Invalid Bus Driver

Several weeks ago we encountered with very interesting crash of one of our product’s processes. After analyzing the dump we found that exceptions were excited inside two threads simultaneously.


The first one roused up the debugger:

0355f0f0 7c3627e4 ntdll!RtlAllocateHeap+0x655                   cmp edi,dword ptr [eax+4] ds:0023:8851e6cc=???????? 0355f130 7c36280c msvcr71!_heap_alloc+0xe0 0355f138 7c362829 msvcr71!_nh_malloc+0x10 0355f144 7c3eb633 msvcr71!malloc+0xf 0355f154 7c3c1f0e msvcp71!operator new+0x21 0355f9cc 7c3c4f9e msvcp71!std::basic_string,std::allocator >::_Copy+0x73 0355f9e0 7c3c55df msvcp71!std::basic_string,std::allocator >::_Grow+0x22 0355f9fc 7c3c6752 msvcp71!std::basic_string,std::allocator >::assign+0x4e 0355fa10 00595239 msvcp71!std::basic_string,std::allocator >::basic_string,std::allocator >+0x20 0355fc4c 00595387 SCServer_dll71!_ConvertBinsToChars+0xb9 0355fdac 007335ea SCServer_dll71!TReadResourceHandler::HandleEvent+0x127 0355ff74 10046453 SCLib71!TReactor::Thread+0xda 0355ff80 7c36b381 ETL!TThread_::ThreadThunkFunction+0x23 0355ffb4 7c80b50b msvcr71!_threadstartex+0x6f 0355ffec 00000000 kernel32!BaseThreadStart+0x37

And the second one was pending:

0012e45c 7c90e9ab ntdll!KiFastSystemCallRet 0012e460 7c8633d5 ntdll!ZwWaitForMultipleObjects+0xc 0012e7a0 7c36e289 kernel32!UnhandledExceptionFilter+0x82d 0012e7bc 0040c860 msvcr71!_XcptFilter+0x15f 0012e7c8 7c363943 SCServer71!WinMainCRTStartup+0x1d7 0012e7f0 7c9037bf msvcr71!_except_handler3+0x61 0012e814 7c90378b ntdll!ExecuteHandler2+0x26 0012e8c4 7c90eafa ntdll!ExecuteHandler+0x24 0012e8c4 00409c1c ntdll!KiUserExceptionDispatcher+0xe 0012ebc4 7c1adc5b SCServer71!CMonitoringDlg::OnTimer+0x1c                   call dword ptr [edx+8] ds:0023:00000008=????????               0012ec54 7c1a9f01 mfc71!CWnd::OnWndMsg+0x46b 0012ec74 00422d16 mfc71!CWnd::WindowProc+0x22 […] 0012ef74 77d487eb user32!InternalCallWinProc+0x28 0012efdc 77d489a5 user32!UserCallWinProcCheckWow+0x150 0012f03c 77d4bccc user32!DispatchMessageWorker+0x306 0012f04c 7c1b1645 user32!DispatchMessageA+0xf 0012f05c 7c1ab833 mfc71!AfxInternalPumpMessage+0x3e 0012f080 7c1aeeed mfc71!CWnd::RunModalLoop+0xca 0012f0bc 00424726 mfc71!CDialog::DoModal+0xf3 0012f0f0 0040142b NSGuiCtl10!CNSGDialog::DoModal+0xc6 0012ff08 7c1ae5d0 SCServer71!CScServerApp::InitInstance+0x9b 0012ff18 0040c80e mfc71!AfxWinMain+0x47 0012ffc0 7c816d4f SCServer71!WinMainCRTStartup+0x185 0012fff0 00000000 kernel32!BaseProcessStart+0x23