BrGuestSvr crasing @ 3.0.0.3204

windbg.txt

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\ProgramData\Bromium\vSentry\Logs\Stage2Image0001_BrGuestSvr.exe-20150904-021527.091_wer-1848.dmp]
User Mini Dump File with Full Memory: Only application data is available

WARNING: Inaccessible path: 'C:\code\vSentry\out\DEBUG_win7-64bit\bin'
Symbol search path is: SRV*C:\symcache*\\files.us.bromium.net\public\symsrv;SRV*C:\symcache*http://msdl.microsoft.com/download/symbols;SRV*C:\symcache*\\files.uk.bromium.net\public\symsrv;C:\code\vSentry\out\DEBUG_win7-64bit\servers;C:\code\vSentry\uxen\xen\dist\windows\debug;C:\symbols;SRV*C:\symcache*http://symbols.mozilla.org/firefox;C:\code\vSentry\uxen\xen\dist\windows;C:\code\vSentry\out\DEBUG_win7-64bit\bin
Executable search path is: 
Windows 7 Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Fri Sep  4 02:15:25.000 2015 (UTC - 7:00)
System Uptime: 0 days 0:01:01.077
Process Uptime: 0 days 0:00:48.000
................................................................
............
Loading unloaded module list
..
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(738.750): Access violation - code c0000005 (first/second chance not available)
ntdll!ZwWaitForMultipleObjects+0xa:
00000000`7756df6a c3              ret
0:005> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: ntdll!_PEB                                    ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: ntdll!_HEAP_FAILURE_INFORMATION                ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!IMAGE_NT_HEADERS32                         ***
***                                                                   ***
*************************************************************************
GetPageUrlData failed, server returned HTTP status 404
URL requested: http://watson.microsoft.com/StageOne/BrGuestSvr_exe/3_0_0_3270/55e92e2e/BrGuestSvr_exe/3_0_0_3270/55e92e2e/c0000005/0002c79b.htm?Retriage=1

FAULTING_IP: 
BrGuestSvr!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::size+b [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xstring @ 1511]
00000001`3f5ec79b 488b4018        mov     rax,qword ptr [rax+18h]

EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000000013f5ec79b (BrGuestSvr!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::size+0x000000000000000b)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 0000000000000070
Attempt to read from address 0000000000000070

PROCESS_NAME:  BrGuestSvr.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000070

READ_ADDRESS:  0000000000000070 

FOLLOWUP_IP: 
BrGuestSvr!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::size+b [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xstring @ 1511]
00000001`3f5ec79b 488b4018        mov     rax,qword ptr [rax+18h]

MOD_LIST: <ANALYSIS/>

FAULTING_THREAD:  0000000000000750

BUGCHECK_STR:  APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_READ

PRIMARY_PROBLEM_CLASS:  NULL_CLASS_PTR_DEREFERENCE

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from 000000013f5ec657 to 000000013f5ec79b

STACK_TEXT:  
00000000`0352dad0 00000001`3f5ec657 : 00000000`00000058 cccccccc`cccccccc cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::size+0xb [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xstring @ 1511]
00000000`0352dae0 00000001`3f642238 : 00000000`0352dc38 00000000`00000058 00000000`00000000 ffffffff`ffffffff : BrGuestSvr!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::assign+0x37 [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xstring @ 893]
00000000`0352db20 00000001`3fe11879 : 00000000`0352dc38 00000000`00000058 cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::basic_string<char,std::char_traits<char>,std::allocator<char> >+0x78 [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xstring @ 546]
00000000`0352db60 00000001`3f6d3d3d : 00000000`00000000 00000000`0352dc38 cccccccc`cccccc01 cccccccc`cccccccc : BrGuestSvr!Krypton::Messaging::WebDriverRequest::get_reqid+0x39 [c:\dev\krypton\common\hostguestinterfaces\browsermsgtypes.cpp @ 2727]
00000000`0352db90 00000001`3f6b25ff : 00000000`029ee7e0 00000000`0352e7a0 fffffffc`fffffff9 00000000`0352e840 : BrGuestSvr!Krypton::GuestSvr::GuestBrowserController::RetryFirefoxWebDriverRequest+0x2ad [c:\dev\krypton\guest\common\brguestsvr\browser\guestbrowsercontroller.cpp @ 3192]
00000000`0352e030 00000001`3f99f242 : 00000000`029ee7e0 00000000`0352e898 fffffffc`fffffff9 00000000`0352e8e8 : BrGuestSvr!Krypton::GuestSvr::GuestBrowserController::DispatchNavigationComplete+0x7bf [c:\dev\krypton\guest\common\brguestsvr\browser\guestbrowsercontroller.cpp @ 823]
00000000`0352e820 00000001`3f99f140 : 00000000`029f4e08 cccccccc`cccccccc cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!Krypton::GuestSvr::`anonymous namespace'::<lambda7>::operator()+0xe2 [c:\dev\krypton\guest\common\brguestsvr\hostctlagent.cpp @ 868]
00000000`0352ecc0 00000001`3f9923bf : 00000000`029f4e08 cccccccc`cccccccc cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!std::tr1::_Callable_obj<Krypton::GuestSvr::`anonymous namespace'::<lambda7>,0>::_ApplyX<void>+0x30 [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xxcallobj @ 14]
00000000`0352ecf0 00000001`3f621bd7 : 00000000`029f4e00 cccccccc`cccccccc cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!std::tr1::_Impl_no_alloc0<std::tr1::_Callable_obj<Krypton::GuestSvr::`anonymous namespace'::<lambda7>,0>,void>::_Do_call+0x2f [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xxfunction @ 66]
00000000`0352ed20 00000001`3ff60008 : 00000000`0352ee10 00000000`0401d080 cccccccc`00000000 00000000`00000314 : BrGuestSvr!std::tr1::_Function_impl0<void>::operator()+0x47 [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xxfunction @ 155]
00000000`0352ed50 00000001`3ff6a428 : 00000000`0401be90 00000000`0352f148 cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!Krypton::UTL::SerializedTaskExecuter::OnQueueNotEmpty+0x258 [c:\dev\krypton\common\utils\utlthreadpool.cpp @ 510]
00000000`0352f110 00000001`3ff6a310 : 00000000`0401ca58 cccccccc`cccccccc cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!Krypton::UTL::`anonymous namespace'::<lambda0>::operator()+0x108 [c:\dev\krypton\common\utils\utlthreadpool.cpp @ 469]
00000000`0352f2a0 00000001`3ff68f3f : 00000000`0401ca58 cccccccc`cccccccc cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!std::tr1::_Callable_obj<Krypton::UTL::`anonymous namespace'::<lambda0>,0>::_ApplyX<void>+0x30 [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xxcallobj @ 14]
00000000`0352f2d0 00000001`3f621bd7 : 00000000`0401ca50 cccccccc`cccccccc cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!std::tr1::_Impl_no_alloc0<std::tr1::_Callable_obj<Krypton::UTL::`anonymous namespace'::<lambda0>,0>,void>::_Do_call+0x2f [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xxfunction @ 66]
00000000`0352f300 00000001`3ff5f385 : 00000000`0401ca50 cccccccc`cccccccc cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!std::tr1::_Function_impl0<void>::operator()+0x47 [c:\program files (x86)\microsoft visual studio 10.0\vc\include\xxfunction @ 155]
00000000`0352f330 00000001`3ff5f214 : 00000000`0401ca50 00000000`0401ca50 cccccccc`cccccccc cccccccc`cccccccc : BrGuestSvr!Krypton::UTL::ThreadPool::Callback+0xf5 [c:\dev\krypton\common\utils\utlthreadpool.cpp @ 411]
00000000`0352f4a0 00000000`775325d1 : 00000000`0352f648 00000000`0401ca50 00000000`00000000 00000000`033ad3f0 : BrGuestSvr!Krypton::UTL::ThreadPool::SimpleWorkCallback+0x44 [c:\dev\krypton\common\utils\utlthreadpool.cpp @ 393]
00000000`0352f4f0 00000000`77536692 : 00000000`776205e8 00000000`00386588 00000000`776205c0 00000000`77620610 : ntdll!TppSimplepExecuteCallback+0x91
00000000`0352f540 00000000`77315a4d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!TppWorkerThread+0x6c9
00000000`0352f840 00000000`7754b831 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`0352f870 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d


STACK_COMMAND:  ~5s; .ecxr ; kb

FAULTING_SOURCE_CODE:  
  1507: 		}
  1508: 
  1509: 	size_type size() const
  1510: 		{	// return length of sequence
> 1511: 		return (this->_Mysize);
  1512: 		}
  1513: 
  1514: 	size_type max_size() const
  1515: 		{	// return maximum possible length of sequence
  1516: 		size_type _Num = this->_Alval.max_size();


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  brguestsvr!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::size+b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: BrGuestSvr

IMAGE_NAME:  BrGuestSvr.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  55e92e2e

FAILURE_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE_c0000005_BrGuestSvr.exe!std::basic_string_char,std::char_traits_char_,std::allocator_char___::size

BUCKET_ID:  X64_APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_READ_brguestsvr!std::basic_string_char,std::char_traits_char_,std::allocator_char___::size+b

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/BrGuestSvr_exe/3_0_0_3270/55e92e2e/BrGuestSvr_exe/3_0_0_3270/55e92e2e/c0000005/0002c79b.htm?Retriage=1

Followup: MachineOwner
---------