Question

  • Creator
    Topic
  • #2246088

    Dr Watson crash log: ERROR: Symbol file could not be found.

    Locked

    by marick111 ·

    Hello, I am running a game application on my Windows 2003 x64 dedicated server, but it suddenly crashes after some minutes or hours.
    I’ve checked Dr Watson and at some parts it says “ERROR: Symbol file could not be found.”
    I don’t know for sure if this is what is causing the application crash, so I’ll be very thankful for any idea!
    Here’s the full Dr Watson log, in case that someone wants to see:

    Application exception occurred:
    App: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\TheForgottenServer.exe (pid=680)
    When: 12/24/2010 @ 09:40:33.187
    Exception number: c0000005 (access violation)

    *—-> System Information <----* Computer Name: LIMESTON-0BCBD9 User Name: admin Terminal Session Id: 1 Number of Processors: 2 Processor Type: EM64T Family 6 Model 15 Stepping 11 Windows Version: 5.2 Current Build: 3790 Service Pack: 2 Current Type: Multiprocessor Free Registered Organization: Limestone Networks, Inc. Registered Owner: Systems Administrator *----> Task List <----* 0 System Process 4 System 336 System 384 System 408 System 456 System 468 System 620 System 712 System 784 System 820 System 836 System 988 System 1020 System 1172 System 1192 FileZilla Server.exe 1232 System 1288 System 1876 System 2184 System 2212 System 2348 System 2500 System 2656 System 2740 RTHDCPL.EXE 2836 System 2916 ApacheMonitor.exe 3012 ctfmon.exe 3016 FileZilla Server Interface.exe 2872 System 1892 System 2300 System 2108 httpd.exe 2748 System 680 TheForgottenServer.exe 2864 System 2860 TheForgottenServer.exe 3044 System 2824 CryingDamson.exe 2772 System 1904 CryingDamson.exe 2876 iexplore.exe 876 iexplore.exe 2892 httpd.exe 2164 drwtsn32.exe *----> Module List <----* 0000000000400000 - 0000000000921000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\TheForgottenServer.exe 0000000000be0000 - 0000000000ccf000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\libxml2.dll 0000000000cd0000 - 0000000000daa000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\iconv.dll 0000000010000000 - 00000000101ff000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\LIBMYSQL.dll 000000005f270000 - 000000005f2ca000: C:\WINDOWS\system32\hnetcfg.dll 0000000061b80000 - 0000000061b9c000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\zlib1.dll 0000000063080000 - 00000000631a8000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\libeay32.dll 0000000066380000 - 00000000664a6000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\libsqlite3-0.dll 0000000068000000 - 0000000068035000: C:\WINDOWS\system32\rsaenh.dll 000000006e940000 - 000000006e950000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\libgcc_s_dw2-1.dll 0000000071ae0000 - 0000000071ae8000: C:\WINDOWS\System32\wshtcpip.dll 0000000071bb0000 - 0000000071bb9000: C:\WINDOWS\system32\WSOCK32.DLL 0000000071bf0000 - 0000000071bf8000: C:\WINDOWS\system32\WS2HELP.dll 0000000071c00000 - 0000000071c17000: C:\WINDOWS\system32\WS2_32.dll 0000000076b70000 - 0000000076b7b000: C:\WINDOWS\system32\PSAPI.DLL 0000000076ed0000 - 0000000076efa000: C:\WINDOWS\system32\DNSAPI.dll 0000000076f10000 - 0000000076f3e000: C:\WINDOWS\syswow64\WLDAP32.dll 0000000076f70000 - 0000000076f77000: C:\WINDOWS\System32\winrnr.dll 0000000076f80000 - 0000000076f85000: C:\WINDOWS\system32\rasadhlp.dll 0000000077670000 - 00000000777a9000: C:\WINDOWS\syswow64\ole32.dll 0000000077ba0000 - 0000000077bfa000: C:\WINDOWS\syswow64\msvcrt.dll 000000007d1e0000 - 000000007d27c000: C:\WINDOWS\syswow64\ADVAPI32.DLL 000000007d4c0000 - 000000007d5f0000: C:\WINDOWS\syswow64\kernel32.dll 000000007d600000 - 000000007d6f0000: C:\WINDOWS\system32\ntdll.dll 000000007d800000 - 000000007d890000: C:\WINDOWS\syswow64\GDI32.dll 000000007d8d0000 - 000000007d920000: C:\WINDOWS\syswow64\Secur32.dll 000000007d930000 - 000000007da00000: C:\WINDOWS\syswow64\USER32.dll 000000007da20000 - 000000007db00000: C:\WINDOWS\syswow64\RPCRT4.dll 000000007db30000 - 000000007dbb0000: C:\WINDOWS\system32\MSWSOCK.dll 000000007dee0000 - 000000007df40000: C:\WINDOWS\system32\IMM32.DLL *----> State Dump for Thread Id 0xb28 <----* eax=00000000 ebx=024f4378 ecx=00000000 edx=00000000 esi=00000001 edi=00000001 eip=7d61c8be esp=00b2fc50 ebp=00b2fc78 iopl=0 nv up ei pl nz na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll - function: ntdll!ZwRemoveIoCompletion 7d61c891 b805000000 mov eax,0x5 7d61c896 b91a000000 mov ecx,0x1a 7d61c89b 8d542404 lea edx,[esp+0x4] 7d61c89f 64ff15c0000000 call dword ptr fs:[000000c0] 7d61c8a6 c22400 ret 0x24 ntdll!ZwRemoveIoCompletion: 7d61c8a9 b806000000 mov eax,0x6 7d61c8ae b91c000000 mov ecx,0x1c 7d61c8b3 8d542404 lea edx,[esp+0x4] 7d61c8b7 64ff15c0000000 call dword ptr fs:[000000c0] 7d61c8be c21400 ret 0x14 ntdll!NtReleaseSemaphore: 7d61c8c1 b807000000 mov eax,0x7 7d61c8c6 b90c000000 mov ecx,0xc 7d61c8cb 8d542404 lea edx,[esp+0x4] 7d61c8cf 64ff15c0000000 call dword ptr fs:[000000c0] 7d61c8d6 c20c00 ret 0xc ntdll!ZwReplyWaitReceivePort: 7d61c8d9 b808000000 mov eax,0x8 7d61c8de 33c9 xor ecx,ecx 7d61c8e0 8d542404 lea edx,[esp+0x4] *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\TheForgottenServer.exe - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\syswow64\kernel32.dll - ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 00b2fc78 00635e65 00000328 00b2fcfc 00b2fcf8 ntdll!ZwRemoveIoCompletion+0x15 00b2fd18 0055ed59 024f4378 00000001 00b2fd58 TheForgottenServer!luaopen_base+0x91841 00b2fd88 0051a59c 00b2fde0 007d8800 00000006 TheForgottenServer+0x15ed59 00b2ff48 004010b6 7efdf000 00000000 00b2ffa0 TheForgottenServer+0x11a59c 00b2ffa0 00401148 00000001 00000000 7d61c91b TheForgottenServer+0x10b6 00b2ffc0 7d4e7d42 00000000 00000000 7efdf000 TheForgottenServer+0x1148 00b2fff0 00000000 00401130 00000000 000000aa kernel32!BaseProcessInitPostImport+0x8d *----> Raw Stack Dump <----* 0000000000b2fc50 f4 66 50 7d 28 03 00 00 - f8 fc b2 00 90 fc b2 00 .fP}(........... 0000000000b2fc60 70 fc b2 00 68 fc b2 00 - c0 b4 b3 ff ff ff ff ff p...h........... 0000000000b2fc70 78 43 4f 02 ff ff ff ff - 18 fd b2 00 65 5e 63 00 xCO.........e^c. 0000000000b2fc80 28 03 00 00 fc fc b2 00 - f8 fc b2 00 f4 fc b2 00 (............... 0000000000b2fc90 f4 01 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000000b2fca0 00 00 00 00 00 00 00 00 - 00 00 00 00 c0 43 4f 02 .............CO. 0000000000b2fcb0 cc 43 4f 02 98 43 4f 02 - a4 43 4f 02 a4 43 4f 02 .CO..CO..CO..CO. 0000000000b2fcc0 00 00 00 00 38 47 7b 01 - a0 43 4f 02 28 0b 00 00 ....8G{..CO.(... 0000000000b2fcd0 a0 43 4f 02 40 4c 7b 01 - 20 a1 07 00 00 00 00 00 .CO.@L{. ....... 0000000000b2fce0 80 c3 c9 01 00 00 00 00 - 64 48 91 26 a4 43 4f 02 ........dH.&.CO. 0000000000b2fcf0 01 48 91 26 00 00 00 00 - 00 00 00 00 00 00 00 00 .H.&............ 0000000000b2fd00 a0 5e 7b 00 6e 00 00 00 - 00 00 00 00 78 43 4f 02 .^{.n.......xCO. 0000000000b2fd10 58 fd b2 00 7d c6 00 00 - 88 fd b2 00 59 ed 55 00 X...}.......Y.U. 0000000000b2fd20 78 43 4f 02 01 00 00 00 - 58 fd b2 00 20 5a 7b 00 xCO.....X... Z{. 0000000000b2fd30 24 5a 7b 00 06 00 00 00 - 00 00 00 00 e6 e7 74 0a $Z{...........t. 0000000000b2fd40 a0 5e 7b 00 78 43 4f 02 - 00 00 00 00 20 5a 7b 00 .^{.xCO..... Z{. 0000000000b2fd50 00 1f 0a fa ff ff ff ff - 00 00 00 00 a8 8b 8d 00 ................ 0000000000b2fd60 a0 5e 7b 00 b4 fd b2 00 - 88 fd b2 00 ac 34 75 00 .^{..........4u. 0000000000b2fd70 20 5a 7b 00 0a 00 00 00 - 0f 00 00 00 04 3e 8d 00 Z{..........>..
    0000000000b2fd80 30 ff b2 00 b4 fd b2 00 – 48 ff b2 00 9c a5 51 00 0…….H…..Q.

    *—-> State Dump for Thread Id 0xae4 <----* eax=28200020 ebx=199e2b60 ecx=111e22a4 edx=2820002c esi=2692c000 edi=351494c0 eip=006fa6b5 esp=02bbfb7c ebp=02bbfba4 iopl=0 nv up ei pl nz na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010202 function: TheForgottenServer!luaopen_base 006fa6a3 5e pop esi 006fa6a4 5f pop edi 006fa6a5 c9 leave 006fa6a6 c3 ret 006fa6a7 90 nop 006fa6a8 8d730c lea esi,[ebx+0xc] 006fa6ab 8d500c lea edx,[eax+0xc] 006fa6ae 83f901 cmp ecx,0x1 006fa6b1 7409 jz TheForgottenServer!luaopen_base+0x156098 (006fa6bc) 006fa6b3 89d7 mov edi,edx FAULT ->006fa6b5 f3a4 rep movsb ds:2692c000=?? es:351494c0=00
    006fa6b7 8b0b mov ecx,[ebx]
    006fa6b9 ebd5 jmp TheForgottenServer!luaopen_base+0x15606c (006fa690)
    006fa6bb 90 nop
    006fa6bc 8a4b0c mov cl,[ebx+0xc]
    006fa6bf 88480c mov [eax+0xc],cl
    006fa6c2 8b0b mov ecx,[ebx]
    006fa6c4 ebca jmp TheForgottenServer!luaopen_base+0x15606c (006fa690)
    006fa6c6 90 nop
    006fa6c7 90 nop
    006fa6c8 55 push ebp

    *—-> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\syswow64\msvcrt.dll - ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 02bbfba4 006fbb3f 199e2b60 02bbfbcb 00000000 TheForgottenServer!luaopen_base+0x156091 02bbfbd4 00567e3f 02bbfc2c 2583872c 02bbfca4 TheForgottenServer!luaopen_base+0x15751b 02bbfc84 0046d330 1231f820 1205d010 2583872c TheForgottenServer+0x167e3f 02bbfd34 0064259f 008d4120 1000266f 00000000 TheForgottenServer+0x6d330 02bbfd84 00620def 2627afcc 7d61f218 7d61f610 TheForgottenServer!luaopen_base+0x9df7b 02bbfde4 00453ca8 2627afb8 02bbfe84 02bbff1c TheForgottenServer!luaopen_base+0x7c7cb 02bbff44 0063d4d6 007b5de0 00000000 024f4aa0 TheForgottenServer+0x53ca8 02bbff64 005b14b7 002d6738 002d6738 02bbffa8 TheForgottenServer!luaopen_base+0x98eb2 02bbff84 77bcb530 002d6738 00000000 00000000 TheForgottenServer!luaopen_base+0xce93 02bbffb8 7d4dfe37 024f4a08 00000000 00000000 msvcrt!endthreadex+0xa3 02bbffec 00000000 77bcb4bc 024f4a08 00000000 kernel32!FlsSetValue+0x13c *----> Raw Stack Dump <----* 0000000002bbfb7c 38 b7 12 1e 0a 00 00 00 - cb fb bb 02 00 3f 6d 00 8............?m. 0000000002bbfb8c 70 fb bb 02 22 00 00 20 - a8 ff bb 02 60 2b 9e 19 p...".. ....`+.. 0000000002bbfb9c 10 d0 05 12 20 41 8d 00 - d4 fb bb 02 3f bb 6f 00 .... A......?.o. 0000000002bbfbac 60 2b 9e 19 cb fb bb 02 - 00 00 00 00 01 00 00 00 `+.............. 0000000002bbfbbc 8c 98 42 00 00 00 00 00 - 08 b0 90 13 ff ff ff ff ..B............. 0000000002bbfbcc 90 86 c7 02 2c fc bb 02 - 84 fc bb 02 3f 7e 56 00 ....,.......?~V. 0000000002bbfbdc 2c fc bb 02 2c 87 83 25 - a4 fc bb 02 7e 00 fe ff ,...,..%....~... 0000000002bbfbec 58 23 63 12 00 00 00 00 - 01 4e e2 11 00 6b 2d 12 X#c......N...k-. 0000000002bbfbfc 0c fc bb 02 01 00 00 00 - 65 f6 61 7d ff ff ff ff ........e.a}.... 0000000002bbfc0c b0 57 7b 00 3c 48 09 1b - b0 57 7b 00 6c 2b 9e 19 .W{. State Dump for Thread Id 0x880 <----* eax=00000000 ebx=0afffc7c ecx=00000000 edx=00000000 esi=0afffc84 edi=7efde000 eip=7d61d06f esp=0afffc34 ebp=0afffcd8 iopl=0 nv up ei pl nz na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 function: ntdll!NtWaitForMultipleObjects 7d61d042 b857000000 mov eax,0x57 7d61d047 b918000000 mov ecx,0x18 7d61d04c 8d542404 lea edx,[esp+0x4] 7d61d050 64ff15c0000000 call dword ptr fs:[000000c0] 7d61d057 c20400 ret 0x4 ntdll!NtWaitForMultipleObjects: 7d61d05a b858000000 mov eax,0x58 7d61d05f b91d000000 mov ecx,0x1d 7d61d064 8d542404 lea edx,[esp+0x4] 7d61d068 64ff15c0000000 call dword ptr fs:[000000c0] 7d61d06f c21400 ret 0x14 ntdll!ZwSetInformationObject: 7d61d072 b859000000 mov eax,0x59 7d61d077 33c9 xor ecx,ecx 7d61d079 8d542404 lea edx,[esp+0x4] 7d61d07d 64ff15c0000000 call dword ptr fs:[000000c0] 7d61d084 c21000 ret 0x10 7d61d087 8d4900 lea ecx,[ecx] ntdll!NtCancelIoFile: 7d61d08a b85a000000 mov eax,0x5a 7d61d08f 33c9 xor ecx,ecx *----> Stack Back Trace <----* ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 0afffcd8 7d4e3ea6 00000003 0afffda0 00000000 ntdll!NtWaitForMultipleObjects+0x15 0afffcf4 005b017a 00000003 0afffda0 00000000 kernel32!WaitForMultipleObjects+0x18 0afffe04 0055b6d2 00000214 035330d8 00000000 TheForgottenServer!luaopen_base+0xbb56 0affff44 0063d4d6 007b6460 00000000 13725f70 TheForgottenServer+0x15b6d2 0affff64 005b14b7 002dad90 002dad90 0affffa8 TheForgottenServer!luaopen_base+0x98eb2 0affff84 77bcb530 002dad90 00000000 00000000 TheForgottenServer!luaopen_base+0xce93 0affffb8 7d4dfe37 13674c10 00000000 00000000 msvcrt!endthreadex+0xa3 0affffec 00000000 77bcb4bc 13674c10 00000000 kernel32!FlsSetValue+0x13c *----> Raw Stack Dump <----* 000000000afffc34 84 28 4e 7d 03 00 00 00 - 7c fc ff 0a 01 00 00 00 .(N}....|....... 000000000afffc44 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000afffc54 03 00 00 00 24 00 00 00 - 01 00 00 00 00 00 00 00 ....$........... 000000000afffc64 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000afffc74 00 00 00 00 00 00 00 00 - 14 02 00 00 70 02 00 00 ............p... 000000000afffc84 68 01 00 00 c4 0b 00 00 - 10 27 00 00 17 00 00 00 h........'...... 000000000afffc94 ed 48 02 00 cc fc ff 0a - a5 7e 62 7d ed 48 02 00 .H.......~b}.H.. 000000000afffca4 00 e0 fd 7e ec fc ff 0a - 00 00 00 00 7c fc ff 0a ...~........|... 000000000afffcb4 00 00 00 00 64 68 1a 25 - 03 00 00 00 4c fc ff 0a ....dh.%....L... 000000000afffcc4 aa 38 53 7d a8 ff ff 0a - e0 89 4d 7d 80 29 4e 7d .8S}......M}.)N} 000000000afffcd4 00 00 00 00 f4 fc ff 0a - a6 3e 4e 7d 03 00 00 00 .........>N}….
    000000000afffce4 a0 fd ff 0a 00 00 00 00 – ff ff ff ff 00 00 00 00 …………….
    000000000afffcf4 04 fe ff 0a 7a 01 5b 00 – 03 00 00 00 a0 fd ff 0a ….z.[………
    000000000afffd04 00 00 00 00 ff ff ff ff – 00 00 00 00 00 00 00 00 …………….
    000000000afffd14 a4 fd ff 0a 62 d8 63 00 – 80 4a e5 f4 80 a3 cb 01 ….b.c..J……
    000000000afffd24 90 fd ff 0a a0 fd ff 0a – ff ff ff ff 00 c0 51 12 …………..Q.
    000000000afffd34 01 00 00 00 00 00 00 00 – 03 00 00 01 02 00 00 00 …………….
    000000000afffd44 00 00 00 00 5c 01 4f 02 – d8 30 53 03 00 00 00 00 ….\.O..0S…..
    000000000afffd54 00 00 00 00 00 00 00 00 – 00 00 4f 02 00 00 00 00 ……….O…..
    000000000afffd64 64 88 a0 53 67 be f1 02 – 88 64 7b 00 00 00 00 80 d..Sg….d{…..

    Thank you all!

All Answers

  • Author
    Replies
    • #2879162

      Clarifications

      by marick111 ·

      In reply to Dr Watson crash log: ERROR: Symbol file could not be found.

      Clarifications

    • #2879159

      Was this working properly at one time, or is this a new install?

      by robo_dev ·

      In reply to Dr Watson crash log: ERROR: Symbol file could not be found.

      In general, symbol file errors are simply that the debugger is not happy, not an indication about the program itself.

      The fault shown in the above file is the ‘access violation’, which is a generic way to say that a program is trying to write to a memory area which is off-limits.

      http://www.symantec.com/connect/downloads/memory-dump-and-analysis

      In order to gain a little more info about the DR Watson file, the Micorosft Debugging Tools can help:
      http://www.microsoft.com/whdc/devtools/debugging/default.mspx

      At a high level, it could be many things:

      – malware or virus that has modified a DLL or changed where it’s loaded in memory. If there is a function of the program that is called only every x number of minutes or hours, it may crash the app

      – a program memory leak that is eating up the free stack memory; a program that crashes after a certain period of time is the classic case of a memory leak.

      Sometimes memory leaks are observable because you see system resources declining, yet no new processes are being spawned.

      Often you can just ‘work around’ memory leaks by killing processes you don’t need and by doing everything to free up resources. Kinda like dumping excess weight to keep the plane flying.

      For example, in your DR Watson file, it appears that two instances of IE are running, as well as an instance of the FileZilla server, and what appears to be Apache web server. Close all that stuff, and see if your app is happier. if it’s got a nasty memory leak, it will run longer with more free memory.

Viewing 1 reply thread