IE6 crash in MSHTML

[danny.yeshurun]

I saw some topics regarding MSHTML crash in IE6 but none solves my
problem...
I am using IE6 on XP SP2 and I do have the latest windows update
Following is some info from dr watson:

*----> State Dump for Thread Id 0x1ac <----*

eax=00000000 ebx=02ab5f60 ecx=02ab5f60 edx=000000e8 esi=02ab3b40
edi=00000000
eip=7d512f35 esp=0013a0e8 ebp=0013a0ec iopl=0 nv up ei pl zr na
po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246

*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINDOWS\System32\mshtml.dll -
function: mshtml
7d512f1b 8bff mov edi,edi
7d512f1d 55 push ebp
7d512f1e 8bec mov ebp,esp
7d512f20 56 push esi
7d512f21 8bf1 mov esi,ecx
7d512f23 8b4d08 mov ecx,[ebp+0x8]
7d512f26 83660400 and dword ptr [esi+0x4],0x0
7d512f2a c706947e4b7d mov dword ptr [esi],0x7d4b7e94
7d512f30 894e08 mov [esi+0x8],ecx
7d512f33 8b01 mov eax,[ecx]
FAULT ->7d512f35 ff5034 call dword ptr [eax+0x34]
ds:0023:00000034=????????
7d512f38 50 push eax
7d512f39 8bce mov ecx,esi
7d512f3b e80c000000 call mshtml+0x72f4c (7d512f4c)
7d512f40 8bc6 mov eax,esi
7d512f42 5e pop esi
7d512f43 5d pop ebp
7d512f44 c20400 ret 0x4
7d512f47 90 nop
7d512f48 90 nop
7d512f49 90 nop

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may
be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINDOWS\System32\msls31.dll -
ChildEBP RetAddr Args to Child
0013a0ec 7d512ed6 02ab5f60 02ab3b40 0013a114 mshtml+0x72f35
0013a0fc 7d515823 02ab5f60 00000000 00000000 mshtml+0x72ed6
0013a114 7d5677fe 02ab5f60 00000000 00000000 mshtml+0x75823
0013a128 7d5513ee 02ab5f60 00000000 02abffb0 mshtml+0xc77fe
0013a148 7d512e1e 00000001 00000000 00000000 mshtml+0xb13ee
0013a16c 7d55567d 00000000 02a3b200 0013a214 mshtml+0x72e1e
0013a17c 7d552c17 00000000 0013a514 02a3b200 mshtml+0xb567d
0013a214 7d553b47 0013a484 00000001 00000000 mshtml+0xb2c17
0013a3f0 7d55436a 00000001 0000031a 0000031a mshtml+0xb3b47
0013a540 7d51b05d 0013bb30 0013a6f4 00000000 mshtml+0xb436a
0013a654 7d548a61 00000000 0013a6f4 00000000 mshtml+0x7b05d
0013a6c8 7d5495fb 02a3b200 00000000 0000031b mshtml+0xa8a61
0013a70c 7d549532 02a3b200 0013bb30 00000001 mshtml+0xa95fb
0013a7c4 028e4131 02aac300 0013a7e4 0013a8a8 mshtml+0xa9532
0013a854 028e438f 02aac12c 00000000 001af390
msls31!LsPointXYFromPointUV+0x6b0
0013a8b0 028e4249 02aac148 00000333 00000000
msls31!LsPointXYFromPointUV+0x90e
0013a904 028e3ba1 00000000 00000000 00000014
msls31!LsPointXYFromPointUV+0x7c8
0013a98c 028e1734 000003bf 00002e95 00000000
msls31!LsPointXYFromPointUV+0x120
0013a9c8 7d526273 00000001 000003bf 00002e95 msls31!LsCreateLine+0xbb
0300e040 0020b460 7d542434 7d52a99b 7d57f23e mshtml+0x86273
3a43534c 00000000 00000000 00000000 00000000 0x20b460

*----> Raw Stack Dump <----*
000000000013a0e8 40 3b ab 02 fc a0 13 00 - d6 2e 51 7d 60 5f ab 02
@;........Q}`_..
000000000013a0f8 40 3b ab 02 14 a1 13 00 - 23 58 51 7d 60 5f ab 02
@;......#XQ}`_..
000000000013a108 00 00 00 00 00 00 00 00 - 40 3b ab 02 28 a1 13 00
.........@;..(...
000000000013a118 fe 77 56 7d 60 5f ab 02 - 00 00 00 00 00 00 00 00
..wV}`_..........
000000000013a128 48 a1 13 00 ee 13 55 7d - 60 5f ab 02 00 00 00 00
H.....U}`_......
000000000013a138 b0 ff ab 02 4c 9a ac 02 - 60 5f ab 02 00 00 00 00
.....L...`_......
000000000013a148 6c a1 13 00 1e 2e 51 7d - 01 00 00 00 00 00 00 00
l.....Q}........
000000000013a158 00 00 00 00 68 a1 13 00 - b0 ff ab 02 60 5f ab 02
.....h.......`_..
000000000013a168 00 00 00 00 7c a1 13 00 - 7d 56 55 7d 00 00 00 00
.....|...}VU}....
000000000013a178 00 b2 a3 02 14 a2 13 00 - 17 2c 55 7d 00 00 00 00
..........,U}....
000000000013a188 14 a5 13 00 00 b2 a3 02 - 84 a4 13 00 00 00 00 00
.................
000000000013a198 01 00 00 00 00 00 00 00 - 00 00 00 00 68 00 00 00
.............h...
000000000013a1a8 44 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00
D...............
000000000013a1b8 00 00 00 00 f0 33 ad 02 - b0 ff ab 02 a4 67 aa 02
......3.......g..
000000000013a1c8 00 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000013a1d8 e0 6d aa 02 1a 03 00 00 - 00 65 aa 02 01 00 00 00
..m.......e......
000000000013a1e8 d0 a5 a3 02 00 00 00 00 - 1c 00 00 00 01 00 00 00
.................
000000000013a1f8 30 9a ac 02 02 00 00 00 - 68 00 00 00 00 00 00 00
0.......h.......
000000000013a208 24 28 ad 02 4c 9a ac 02 - 09 00 00 00 f0 a3 13 00
$(..L...........
000000000013a218 47 3b 55 7d 84 a4 13 00 - 01 00 00 00 00 00 00 00
G;U}............



Any idea? cluse?

 

[Frank Saunders, MS-MVP IE/OE]

I saw some topics regarding MSHTML crash in IE6 but none solves my
problem...
I am using IE6 on XP SP2 and I do have the latest windows update
Following is some info from dr watson:
SNIP
Any idea? cluse?

Since you give no hint about what you tried you'll probably see everything
again.

An Error Occurs in Mshtml.dll in Internet Explorer 6 on Windows Me
http://support.microsoft.com/kb/318153
Error Message in Mshtml.dll While You Browse the Internet
http://support.microsoft.com/?kbid=265244 (Me)
Internet Explorer or Outlook Express Quits Unexpectedly with an Error in
Mshtml.dll
http://support.microsoft.com/kb/816506

http://www.mvps.org/inetexplorer/archive/answers.htm#mshtml (iexplore.exe)
http://www.mvps.org/inetexplorer/archive/answers_7.htm#mshtml (explorer.exe)

--
Frank Saunders, MS-MVP OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
http://defendingyourmachine.blogspot.com/

 

[danny.yeshurun]

The scenario is:
I am using an XML island hat is dynamically loaded, i.e. I have a
script that queries an XML file (using my applicaiton). The XML is
bound to a table, and that crash occurs while loading the table. Note
that the same flow may work one time and then crash the other time (but
quite often).

I am not sure what you meant by : "..you give no hint...", please let
me know what other details are needed.

 

[Rob Parsons]

Hi Danny. I'll put my 6 cents in.

You said that
'The XML is bound to a table, and that crash occurs while loading the table.
Note
that the same flow may work one time and then crash the other time (but
quite often).'

This would seem to suggest that the problem is data related. Any strange
characters in your data?
:>< etc.

 

[Robert Aldwinckle]

I saw some topics regarding MSHTML crash in IE6 but none solves my
problem...
I am using IE6 on XP SP2 and I do have the latest windows update
Following is some info from dr watson:

....

This shows that msls31.dll may have been drawing some lines.
So first of all let's find out what the version of that file is.
It would also be interesting I think to know where it came from.
E.g. I'm seeing article titles like

<title>KB252613 - How to remove all components of Office 2000 CD2 in Windows 2000</title>

and

<title>KB235383 - List of files that are installed by Publisher 2000</title>

which make it look like a good source of DLL Hell.


Egad. The DLL Help Database is listing 15 separate sources
for the version that I have 3.10.349.0

http://support.microsoft.com/dllhelp/Default.aspx?dlltype=file&l=55&alpha=msls31.dll&S=1&start=25


The dump warns that we may not be able to follow the stack back
but since it is all we have so far I'm also curious to know what module
this return address would indicate: 028E4131

0013a7c4 028e4131 02aac300 0013a7e4 0013a8a8 mshtml+0xa9532

So is 028E0000 where msls31.dll is being loaded on your system?

BTW DependencyWalker is showing that my msls31.dll
has a preferred base of 0x746C0000


and then presumably 0020B460 is somewhere inside iexplore.exe?

0300e040 0020b460 7d542434 7d52a99b 7d57f23e mshtml+0x86273

Hmm... no, I don't think so. Process Explorer shows that it would be
somewhere inside sortkey.nls on mine! (?) E.g. that module is loaded
at 0x200000 and has size 0x41000.

What was really there on your system?


What happened to iexplore.exe?


BTW I'm wondering if you should be getting the symbols for this dump.
Those trace entries would probably tell and interesting story then.


Here's an excerpt from a previous post about how to do that if you're interested:

<excerpt>
<title>Microsoft Windows XP - Setting up Dr. Watson</title>
< http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/drwatson_setup.mspx >

(MSDN search for
drwtsn32 symbols xp
)


<title>How to Use the Microsoft Symbol Server</title>
< http://www.microsoft.com/whdc/devtools/debugging/symbols.mspx >

(Google web search for
inurl:symbols site:microsoft.com
)

</excerpt>


HTH

Robert Aldwinckle
---