Dump file understand the reason of the crash - Microsoft Community


hi, 

i have dump file crash caused ppt.

how can understand reason windbg?

i'm try understand root cause of crash following output of windbg (with !analyze -v command):

geturlpagedata2 (winhttp) failed: 12002.

dump_class: 2

dump_qualifier: 400

faulting_ip: 
chart!hrlenschartadvisor+3e07
000007fe`ccdef633 498b06          mov     rax,qword ptr [r14]

exception_record:  000000000027ec70 -- (.exr 0x27ec70)
exceptionaddress: 000007feccdef633 (chart!hrlenschartadvisor+0x0000000000003e07)
   exceptioncode: c0000005 (access violation)
  exceptionflags: 00000000
numberparameters: 2
   parameter[0]: 0000000000000000
   parameter[1]: 0000000000000000
attempt read address 0000000000000000

faulting_thread:  000032b0

process_name:  powerpnt.exe

error_code: (ntstatus) 0x80000003 - {exception}  breakpoint  a breakpoint has been reached.

exception_code: (hresult) 0x80000003 (2147483651) - 1 or more arguments invalid

exception_code_str:  80000003

watson_bkt_procstamp:  55ba17c4

watson_bkt_procver:  16.0.4266.1001

process_ver_product:  microsoft office 2016

watson_bkt_module:  unknown

watson_bkt_modver:  0.0.0.0

watson_bkt_modoffset:  0

watson_bkt_modstamp:  bbbbbbb4

build_version_string:  6.1.7601.23807 (win7sp1_ldr.170512-0600)

modlist_with_tschksum_hash:  0150e3cfa71d918e56fc6fe0db8b3ebeee090117

modlist_sha1_hash:  ed496eb8c4687796d1e29e73448e86e71b30d230

ntglobalflag:  400

process_bam_current_throttled: 0

process_bam_previous_throttled: 0

application_verifier_flags:  0

product_type:  1

suite_mask:  272

dump_flags:  3

dump_type:  3

missing_clr_symbol: 0

analysis_session_host:  xxxxxxxxxxxx

analysis_session_time:  08-30-2017 10:20:35.0844

analysis_version: 10.0.15063.468 amd64fre

managed_code: 1

managed_engine_module:  clr

managed_analysis_provider:  sos

context:  000000000027e780 -- (.cxr 0x27e780)
rax=000000000027eed8 rbx=000000003cfed438 rcx=000000000008008b
rdx=0000000000000002 rsi=00000000355e57c0 rdi=0000000000000000
rip=000007feccdef633 rsp=000000000027ee90 rbp=000000000027eef9
 r8=00000000000032b0  r9=000000003cd1f720 r10=0000000000000001
r11=000000000027f0d8 r12=0000000000000000 r13=0000000002b6a37d
r14=0000000000000000 r15=000000003d9bc460
iopl=0         nv ei pl nz na pe nc
cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
chart!hrlenschartadvisor+0x3e07:
000007fe`ccdef633 498b06          mov     rax,qword ptr [r14] ds:00000000`00000000=????????????????
resetting default scope

followup_ip: 
chart!hrlenschartadvisor+3e07
000007fe`ccdef633 498b06          mov     rax,qword ptr [r14]

read_address:  0000000000000000 

thread_attributes: 
additional_debug_text:  sos.dll not loaded managed code. analysis might incomplete

os_locale:  enu

problem_classes: 

    id:     [0n292]
    type:   [@access_violation]
    class:  addendum
    scope:  bucket_id
    name:   omit
    data:   omit
    pid:    [0x377c]
    tid:    [0x32b0]
    frame:  [0] : unknown!unknown

    id:     [0n264]
    type:   [invalid_pointer_read]
    class:  primary
    scope:  default_bucket_id (failure bucket id prefix)
            bucket_id
    name:   add
    data:   omit
    pid:    [0x377c]
    tid:    [0x32b0]
    frame:  [0] : unknown!unknown

    id:     [0n234]
    type:   [nosos]
    class:  addendum
    scope:  default_bucket_id (failure bucket id prefix)
            bucket_id
    name:   add
    data:   omit
    pid:    [unspecified]
    tid:    [unspecified]
    frame:  [0]

bugcheck_str:  application_fault_invalid_pointer_read_nosos

default_bucket_id:  invalid_pointer_read_nosos

primary_problem_class:  application_fault

ip_on_heap:  000000006efc20f7
fault address in not in loaded module, please check build's rebase
log @ <releasedir>\bin\build_logs\timebuild\ntrebase.log module may
contain address if loaded.

last_control_transfer:  from 000007feccd758b3 000007feccdef633

stack_text:  
00000000`0027ee90 000007fe`ccd758b3 : 00000000`00000000 00000000`3df86b78 00000000`00000000 00000000`02cf74e0 : chart!hrlenschartadvisor+0x3e07
00000000`0027ef60 000007fe`cce4fa6a : 00000000`00000001 00000000`3a2616f0 00000000`02cf74e0 00000000`76cb1a0a : chart!hrnewsparklinemanager+0x3c33
00000000`0027efa0 000007fe`c5145b17 : 00000000`3f716f40 00000000`00000001 00000000`00000001 000007fe`de589b53 : chart!chartapi::iapichart::hrcreateinstance+0x1111e
00000000`0027efd0 000007fe`c5145a67 : 00000000`3cd1f720 00000000`00000001 00000000`00435601 00000000`00000001 : ppcore!ppmain+0x3a8b7
00000000`0027f020 000007fe`de5a0d0f : 00000000`0045c800 00000000`3cd1f720 00000000`00000000 00000000`02cbbd40 : ppcore!ppmain+0x3a807
00000000`0027f0e0 000007fe`de5a16fd : 00000000`02cbbd40 00000000`00000000 00000000`00000000 00000000`00000001 : mso20win32client!ordinal899+0xcef
00000000`0027f130 000007fe`de59cb83 : 00000000`00000001 00000000`0045c800 00000000`00000001 00000000`02cf73b0 : mso20win32client!ordinal899+0x16dd
00000000`0027f160 000007fe`dd016131 : 00000000`3cd1f720 00000000`0045c8d0 00000000`00000000 000007fe`de0d2b7b : mso20win32client!ordinal842+0xa7
00000000`0027f1a0 000007fe`de127e2c : 00000000`02cf8e08 00000000`00000000 00000000`02cf8d70 00000000`02cf8e01 : mso99lwin32client+0x6131
00000000`0027f1d0 000007fe`de128131 : 00000000`0045c8d0 00000000`02b6a37d 00000000`00000000 000007fe`dbd50e44 : mso30win32client!ordinal1059+0xf8
00000000`0027f270 000007fe`de127be9 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`0027f408 : mso30win32client!ordinal852+0xfd
00000000`0027f2b0 000007fe`dd07549c : 00000000`00000000 000007fe`de595da7 00000000`00000000 00000000`0027f408 : mso30win32client!ordinal1367+0x29
00000000`0027f2e0 000007fe`c52bfb5e : 00000000`000001f6 00000000`00000000 00000000`00000001 000007fe`c610ac00 : mso99lwin32client+0x6549c
00000000`0027f310 000007fe`c52bfd72 : 00000000`0027f408 00000000`0027f408 00000000`00000000 000007fe`c52bf6ff : ppcore!ppmain+0x1b48fe
00000000`0027f340 000007fe`c52bf601 : 00000000`00000000 00000000`00000000 00000000`00000000 000007fe`c610ac00 : ppcore!ppmain+0x1b4b12
00000000`0027f390 000007fe`c52bf5a4 : 00000000`00000000 00000000`00000000 00000000`0027f388 00000000`00000000 : ppcore!ppmain+0x1b43a1
00000000`0027f3c0 000007fe`c510b2b7 : 00000000`0027f6a0 00000000`00393ef2 00000000`00000000 00000000`00000037 : ppcore!ppmain+0x1b4344
00000000`0027f670 00000001`3f4918bc : 00000000`00000000 00000000`00010001 00000000`00000000 00000000`00000000 : ppcore!ppmain+0x57
00000000`0027f730 00000001`3f491889 : 00000000`00000000 00000001`3f494098 00000000`00000000 00000000`00000000 : powerpnt+0x18bc
00000000`0027f760 00000000`76ca59cd : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : powerpnt+0x1889
00000000`0027f7a0 00000000`76dda561 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!basethreadinitthunk+0xd
00000000`0027f7d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!rtluserthreadstart+0x1d


thread_sha1_hash_mod_func:  f16560ecd94d1e84c4c87eecb6d3d7235b971564

thread_sha1_hash_mod_func_offset:  d7197ad8adca46011c6e077a5fa76b709b8cc943

thread_sha1_hash_mod:  9837533322f30d964b4c865cce15fea5874db483

fault_instr_code:  44068b49

symbol_stack_index:  0

symbol_name:  chart!hrlenschartadvisor+3e07

followup_name:  machineowner

module_name: chart

image_name:  chart.dll

debug_flr_image_timestamp:  55ba184b

stack_command:  .cxr 0x27e780 ; kb

failure_bucket_id:  invalid_pointer_read_nosos_80000003_chart.dll!hrlenschartadvisor

bucket_id:  x64_application_fault_invalid_pointer_read_nosos_chart!hrlenschartadvisor+3e07

failure_exception_code:  80000003

failure_image_name:  chart.dll

bucket_id_image_str:  chart.dll

failure_module_name:  chart

bucket_id_module_str:  chart

failure_function_name:  hrlenschartadvisor

bucket_id_function_str:  hrlenschartadvisor

bucket_id_offset:  3e07

bucket_id_modtimedatestamp:  55ba184b

bucket_id_modchecksum:  af8ea1

bucket_id_modver_str:  16.0.4266.1001

bucket_id_prefix_str:  x64_application_fault_invalid_pointer_read_nosos_

failure_problem_class:  application_fault

failure_symbol_name:  chart.dll!hrlenschartadvisor

watson_stageone_url:  http://watson.microsoft.com/stageone/powerpnt.exe/16.0.4266.1001/55ba17c4/unknown/0.0.0.0/bbbbbbb4/80000003/00000000.htm?retriage=1

target_time:  2017-08-07t06:16:16.000z

osbuild:  7601

osservicepack:  23807

servicepack_number: 0

os_revision: 0

osplatform_type:  x64

osname:  windows 7

osedition:  windows 7 winnt (service pack 1) singleuserts

user_lcid:  0

osbuild_timestamp:  2017-05-12 21:25:23

builddatestamp_str:  170512-0600

buildlab_str:  win7sp1_ldr

buildosver_str:  6.1.7601.23807

analysis_session_elapsed_time:  880e

analysis_source:  um

failure_id_hash_string:  um:invalid_pointer_read_nosos_80000003_chart.dll!hrlenschartadvisor

failure_id_hash:  {c228617f-fd14-c714-a290-11c19c6abb79}

followup:     machineowner
---------

***post moved moderator appropriate forum category.***

hello,

as per dump file provided us, issue can due corrupted updates when pc checked pending updates. troubleshoot concern using powerpoint application, kindly try methods provided below , let know if issue persists:

method 1: safe mode
starting microsoft office windows application in office safe mode can allow safely use when has encountered issues. refer support article on how to: open office apps in safe mode on windows pc.

method 2: repair office

if office application such word or powerpoint isn’t working correctly, restarting resolve issue. if doesn’t work, can try repairing it. refer support article on how to: repair office application.

method 3: check updates

keeping office up-to-date ensures have latest security updates , fixes. refer support article on how to: install office updates.

let know if methods provided above help.



Office / PowerPoint / Windows other / Office 2016



Comments

Popular posts from this blog

Can't Sign-in to OneDrive - Microsoft Community

Shared mailbox permissions - Microsoft Community

Outlook 2016 for Mac - Multiple Issues, Error 17884 - Microsoft Community