall = 0x00000013`3abfee00)+0x358 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidm
apping\ms-nfs41-client\daemon\upcall.c @ 125]
00000013`3abfdcd0 00007ffe`73d34c7c nfsd!thread_main(void * args = 0x00007ff6`9eee6090)+0x144 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_daemon.c @ 112]
00000013`3abffa20 00007ffe`9d927344 ucrtbased!thread_start<unsigned int (void * parameter = 0x00000170`62652020)+0x9c [minkernel\crts\ucrt\src\appcrt\startup\thread.cpp @ 97]
00000013`3abffa80 00007ffe`9efc26b1 KERNEL32!BaseThreadInitThunk+0x14
00000013`3abffab0 00000000`00000000 ntdll!RtlUserThreadStart+0x21