0

我们有一个 C# .Net Framework Windows 窗体应用程序,它引用了几个 c/c++ 本机 DLL,正在由少数客户端测试。

在某些机器上,它崩溃而没有任何错误消息/弹出(只是立即退出),这只发生并且总是在因此选择的机器上(应用程序崩溃的所有电脑和应用程序从未出现问题的电脑都有最新的Windows 10 版本,并且都禁用了 Windows Defender/Security,因为它会导致问题)。

应用程序在启动 http 请求后恰好崩溃/退出,因此此时它会加载System.Net.Http包含在主可执行文件中的 .Net Framework 的库(不知道为什么 VS 包含了我们在应用程序中使用的几乎所有标准库)。

无论如何,在使用 WinDBG 调试应用程序后,日志显示当启动 http 请求时,应用程序加载了这个加载本机 dll 的 dll“System.Net.Http.ni.dll”,这SysWOW64\WINNSI.DLL就是它的fast_fail()来源,它似乎是从要么 要么System.Net.Http.ni.dllSysWOW64\WINNSI.DLL确切的子代码是0x2 FAST_FAIL_STACK_COOKIE_CHECK_FAILURE

我们一直认为可能是依赖冲突引起的,解决了所有的冲突后仍然发生崩溃,此时我们不知道在哪里寻找原因。

一些信息:

  • 主 App/EXE 使用 .Net Framework v4.6.2
  • 使用 .Net Framework 4.6 引用其他一些项目
  • 该应用程序以发布模式部署并且被混淆(包括打包器/压缩器)

任何帮助/信息将不胜感激,WinDBG 的日志包含在下面。


Microsoft (R) Windows Debugger Version 10.0.22473.1005 X86
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: C:\Program Files (x86)\COMPORT PRO LOGGER\COMPORT PRO LOGGER.exe

************* Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       srv*
Symbol search path is: srv*
Executable search path is: 
ModLoad: 00040000 000a0000   image00040000
ModLoad: 76f20000 770c3000   ntdll.dll
ModLoad: 6db80000 6dbd2000   C:\WINDOWS\SysWOW64\MSCOREE.DLL
ModLoad: 74f70000 75060000   C:\WINDOWS\SysWOW64\KERNEL32.dll
ModLoad: 76960000 76b74000   C:\WINDOWS\SysWOW64\KERNELBASE.dll
ModLoad: 74540000 745df000   C:\WINDOWS\SysWOW64\apphelp.dll
(38c8.313c): Break instruction exception - code 80000003 (first chance)
eax=00000000 ebx=00000000 ecx=2af50000 edx=00000000 esi=76f32054 edi=76f3261c
eip=76fd1ba2 esp=004ff234 ebp=004ff260 iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
ntdll!LdrpDoDebuggerBreak+0x2b:
76fd1ba2 cc              int     3
0:000> g
ModLoad: 757a0000 7581a000   C:\WINDOWS\SysWOW64\ADVAPI32.dll
ModLoad: 76cf0000 76daf000   C:\WINDOWS\SysWOW64\msvcrt.dll
ModLoad: 75160000 751d5000   C:\WINDOWS\SysWOW64\sechost.dll
ModLoad: 75a70000 75b2f000   C:\WINDOWS\SysWOW64\RPCRT4.dll
ModLoad: 6da70000 6dafd000   C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
ModLoad: 74ef0000 74f35000   C:\WINDOWS\SysWOW64\SHLWAPI.dll
ModLoad: 74530000 7453f000   C:\WINDOWS\SysWOW64\kernel.appcore.dll
ModLoad: 74320000 74328000   C:\WINDOWS\SysWOW64\VERSION.dll
ModLoad: 6d2b0000 6da61000   C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
ModLoad: 75370000 75510000   C:\WINDOWS\SysWOW64\USER32.dll
ModLoad: 750f0000 75108000   C:\WINDOWS\SysWOW64\win32u.dll
ModLoad: 6d290000 6d2a4000   C:\WINDOWS\SysWOW64\VCRUNTIME140_CLR0400.dll
ModLoad: 6d1e0000 6d28b000   C:\WINDOWS\SysWOW64\ucrtbase_clr0400.dll
ModLoad: 74f40000 74f64000   C:\WINDOWS\SysWOW64\GDI32.dll
ModLoad: 751e0000 752bc000   C:\WINDOWS\SysWOW64\gdi32full.dll
ModLoad: 76e90000 76f0b000   C:\WINDOWS\SysWOW64\msvcp_win.dll
ModLoad: 76530000 76650000   C:\WINDOWS\SysWOW64\ucrtbase.dll
ModLoad: 755f0000 75615000   C:\WINDOWS\SysWOW64\IMM32.DLL
ModLoad: 766d0000 76951000   C:\WINDOWS\SysWOW64\combase.dll
(38c8.313c): Unknown exception - code 04242420 (first chance)
ModLoad: 75060000 75066000   C:\WINDOWS\SysWOW64\psapi.dll
ModLoad: 6a410000 6b81e000   C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\513c750059af8bd28ff8bd9fcb9e2316\mscorlib.ni.dll
ModLoad: 75620000 75703000   C:\WINDOWS\SysWOW64\ole32.dll
ModLoad: 766d0000 76951000   C:\WINDOWS\SysWOW64\combase.dll
ModLoad: 75070000 750cf000   C:\WINDOWS\SysWOW64\bcryptPrimitives.dll
ModLoad: 744b0000 74524000   C:\WINDOWS\SysWOW64\uxtheme.dll
ModLoad: 6fe20000 6fe8c000   C:\Program Files\TeamViewer\tv_w32.dll
ModLoad: 75b30000 760e3000   C:\WINDOWS\SysWOW64\SHELL32.dll
ModLoad: 6d150000 6d1da000   C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
ModLoad: 76db0000 76e46000   C:\WINDOWS\SysWOW64\OLEAUT32.dll
ModLoad: 747a0000 747c5000   C:\WINDOWS\SysWOW64\wldp.dll
ModLoad: 72440000 72452000   C:\WINDOWS\SysWOW64\amsi.dll
ModLoad: 74290000 742b5000   C:\WINDOWS\SysWOW64\USERENV.dll
ModLoad: 73ac0000 73ad8000   C:\WINDOWS\SysWOW64\profapi.dll
ModLoad: 723d0000 7243c000   C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\X86\MpOav.dll
ModLoad: 6d070000 6d150000   C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\X86\MPCLIENT.DLL
ModLoad: 75820000 7591a000   C:\WINDOWS\SysWOW64\CRYPT32.dll
ModLoad: 75110000 75157000   C:\WINDOWS\SysWOW64\WINTRUST.dll
ModLoad: 6fb20000 6fb2e000   C:\WINDOWS\SysWOW64\MSASN1.dll
ModLoad: 70170000 7018e000   C:\WINDOWS\SysWOW64\gpapi.dll
ModLoad: 0d790000 0dd36000   System.Windows.Forms.dll
ModLoad: 0dd40000 0e2e6000   System.Windows.Forms.dll
ModLoad: 6c610000 6d066000   C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\7eff558bb25b205bc169e86e89032f9d\System.ni.dll
ModLoad: 0d7d0000 0d862000   System.Drawing.dll
ModLoad: 0d870000 0d902000   System.Drawing.dll
ModLoad: 044c0000 044cc000   J2534DotNet.dll
ModLoad: 044d0000 044dc000   J2534DotNet.dll
ModLoad: 0a4f0000 0a5a0000   Newtonsoft.Json.dll
ModLoad: 0a5a0000 0a650000   Newtonsoft.Json.dll
ModLoad: 73ae0000 73af3000   C:\WINDOWS\SysWOW64\CRYPTSP.dll
ModLoad: 721a0000 721cf000   C:\WINDOWS\SysWOW64\rsaenh.dll
ModLoad: 750d0000 750e9000   C:\WINDOWS\SysWOW64\bcrypt.dll
ModLoad: 72190000 7219a000   C:\WINDOWS\SysWOW64\CRYPTBASE.dll
ModLoad: 66d20000 67538000   C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\70fc8279dc4f52624232456a2818ede8\System.Core.ni.dll
ModLoad: 0a560000 0a582000   System.Numerics.dll
ModLoad: 0a650000 0a672000   System.Numerics.dll
ModLoad: 6c330000 6c604000   C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\512d278a3518e7bcecfa4b0ad08be747\System.Runtime.Serialization.ni.dll
ModLoad: 6bfd0000 6c327000   System.Data.dll
ModLoad: 0a780000 0aad7000   System.Data.dll
ModLoad: 6bfd0000 6c327000   C:\WINDOWS\Microsoft.Net\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
ModLoad: 76660000 766c3000   C:\WINDOWS\SysWOW64\WS2_32.dll
ModLoad: 665a0000 66d14000   C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\8c6675e2ff4bb46151e9d8752fbedb3a\System.Xml.ni.dll
ModLoad: 6bc80000 6bd86000   C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\18a0b01e97ce2f2ff1a5a80c9c845f2a\System.Configuration.ni.dll
ModLoad: 747d0000 74dd8000   C:\WINDOWS\SysWOW64\windows.storage.dll
ModLoad: 75710000 75797000   C:\WINDOWS\SysWOW64\SHCORE.dll
ModLoad: 6bbf0000 6bc7d000   C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.1110_none_c0da534e38c01f4d\comctl32.dll
ModLoad: 0ac80000 0ac8a000   Accessibility.dll
ModLoad: 0ac90000 0ac9a000   Accessibility.dll
ModLoad: 735e0000 73749000   C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.1348_none_d94f9953e1060d01\gdiplus.dll
ModLoad: 6b9e0000 6bbf0000   C:\WINDOWS\SysWOW64\DWrite.dll
ModLoad: 75510000 755e3000   C:\WINDOWS\SysWOW64\MSCTF.dll
ModLoad: 72bc0000 72c54000   C:\WINDOWS\SysWOW64\TextShaping.dll
ModLoad: 73750000 73960000   C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984\comctl32.dll
ModLoad: 0b170000 0b1e0000   AutoUpdater.NET.dll
ModLoad: 0b1e0000 0b250000   AutoUpdater.NET.dll
ModLoad: 75060000 75066000   C:\WINDOWS\SysWOW64\psapi.dll
ModLoad: 6b8f0000 6b9d3000   C:\WINDOWS\SysWOW64\rasapi32.dll
ModLoad: 6bfa0000 6bfcb000   C:\WINDOWS\SysWOW64\rasman.dll
ModLoad: 6bf80000 6bf91000   C:\WINDOWS\SysWOW64\rtutils.dll
ModLoad: 72240000 72292000   C:\WINDOWS\SysWOW64\mswsock.dll
ModLoad: 73510000 735db000   C:\WINDOWS\SysWOW64\winhttp.dll
ModLoad: 6bf60000 6bf72000   C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
ModLoad: 742c0000 742f2000   C:\WINDOWS\SysWOW64\IPHLPAPI.DLL
ModLoad: 75340000 75347000   C:\WINDOWS\SysWOW64\NSI.dll
ModLoad: 723b0000 723c4000   C:\WINDOWS\SysWOW64\dhcpcsvc6.DLL
ModLoad: 730c0000 73179000   C:\WINDOWS\SysWOW64\textinputframework.dll
ModLoad: 72da0000 7301e000   C:\WINDOWS\SysWOW64\CoreUIComponents.dll
ModLoad: 73020000 730bb000   C:\WINDOWS\SysWOW64\CoreMessaging.dll
ModLoad: 72cc0000 72d9b000   C:\WINDOWS\SysWOW64\wintypes.dll
ModLoad: 0cec0000 0cf9b000   C:\WINDOWS\SysWOW64\wintypes.dll
ModLoad: 73a90000 73ab9000   C:\WINDOWS\SysWOW64\ntmarta.dll
ModLoad: 72390000 723a6000   C:\WINDOWS\SysWOW64\dhcpcsvc.DLL
ModLoad: 72c60000 72cb3000   C:\WINDOWS\SysWOW64\Oleacc.dll
ModLoad: 722b0000 72341000   C:\WINDOWS\SysWOW64\DNSAPI.dll
ModLoad: 752c0000 7533e000   C:\WINDOWS\SysWOW64\clbcatq.dll
ModLoad: 69c30000 6a086000   C:\WINDOWS\SysWOW64\wininet.dll
ModLoad: 73b80000 73ba1000   C:\WINDOWS\SysWOW64\SspiCli.dll
ModLoad: 717a0000 719cb000   C:\WINDOWS\SysWOW64\iertutil.dll
(38c8.cb8): C++ EH exception - code e06d7363 (first chance)
(38c8.cb8): C++ EH exception - code e06d7363 (first chance)
(38c8.cb8): C++ EH exception - code e06d7363 (first chance)
(38c8.cb8): CLR exception - code e0434352 (first chance)
ModLoad: 0c840000 0c84c000   J2534DotNet.Logger.dll
ModLoad: 0c850000 0c85c000   J2534DotNet.Logger.dll
ModLoad: 6be30000 6bea9000   C:\WINDOWS\SysWOW64\op20pt32.dll
ModLoad: 760f0000 7652c000   C:\WINDOWS\SysWOW64\SETUPAPI.dll
ModLoad: 76e50000 76e8b000   C:\WINDOWS\SysWOW64\cfgmgr32.dll
ModLoad: 6fd20000 6fd4b000   C:\WINDOWS\SysWOW64\DEVOBJ.dll
ModLoad: 0c870000 0c87a000   ComportCommon.dll
ModLoad: 0d0c0000 0d0ca000   ComportCommon.dll
ModLoad: 6b860000 6b8e9000   C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Net.Http\7b88268960f1e1dd38114f5592ebce8d\System.Net.Http.ni.dll
ModLoad: 6fe90000 6fe98000   C:\WINDOWS\SysWOW64\WINNSI.DLL
(38c8.313c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!)
Subcode: 0x2 FAST_FAIL_STACK_COOKIE_CHECK_FAILURE 
eax=00000001 ebx=004fd700 ecx=00000002 edx=000001e9 esi=004fd700 edi=00000000
eip=6d8bd448 esp=004fd354 ebp=004fd678 iopl=0         nv up ei pl nz na po nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00200202
clr!__report_gsfailure+0x17:
6d8bd448 cd29            int     29h

4

0 回答 0