GroupWise POA appears to Abend on Startup. "EIP in LIBC.NLM"

  • 3625985
  • 03-Sep-2007
  • 27-Apr-2012

Environment

Novell GroupWise 6
Novell GroupWise 5.5 Enhancement Pack (EP)

Situation

POA appears to Abend on Startup. "EIP in LIBC.NLM"
The POA abends with a Page Fault Processor Exception.
Running process: GWPOA-Worker 6 Process
Running process: GWPOA-Worker Process (GW 5.5 abend.log)

Resolution

This has been fixed in GWENN3.NLM for GroupWise 6 Support Pack 3.
Workaround: Change the PO to client server and direct. Rebuild the PO (since you can't bring up the POA to receive any admin changes). Without bringing up the POA (because it abends), login to the user direct mode and disable (or delete) the rule. You can then exit out and bring up the PO without abending. Run GWcheck against the PO to clean up any damage the abends on the server may have caused.

Additional Information

The Abend is caused by a rule with a very large number of search parameters (around 300). A user can manually create a rule with many search parameters in it, but more than likely they are using C3PO (Freeware) to automate that process. C3PO has a button a user can easily press to "Block Sender" which will continue to add search parameters to a single rule called "Block Senders - Personal".

The server seems to abend when the POA is loading. In reality the server started abending the minute the user added just enough search parameters to their rule, and now the server continues to abend during startup because it is still trying to send an internet message to this particular user with this rule, and immediately abends the server (corrupting the databases, etc, causing other errors on startup that could mask the real problem).
GW 5.5 EP sp5 Abend.log (summarized)
*********************************************************

Server FS1 halted Friday, December 20, 2002 1:40:52.102 am
Abend 1 on P00: Server-5.60c: Page Fault Processor Exception (Error code 00000002)

Registers:
CS = 0008 DS = 0010 ES = 0010 FS = 0010 GS = 0010 SS = 0010
EAX = 0000006B EBX = CD72BFB4 ECX = 00000007 EDX = 00000246
ESI = CD083E8C EDI = CD72C000 EBP = CD080E34 ESP = CD080DD0
EIP = D0EE8EF3 FLAGS = 00010203
D0EE8EF3 F2A5 **REPNE*MOVSD
EIP in LIBC.NLM at code start +00052EF3h
Access Location: 0xCD72C000

The violation occurred while processing the following instruction:
D0EE8EF3 F2A5 **REPNE*MOVSD
D0EE8EF5 2403 AND AL,03
D0EE8EF7 8AC8 MOV CL,AL
D0EE8EF9 F2A4 **REPNE*MOVSB
D0EE8EFB 8B44240C MOV EAX,[ESP+0C]
D0EE8EFF 5E POP ESI
D0EE8F00 5F POP EDI
D0EE8F01 C3 RET
D0EE8F02 0000 ADD [EAX],AL
D0EE8F04 0000 ADD [EAX],AL


Running process: GWPOA-Worker Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: CD08100C
OS Stack limit: CD078240
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: --CD08108C ?
-CB7A0184 (GWENN2.NLM|GW2_From11BToZen+84CD)
--00040000 (LOADER.EXE|startPublicList+2C78)
D0850074 (MM.NLM|GetLabel+80)
D084D2D7 (MM.NLM|MM_CompleteMessage+33)
D084D2E4 (MM.NLM|MM_CompleteMessage+40)
D0863B14 (MM.NLM|MirrorWriteAbortMessage+0)
etc...
D091A82D (NWPA.NLM|CDM_Final_Callback+F5)
D0863B14 (MM.NLM|MirrorWriteAbortMessage+0)
D091CB0D (NWPA.NLM|CDI_Complete_Message+61)
--D08E25F0 ?
D0863B14 (MM.NLM|MirrorWriteAbortMessage+0)
D091CB1A (NWPA.NLM|CDI_Complete_Message+6E)
--D0946900 ?
D09200BD (NWPA.NLM|ElevatorNoScatterCallback+3D)
--006F00B2 ?
D091CB0D (NWPA.NLM|CDI_Complete_Message+61)
--D0946900 ?
--FF000700 (LOADER.EXE|PMMPageInfoAreaEnd+700)

Additional Information:
The CPU encountered a problem executing code in LIBC.NLM. The problem may be in that module or in data passed to

that module by a process owned by GWPOA.NLM.

Loaded Modules:

LIBC.NLM Novell Kernel Services and Standard C Runtime Library for NLMs [optimized, 3]
Version 6.00f June 24, 2002
CLIB.NLM Novell Standard C Runtime Library for NLMs
Version 5.90f July 19, 2002


GWPOA.NLM Novell GroupWise Post Office Agent
Version 5.57e May 17, 2002
GWMTA.NLM Novell GroupWise Message Transfer Agent
Version 5.57e May 17, 2002
GWENN2.NLM Novell GroupWise Common Libraries
Version 5.57e May 24, 2002

.
GW 6 Abend.log (summarized)
*********************************************************

Abend 1 on P00: Server-5.00k: Page Fault Processor Exception (Error code 00000002)

Registers:
CS = 0008 DS = 0010 ES = 0010 FS = 0010 GS = 0010 SS = 0010
EAX = 00000047 EBX = D27F8F58 ECX = 0000000F EDX = D6EA54E4
ESI = D28258E8 EDI = D2CB3000 EBP = D27F8D34 ESP = D27F8CC0
EIP = D31322D3 FLAGS = 00010207
D31322D3 F2A5 **REPNE*MOVSD
EIP in LIBC.NLM at code start +000422D3h
Access Location: 0xD2CB3000

The violation occurred while processing the following instruction:
D31322D3 F2A5 **REPNE*MOVSD
D31322D5 2403 AND AL,03
D31322D7 8AC8 MOV CL,AL
D31322D9 F2A4 **REPNE*MOVSB
D31322DB 8B44240C MOV EAX,[ESP+0C]
D31322DF 5E POP ESI
D31322E0 5F POP EDI
D31322E1 C3 RET
D31322E2 0000 ADD [EAX],AL
D31322E4 0000 ADD [EAX],AL

Running process: GWPOA-Worker 6 Process
Created by: NetWare Application
Thread Owned by NLM: GWPOA.NLM
Stack pointer: D27F8EB8
OS Stack limit: D27EE320
Scheduling priority: 67371008
Wait state: 3030070 (Yielded CPU)
Stack: --D2CB2FF8 ?
--D28258E0 ?
D7819CA2 (GWENN3.NLM|(Code Start)+4CA2)

--00000000 ?
--00000000 ?

D78172B2 (GWENN3.NLM|(Code Start)+22B2)
--D27F8D4C ?

--D2CEC89A ?
--0000305A ?
-00040000 (LOADER.EXE|debuggerActive+BBE)
--8004F007 ?
--6F6B7559 ?

--00000297 ?
FC01E094 (SERVER.NLM|PutIntoSlabCache+7C)
-FC53798C (SERVER.NLM|LogNeqPhysSlabCache+0)
--00000297 ?
--D2D59000 ?
--D27F8DD0 ?
FC01E00C (SERVER.NLM|FreeMemoryDefault+14C)
-FC53798C (SERVER.NLM|LogNeqPhysSlabCache+0)
--D2D59000 ?

FC01DE4A (SERVER.NLM|Free+122)
--D2D591D8 ?
FC01D7EC (SERVER.NLM|AllocateSlab+104)
-FC53798C (SERVER.NLM|LogNeqPhysSlabCache+0)
--00007000 ?
--CADBFB96 ?
--00000000 ?
--00000297 ?
FC01D561 (SERVER.NLM|AllocMemoryDefault+A5)

-FC4ED088 (SERVER.NLM|AllocSizeTable+0)
--D2C86498 ?
--00000000 ?
--D2F47084 ?
-FC53AE78 (SERVER.NLM|OSAS+0)
--D27F8E48 ?
FC01D429 (SERVER.NLM|AllocSleepOK+59)
--etc....


Additional Information:
The CPU encountered a problem executing code in LIBC.NLM. The problem may be in that module or in data passed to that module by a process owned by GWPOA.NLM.

.

Formerly known as TID# 10072645