JDK-6405034 : Consistent JVM crash with MS KB912945 installed on some applications
  • Type: Bug
  • Component: client-libs
  • Sub-Component: java.awt
  • Affected Version: 5.0u6
  • Priority: P2
  • Status: Closed
  • Resolution: Won't Fix
  • OS: windows_xp
  • CPU: x86
  • Submitted: 2006-03-28
  • Updated: 2011-02-16
  • Resolved: 2006-03-30
Description
FULL PRODUCT VERSION :
1.5.0_06-b05

FULL OS VERSION :
Windows XP SP2 with KB912945 installed (http://support.microsoft.com/kb/912945)

A DESCRIPTION OF THE PROBLEM :
Since the installation of Microsoft patch associated with kb912945 (http://support.microsoft.com/kb/912945 with patch downloadable from www.microsoft.com/downloads/results.aspx?pocId=&freetext=912945%20&DisplayLang=en, the Sun 1.5.0_06 consistently crashes on some applications

THE PROBLEM WAS REPRODUCIBLE WITH -Xint FLAG: Yes

THE PROBLEM WAS REPRODUCIBLE WITH -server FLAG: Did not try

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
1) Install MS patch from www.microsoft.com/downloads/results.aspx?pocId=&freetext=912945%20&DisplayLang=en,
2) Visit http://www.stosh.org/temp/javabug/error.html and do NOT click to activate the controls (See http://support.microsoft.com/kb/912945)

EXPECTED VERSUS ACTUAL BEHAVIOR :
The JVM crashes. The expected behavior is no crash.
ERROR MESSAGES/STACK TRACES THAT OCCUR :
#
# An unexpected error has been detected by HotSpot Virtual Machine:
#
#  EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x6d0d1dda, pid=396, tid=2656
#
# Java VM: Java HotSpot(TM) Client VM (1.5.0_06-b05 interpreted mode, sharing)
# Problematic frame:
# C  [awt.dll+0xd1dda]
#

---------------  T H R E A D  ---------------

Current thread (0x02d9a008):  JavaThread "AWT-Windows" daemon [_thread_in_native, id=2656]

siginfo: ExceptionCode=0xc0000005, writing address 0x000000fc

Registers:
EAX=0x00000000, EBX=0x00000000, ECX=0x00000001, EDX=0x7c90eb94
ESP=0x05a1f7ac, EBP=0x05a1f7e8, ESI=0x02d9a0c8, EDI=0x00008025
EIP=0x6d0d1dda, EFLAGS=0x00010202

  Top of Stack: (sp=0x05a1f7ac)
0x05a1f7ac:   6d0d1da5 003201e4 00000001 6d0e3f36
0x05a1f7bc:   00480252 05a1f850 6d0e39b0 00000000
0x05a1f7cc:   02d9a008 6d6f45e6 02d9a0c8 05a1f7c0
0x05a1f7dc:   05a1f86c 6d0f4498 00000001 05a1f814
0x05a1f7ec:   77d48734 006201d2 00008025 6d0d1d91
0x05a1f7fc:   00480252 6d0e39b0 dcbaabcd 00000000
0x05a1f80c:   05a1f850 6d0e39b0 05a1f87c 77d48816
0x05a1f81c:   6d0e39b0 006201d2 00008025 6d0d1d91

Instructions: (pc=0x6d0d1dda)
0x6d0d1dca:   c0 74 2e ff 74 24 04 e8 8a ea fe ff 59 6a 01 59
0x6d0d1dda:   89 88 fc 00 00 00 33 c0 39 4c 24 08 6a 00 0f 94


Stack: [0x05920000,0x05a20000),  sp=0x05a1f7ac,  free space=1021k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C  [awt.dll+0xd1dda]
C  [USER32.dll+0x8734]
C  [USER32.dll+0x8816]
C  [USER32.dll+0xb4c0]
C  [USER32.dll+0xb50c]
C  [ntdll.dll+0xeae3]
C  [USER32.dll+0x9402]

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j  sun.awt.windows.WToolkit.eventLoop()V+0
j  sun.awt.windows.WToolkit.run()V+69
j  java.lang.Thread.run()V+11
v  ~StubRoutines::call_stub

---------------  P R O C E S S  ---------------

Java Threads: ( => current thread )
  0x05c7c758 JavaThread "AWT-EventQueue-2" [_thread_in_native, id=3368]
  0x05c5aa20 JavaThread "Keep-Alive-Timer" daemon [_thread_blocked, id=2128]
  0x05c6a478 JavaThread "Thread-3" [_thread_blocked, id=1752]
  0x05c69968 JavaThread "thread applet-com.bantu.banter.client.ChatApplet" [_thread_blocked, id=3664]
  0x05c65050 JavaThread "TimerQueue" daemon [_thread_blocked, id=2532]
  0x05c44eb0 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=3416]
  0x02dafad8 JavaThread "ConsoleWriterThread" daemon [_thread_blocked, id=748]
  0x05c30dd0 JavaThread "AWT-EventQueue-1" [_thread_blocked, id=4064]
  0x02d9e470 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3744]
=>0x02d9a008 JavaThread "AWT-Windows" daemon [_thread_in_native, id=2656]
  0x02d727d8 JavaThread "AWT-Shutdown" [_thread_blocked, id=428]
  0x02d997a0 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=3792]
  0x02d59858 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=564]
  0x02d582e8 JavaThread "CompilerThread0" daemon [_thread_blocked, id=704]
  0x02d575d0 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=436]
  0x02d52818 JavaThread "Finalizer" daemon [_thread_blocked, id=1280]
  0x02d51328 JavaThread "Reference Handler" daemon [_thread_blocked, id=3472]
  0x0003fe60 JavaThread "main" [_thread_in_native, id=2368]

Other Threads:
  0x0003b580 VMThread [id=3040]
  0x02d5aa70 WatcherThread [id=3856]

VM state:not at safepoint (normal execution)

VM Mutex/Monitor currently owned by a thread: None

Heap
 def new generation   total 576K, used 568K [0x20a80000, 0x20b20000, 0x211e0000)
  eden space 512K,  98% used [0x20a80000, 0x20afe080, 0x20b00000)
  from space 64K,  99% used [0x20b10000, 0x20b1ffc8, 0x20b20000)
  to   space 64K,   0% used [0x20b00000, 0x20b00000, 0x20b10000)
 tenured generation   total 2428K, used 1464K [0x211e0000, 0x2143f000, 0x26a80000)
   the space 2428K,  60% used [0x211e0000, 0x2134e3e0, 0x2134e400, 0x2143f000)
 compacting perm gen  total 8192K, used 1419K [0x26a80000, 0x27280000, 0x2aa80000)
   the space 8192K,  17% used [0x26a80000, 0x26be2df8, 0x26be2e00, 0x27280000)
    ro space 8192K,  63% used [0x2aa80000, 0x2af8b178, 0x2af8b200, 0x2b280000)
    rw space 12288K,  46% used [0x2b280000, 0x2b819fa8, 0x2b81a000, 0x2be80000)

Dynamic libraries:
0x00400000 - 0x00419000 	C:\Program Files\Internet Explorer\iexplore.exe
0x7c900000 - 0x7c9b0000 	C:\WINDOWS\system32\ntdll.dll
0x7c800000 - 0x7c8f4000 	C:\WINDOWS\system32\kernel32.dll
0x77c10000 - 0x77c68000 	C:\WINDOWS\system32\msvcrt.dll
0x77d40000 - 0x77dd0000 	C:\WINDOWS\system32\USER32.dll
0x77f10000 - 0x77f57000 	C:\WINDOWS\system32\GDI32.dll
0x77f60000 - 0x77fd6000 	C:\WINDOWS\system32\SHLWAPI.dll
0x77dd0000 - 0x77e6b000 	C:\WINDOWS\system32\ADVAPI32.dll
0x77e70000 - 0x77f01000 	C:\WINDOWS\system32\RPCRT4.dll
0x77760000 - 0x778ce000 	C:\WINDOWS\system32\SHDOCVW.dll
0x77a80000 - 0x77b14000 	C:\WINDOWS\system32\CRYPT32.dll
0x77b20000 - 0x77b32000 	C:\WINDOWS\system32\MSASN1.dll
0x754d0000 - 0x75550000 	C:\WINDOWS\system32\CRYPTUI.dll
0x76c30000 - 0x76c5e000 	C:\WINDOWS\system32\WINTRUST.dll
0x76c90000 - 0x76cb8000 	C:\WINDOWS\system32\IMAGEHLP.dll
0x77120000 - 0x771ac000 	C:\WINDOWS\system32\OLEAUT32.dll
0x774e0000 - 0x7761d000 	C:\WINDOWS\system32\ole32.dll
0x5b860000 - 0x5b8b4000 	C:\WINDOWS\system32\NETAPI32.dll
0x771b0000 - 0x77256000 	C:\WINDOWS\system32\WININET.dll
0x76f60000 - 0x76f8c000 	C:\WINDOWS\system32\WLDAP32.dll
0x77c00000 - 0x77c08000 	C:\WINDOWS\system32\VERSION.dll
0x773d0000 - 0x774d2000 	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
0x7c9c0000 - 0x7d1d5000 	C:\WINDOWS\system32\SHELL32.dll
0x5d090000 - 0x5d127000 	C:\WINDOWS\system32\comctl32.dll
0x75f80000 - 0x7607d000 	C:\WINDOWS\system32\BROWSEUI.dll
0x20000000 - 0x20012000 	C:\WINDOWS\system32\browselc.dll
0x77b40000 - 0x77b62000 	C:\WINDOWS\system32\appHelp.dll
0x76fd0000 - 0x7704f000 	C:\WINDOWS\system32\CLBCATQ.DLL
0x77050000 - 0x77115000 	C:\WINDOWS\system32\COMRes.dll
0x77260000 - 0x77300000 	C:\WINDOWS\system32\urlmon.dll
0x5ad70000 - 0x5ada8000 	C:\WINDOWS\system32\UxTheme.dll
0x77fe0000 - 0x77ff1000 	C:\WINDOWS\system32\Secur32.dll
0x77a20000 - 0x77a74000 	C:\WINDOWS\System32\cscui.dll
0x76600000 - 0x7661d000 	C:\WINDOWS\System32\CSCDLL.dll
0x77920000 - 0x77a13000 	C:\WINDOWS\system32\SETUPAPI.dll
0x10000000 - 0x1027e000 	c:\program files\google\googletoolbar1.dll
0x745e0000 - 0x748a6000 	C:\WINDOWS\system32\msi.dll
0x76b40000 - 0x76b6d000 	C:\WINDOWS\system32\WINMM.dll
0x71ad0000 - 0x71ad9000 	C:\WINDOWS\system32\WSOCK32.dll
0x71ab0000 - 0x71ac7000 	C:\WINDOWS\system32\WS2_32.dll
0x71aa0000 - 0x71aa8000 	C:\WINDOWS\system32\WS2HELP.dll
0x76380000 - 0x76385000 	C:\WINDOWS\system32\MSIMG32.dll
0x5dac0000 - 0x5dac8000 	C:\WINDOWS\system32\rdpsnd.dll
0x76360000 - 0x76370000 	C:\WINDOWS\system32\WINSTA.dll
0x76bf0000 - 0x76bfb000 	C:\WINDOWS\system32\PSAPI.DLL
0x74980000 - 0x74ab0000 	C:\WINDOWS\System32\msxml3.dll
0x4d4f0000 - 0x4d548000 	C:\WINDOWS\system32\WINHTTP.dll
0x59a60000 - 0x59b01000 	C:\WINDOWS\system32\DBGHELP.DLL
0x76ee0000 - 0x76f1c000 	C:\WINDOWS\system32\RASAPI32.DLL
0x76e90000 - 0x76ea2000 	C:\WINDOWS\system32\rasman.dll
0x76eb0000 - 0x76edf000 	C:\WINDOWS\system32\TAPI32.dll
0x76e80000 - 0x76e8e000 	C:\WINDOWS\system32\rtutils.dll
0x77c70000 - 0x77c93000 	C:\WINDOWS\system32\msv1_0.dll
0x76d60000 - 0x76d79000 	C:\WINDOWS\system32\iphlpapi.dll
0x722b0000 - 0x722b5000 	C:\WINDOWS\system32\sensapi.dll
0x76990000 - 0x769b5000 	C:\WINDOWS\system32\ntshrui.dll
0x76b20000 - 0x76b31000 	C:\WINDOWS\system32\ATL.DLL
0x769c0000 - 0x76a73000 	C:\WINDOWS\system32\USERENV.dll
0x01690000 - 0x01718000 	C:\WINDOWS\system32\shdoclc.dll
0x01920000 - 0x0192e000 	C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
0x7c340000 - 0x7c396000 	C:\WINDOWS\system32\MSVCR71.dll
0x6d600000 - 0x6d62d000 	C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
0x5edd0000 - 0x5ede7000 	C:\WINDOWS\system32\OLEPRO32.DLL
0x7dc30000 - 0x7df23000 	C:\WINDOWS\System32\mshtml.dll
0x01960000 - 0x01987000 	C:\WINDOWS\System32\msls31.dll
0x75e90000 - 0x75f40000 	C:\WINDOWS\system32\SXS.DLL
0x01dc0000 - 0x02085000 	C:\WINDOWS\system32\xpsp2res.dll
0x75cf0000 - 0x75d81000 	C:\WINDOWS\system32\MLANG.dll
0x71b20000 - 0x71b32000 	C:\WINDOWS\system32\MPR.dll
0x75f60000 - 0x75f67000 	C:\WINDOWS\System32\drprov.dll
0x71c10000 - 0x71c1e000 	C:\WINDOWS\System32\ntlanman.dll
0x71cd0000 - 0x71ce7000 	C:\WINDOWS\System32\NETUI0.dll
0x71c90000 - 0x71cd0000 	C:\WINDOWS\System32\NETUI1.dll
0x71c80000 - 0x71c87000 	C:\WINDOWS\System32\NETRAP.dll
0x71bf0000 - 0x71c03000 	C:\WINDOWS\System32\SAMLIB.dll
0x75f70000 - 0x75f79000 	C:\WINDOWS\System32\davclnt.dll
0x023c0000 - 0x023ea000 	C:\WINDOWS\System32\msimtf.dll
0x023f0000 - 0x0243b000 	C:\WINDOWS\System32\MSCTF.dll
0x76390000 - 0x763ad000 	C:\WINDOWS\system32\IMM32.DLL
0x32520000 - 0x32532000 	C:\Program Files\Microsoft Office\Office10\msohev.dll
0x593f0000 - 0x59482000 	C:\WINDOWS\system32\wiashext.dll
0x4ec50000 - 0x4edf3000 	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
0x73ba0000 - 0x73bb3000 	C:\WINDOWS\System32\sti.dll
0x74ae0000 - 0x74ae7000 	C:\WINDOWS\System32\CFGMGR32.dll
0x72d10000 - 0x72d18000 	C:\WINDOWS\system32\msacm32.drv
0x77be0000 - 0x77bf5000 	C:\WINDOWS\system32\MSACM32.dll
0x71a50000 - 0x71a8f000 	C:\WINDOWS\system32\mswsock.dll
0x662b0000 - 0x66308000 	C:\WINDOWS\system32\hnetcfg.dll
0x71a90000 - 0x71a98000 	C:\WINDOWS\System32\wshtcpip.dll
0x76f20000 - 0x76f47000 	C:\WINDOWS\system32\DNSAPI.dll
0x76fc0000 - 0x76fc6000 	C:\WINDOWS\system32\rasadhlp.dll
0x75c50000 - 0x75cbe000 	C:\WINDOWS\System32\jscript.dll
0x6d590000 - 0x6d5a2000 	C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
0x6d400000 - 0x6d417000 	C:\Program Files\Java\jre1.5.0_06\bin\jpiexp32.dll
0x76fb0000 - 0x76fb8000 	C:\WINDOWS\System32\winrnr.dll
0x6d450000 - 0x6d468000 	C:\Program Files\Java\jre1.5.0_06\bin\jpishare.dll
0x6d670000 - 0x6d804000 	C:\PROGRA~1\Java\JRE15~1.0_0\bin\client\jvm.dll
0x6d280000 - 0x6d288000 	C:\PROGRA~1\Java\JRE15~1.0_0\bin\hpi.dll
0x6d640000 - 0x6d64c000 	C:\PROGRA~1\Java\JRE15~1.0_0\bin\verify.dll
0x6d300000 - 0x6d31d000 	C:\PROGRA~1\Java\JRE15~1.0_0\bin\java.dll
0x6d660000 - 0x6d66f000 	C:\PROGRA~1\Java\JRE15~1.0_0\bin\zip.dll
0x6d000000 - 0x6d167000 	C:\Program Files\Java\jre1.5.0_06\bin\awt.dll
0x73000000 - 0x73026000 	C:\WINDOWS\system32\WINSPOOL.DRV
0x73760000 - 0x737a9000 	C:\WINDOWS\system32\ddraw.dll
0x73bc0000 - 0x73bc6000 	C:\WINDOWS\system32\DCIMAN32.dll
0x6d240000 - 0x6d27d000 	C:\Program Files\Java\jre1.5.0_06\bin\fontmanager.dll
0x6d1f0000 - 0x6d203000 	C:\Program Files\Java\jre1.5.0_06\bin\deploy.dll
0x6d5d0000 - 0x6d5ef000 	C:\Program Files\Java\jre1.5.0_06\bin\RegUtils.dll
0x6d3e0000 - 0x6d3f5000 	C:\Program Files\Java\jre1.5.0_06\bin\jpicom32.dll
0x6d4c0000 - 0x6d4d3000 	C:\Program Files\Java\jre1.5.0_06\bin\net.dll
0x6d4e0000 - 0x6d4e9000 	C:\Program Files\Java\jre1.5.0_06\bin\nio.dll
0x06230000 - 0x06235000 	C:\WINDOWS\system32\xpsp3res.dll

VM Arguments:
jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~1.0_0 -Xint -Djava.protocol.handler.pkgs=sun.plugin.net.protocol -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE15~1.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~1.0_0 -Xint -Djava.protocol.handler.pkgs=sun.plugin.net.protocol  vfprintf
java_command: <unknown>
Launcher Type: generic

Environment Variables:
PATH=C:\PROGRA~1\Java\JRE15~1.0_0\bin;C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Common Files\Adaptec Shared\System;.
USERNAME=steve
OS=Windows_NT
PROCESSOR_IDENTIFIER=x86 Family 6 Model 8 Stepping 1, GenuineIntel



---------------  S Y S T E M  ---------------

OS: Windows XP Build 2600 Service Pack 2

CPU:total 1 family 6, cmov, cx8, fxsr, mmx, sse

Memory: 4k page, physical 261616k(90508k free), swap 633004k(425260k free)

vm_info: Java HotSpot(TM) Client VM (1.5.0_06-b05) for windows-x86, built on Nov 10 2005 11:12:14 by "java_re" with MS VC++ 6.0



REPRODUCIBILITY :
This bug can be reproduced always.

---------- BEGIN SOURCE ----------
I'm not sure exactly why this is causing the issue as if I create a fresh applet, it doesn't seem to happen. With this test case when I did not print out, it did not crash.

package com.bantu.banter.client;

public class ChatApplet extends java.applet.Applet {
  public void start() {
    System.out.println("Uh oh 4");
  }
}
---------- END SOURCE ----------

CUSTOMER SUBMITTED WORKAROUND :
Auto-activate the applet (mentioned on MS's page) or uninstall the MS patch.

Comments
EVALUATION This is a known issue described in the description of KB912945 update. The article is located here: http://support.microsoft.com/kb/912945, possible problems with using AWT after installing this update are listed at the bottom in 'Known issues' section. According to this article, Microsoft is aware of the problems and plans to fix them in the next patches: "Abstract Window Toolkit Access violations have been reported with Java programs that use Abstract Window Toolkit (AWT) classes in the user interface. Microsoft is investigating this issue and plans to fix it in a future cumulative update." Thus, I doubt if this bug should be fixed by AWT, and closing it as Will Not Fix.
30-03-2006

EVALUATION There is nothing to say looking on crash/console logs. Should reproduce locally and debug with JDK6.0.
29-03-2006