Crash Firebird with message in log "SCH_validate -- wrong thread" [CORE2960]

[firebird-automations]

Submitted by: Sergey aka NetObserver (netobserver)

Attachments:
drwatson_log.zip

DrWatson log available

[firebird-automations]

Modified by: Sergey aka NetObserver (netobserver)

Attachment: drwatson_log.zip [ 11609 ]

[firebird-automations]

Modified by: Sergey aka NetObserver (netobserver)

environment: Windows 2000 server sp4, quad core processor, debug version Firebird with pdb => Windows 2000 server sp4, quad core processor, debug version Firebird with pdb, WI-V6.3.5.13206

[firebird-automations]

Commented by: @hvlad

function: <nosymbols>
004f554a 894304 mov [ebx+0x4],eax ds:07ca9fc6=????????
...
004f5582 668b54241c mov dx,[esp+0x1c] ss:0bb69154=0000
004f5587 33c9 xor ecx,ecx
FAULT -> 004f5589 896e08 mov [esi+0x8],ebp ds:0bf7d84e=????????
004f558c 8a0f mov cl,[edi] ds:0b753974=00
004f558e 83e108 and ecx,0x8

As you see, crash log contains no source lines info. This is because you or have no .pdb files at the same folder as .exe or .pdb files not corresponds to the .exe files.

Anyway, i was able to detect exact place where the FAULT happens, it is at line 1299 at alloc.cpp :

void* MemoryPool::internal_alloc(size_t size, SSHORT type
#⁠ifdef DEBUG_GDS_ALLOC
, const char* file, int line
#⁠endif
) {
...
current_block->mbk_flags &= ~MBK_LAST;
blk->mbk_type = type; <---------------------------------- FAULT here
blk->mbk_small.mbk_length = size;
blk->mbk_small.mbk_prev_length = current_block->mbk_small.mbk_length;

1291: blk = next_block(current_block);
004F557A 0F B7 57 04 movzx edx,word ptr [edi+4]
004F557E 8D 74 3A 0C lea esi,[edx+edi+0Ch]
1292: blk->mbk_pool = this;
1293: blk->mbk_flags = MBK_USED | (current_block->mbk_flags & MBK_LAST);
1294: #⁠ifdef DEBUG_GDS_ALLOC
1295: blk->mbk_file = file;
1296: blk->mbk_line = line;
1297: #⁠endif
1298: current_block->mbk_flags &= ~MBK_LAST;
1299: blk->mbk_type = type;
004F5582 66 8B 54 24 1C mov dx,word ptr [esp+1Ch]
004F5587 33 C9 xor ecx,ecx
004F5589 89 6E 08 mov dword ptr [esi+8],ebp <---------------------------------- FAULT here
004F558C 8A 0F mov cl,byte ptr [edi]
004F558E 83 E1 08 and ecx,8
004F5591 83 C9 04 or ecx,4
004F5594 66 89 0E mov word ptr [esi],cx
004F5597 80 27 F7 and byte ptr [edi],0F7h
004F559A 66 89 56 02 mov word ptr [esi+2],dx
1300: blk->mbk_small.mbk_length = size;
004F559E 66 89 46 04 mov word ptr [esi+4],ax

Unfortunately, it is all i can said about this issue so far.

Install correct .pdb files and tune drWatson to produce crash dump also, it could help next time if crash occurs.