Microsoft (R) Windows Debugger Version 6.8.0004.0 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [E:\ul\user.dmp] User Mini Dump File: Only registers, stack and portions of memory are available Comment: 'Dr. Watson generated MiniDump' Symbol search path is: srv*e:\winstuff\symbols\*http://msdl.microsoft.com/download/symbols Executable search path is: Windows XP Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible Product: WinNt, suite: SingleUserTS Debug session time: Tue Dec 18 21:35:35.000 2007 (GMT-8) System Uptime: not available Process Uptime: 0 days 0:00:08.000 ..................................................................................... This dump file has an exception of interest stored in it. The stored exception information can be accessed via .ecxr. (164.a1c): Access violation - code c0000005 (first/second chance not available) eax=00000000 ebx=00000000 ecx=0294966c edx=02949794 esi=001c106c edi=00000001 eip=7e21b5ce esp=0013e6b4 ebp=0013e6c0 iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202 urlmon!CMimeFt::ReportData+0x99: 7e21b5ce 399ee0120000 cmp dword ptr [esi+12E0h],ebx ds:0023:001c234c=???????? 0:000> !analyze -v ******************************************************************************* * * * Exception Analysis * * * ******************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: kernel32!pNlsUserInfo *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: kernel32!pNlsUserInfo *** *** *** ************************************************************************* FAULTING_IP: urlmon!CMimeFt::ReportData+99 7e21b5ce 399ee0120000 cmp dword ptr [esi+12E0h],ebx EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff) ExceptionAddress: 7e21b5ce (urlmon!CMimeFt::ReportData+0x00000099) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 00000000 Parameter[1]: 001c234c Attempt to read from address 001c234c DEFAULT_BUCKET_ID: APPLICATION_FAULT PROCESS_NAME: iexplore.exe ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s". READ_ADDRESS: 001c234c BUGCHECK_STR: ACCESS_VIOLATION LAST_CONTROL_TRANSFER: from 7e1f3fd9 to 7e21b5ce STACK_TEXT: 0013e6c0 7e1f3fd9 001c106c 00000011 00000001 urlmon!CMimeFt::ReportData+0x99 0013e6d8 7e2150f2 0294dff8 00000011 00000001 urlmon!CINetEmbdFilter::ReportData+0x1a 0013e808 7e203342 00000000 02960a48 7e1fc236 urlmon!CINet::INetReadDirect+0x11f 0013e814 7e1fc236 00000000 02960a48 020122d0 urlmon!CINet::INetRead+0x24 0013e824 7e1fc1e6 001bec50 02960a48 0013e848 urlmon!CINet::INetQueryInfo+0xcd 0013e834 7e1fcd5c 00000005 80004005 02960a48 urlmon!CINet::OnINetInternal+0xb6 0013e848 7e1fcd32 02960a48 001bec50 0013e868 urlmon!CINet::MyContinue+0x21 0013e858 7e1fcb8c 001b1110 001bec50 0013e880 urlmon!CINetProtImpl::Continue+0x13 0013e868 7e1fcb69 0294dff8 001bec50 7ded5e88 urlmon!CINetEmbdFilter::Continue+0x14 0013e880 7e1fb4df 02960a48 001bec50 0013e8a4 urlmon!CINet::Continue+0x28 0013e890 7e21301c 029497e8 001bec50 0203fca0 urlmon!COInetProt::Continue+0x14 0013e8a4 7de84e02 02949644 001bec50 0203fca0 urlmon!CTransaction::Continue+0x29 0013e8b8 7dd69d68 001bec50 0013e91c 0201781c mshtml!CDwnBindData::OnDwnDocCallback+0x1a 0013e8dc 7de8cf1f 0013e8f4 7dcc9cfc 02012260 mshtml!CDwnDoc::OnDocThreadCallback+0x62 0013e8e4 7dcc9cfc 02012260 02012260 0013e928 mshtml!CDwnDoc::OnDocThreadCallback+0xd 0013e8f4 7dc9cba1 02012260 00000000 00000000 mshtml!CDwnChan::OnMethodCall+0x19 0013e928 7dc989b7 0013eac4 7dc988d2 00000000 mshtml!GlobalWndOnMethodCall+0x66 0013ea5c 7e418734 0025053a 00008002 00000000 mshtml!GlobalWndProc+0x1e2 0013ea88 7e418816 7dc988d2 0025053a 00008002 user32!InternalCallWinProc+0x28 0013eaf0 7e4189cd 00000000 7dc988d2 0025053a user32!UserCallWinProcCheckWow+0x150 0013eb50 7e418a10 0013eb90 00000000 0013eb78 user32!DispatchMessageWorker+0x306 0013eb60 75f9d795 0013eb90 00000000 00153d00 user32!DispatchMessageW+0xf 0013eb78 75fa51b2 0013eb90 0013ee98 00000000 browseui!TimedDispatchMessage+0x33 0013edd8 75fa5325 00162010 0013ee98 00162010 browseui!BrowserThreadProc+0x336 0013ee6c 75fa55ed 00162010 00162010 00000000 browseui!BrowserProtectedThreadProc+0x50 0013fef0 7e318cbe 00162010 00000000 00000000 browseui!SHOpenFolderWindow+0x22c 0013ff10 00402372 001523ba 00000001 01eadf4c shdocvw!IEWinMain+0x129 0013ff60 00402444 00400000 00000000 001523ba iexplore!WinMainT+0x2de 0013ffc0 7c816fd7 01eadf4c 00000018 7ffdf000 iexplore!_ModuleEntry+0x99 0013fff0 00000000 00402451 00000000 00000000 kernel32!BaseProcessStart+0x23 STACK_COMMAND: ~0s; .ecxr ; kb FAULTING_THREAD: 00000a1c FOLLOWUP_IP: urlmon!CMimeFt::ReportData+99 7e21b5ce 399ee0120000 cmp dword ptr [esi+12E0h],ebx SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: urlmon!CMimeFt::ReportData+99 FOLLOWUP_NAME: MachineOwner MODULE_NAME: urlmon IMAGE_NAME: urlmon.dll DEBUG_FLR_IMAGE_TIMESTAMP: 470dbb54 BUCKET_ID: ACCESS_VIOLATION_urlmon!CMimeFt::ReportData+99 FAILURE_BUCKET_ID: urlmon.dll!CMimeFt::ReportData_c0000005_APPLICATION_FAULT Followup: MachineOwner ---------