GroupWise WebAccess Abend EIP SYSCALLS.NLM

Abend 1.

PVER: 6.50.06

Server name here halted Wednesday, January 31, 2007   4:17:11.146 pm
Abend 1 on P00: Server-5.70.06: Free received an invalid memory pointer 0xC1920033

Registers:
    CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
    EAX = C192E9FA EBX = C192E9C8 ECX = FFFFFFCC EDX = 00000000
    ESI = C192EACC EDI = C192EB10 EBP = 964274F4 ESP = 964274D0
    EIP = 93DABCA6 FLAGS = 00000286
    93DABCA6 83C40C         ADD     ESP, 0000000C
    EIP in SYSCALLS.NLM at code start +00000CA6h

The violation occurred while processing the following instruction:
93DABCA6 83C40C         ADD     ESP, 0000000C
93DABCA9 5B             POP     EBX
93DABCAA C3             RET    
SYSCALLS.NLM|MARSHAL_AccountCharge:
93DABCAB 53             PUSH    EBX
93DABCAC 56             PUSH    ESI
93DABCAD 0FB7742424     MOVZX   ESI, word ptr [ESP+24]
93DABCB2 89F3           MOV     EBX, ESI
93DABCB4 8B442428       MOV     EAX, [ESP+28]
93DABCB8 83FB00         CMP     EBX, 00000000
93DABCBB 7505           JNZ     93DABCC2

Abend 2:

Registers:CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068EAX = 0002B000 EBX = 00000246 ECX = 00000000 EDX = 00000001ESI = 00231930 EDI = 8F142CC4 EBP = 00000000 ESP = 8F142CA0EIP = 00014BBC FLAGS = 00010246
00014BBC C3             RET
EIP in UNKNOWN memory areaThe violation occurred while processing the following instruction:00014BBC C3             RET
LOADER.NLM|TLBFlushEntry:00014BBD 8B442404       MOV     EAX, [ESP+04]00014BC1 0F0138         INVALPG [EAX]00014BC4 C3             RET
LOADER.NLM|GetRealModeWorkSpace:00014BC5 51             PUSH    ECX00014BC6 52             PUSH    EDX00014BC7 B8C8190000     MOV     EAX, 000019C800014BCC C1E004         SHL     EAX, 0400014BCF 8B54240C       MOV     EDX, [ESP+0C]00014BD3 8B88190C0000   MOV     ECX, [EAX+00000C19]