Bad Resource Tag passed to LSLReturnRcvECB abend after applying SP7

  • 3754180
  • 31-Oct-2007
  • 26-Apr-2012

Environment

Novell BorderManager 3.8
Novell BorderManager 3.9
Novell NetWare 6.5 Support Pack 7

Situation

After apply Novell NetWare 6.5 support Pack 7, the BorderManager server abends with EIP in LSL.NLM at code start +000063DBh.

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.07

Server xx-xx halted Monday, 22 October 2007 19:51:07,679
Abend 1 on P00: Server-5.70.07-0: Bad Resource Tag passed to
LSLReturnRcvECB

Registers:
CS = 0008 DS = 0023 ES = 0023 FS = 0023 GS = 0023 SS = 0010
EAX = 86E2D60D EBX = 00000000 ECX = 00000011 EDX = 00000A01
ESI = 870704C4 EDI = 00000000 EBP = 870704C4 ESP = 925E49B8
EIP = 870393DB FLAGS = 00000046
870393DB 83C404 ADD ESP, 00000004
EIP in LSL.NLM at code start +000063DBh

The violation occurred while processing the following instruction:
870393DB 83C404 ADD ESP, 00000004
870393DE B882FFFFFF MOV EAX, FFFFFF82
870393E3 0BC0 OR EAX, EAX
870393E5 C3 RET
870393E6 0000 ADD [EAX], AL
870393E8 0000 ADD [EAX], AL
870393EA 0000 ADD [EAX], AL
870393EC 0000 ADD [EAX], AL
870393EE 0000 ADD [EAX], AL
LSL.NLM|LSLReturnRcvECBNoSave:
870393F0 8B46FC MOV EAX, [ESI-04]



Running process: Server 00:42 Process
Thread Owned by NLM: SERVER.NLM
Stack pointer: 925E4F40
OS Stack limit: 925DD000
Scheduling priority: 67371008
Wait state: 50500F0 Waiting for work
Stack: --86E2D60D ?
8B910D2D (TCP.NLM|UDPSendToAllIf+70C9)
--870704C4 ?
--00000282 (LOADER.NLM|KernelAddressSpace+282)
--8BD17328 ?
8B8F5398 (TCP.NLM|TCPAnyAddrCheck+2B18)
--925E4A4C ?
--7D9AF7B2 ?
--7D9A2912 ?
--8BD17328 ?
--925E4A4C ?
8B8F440B (TCP.NLM|TCPAnyAddrCheck+1B8B)
--8BD17328 ?
--925E4A4C ?
--7D9AF7B2 ?
--00000028 (LOADER.NLM|KernelAddressSpace+28)
--3FFFFFFF ?
--8BD17328 ?
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--925E4A4C ?
8B8F4030 (TCP.NLM|TCPAnyAddrCheck+17B0)
--8BD17328 ?
--925E4A4C ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--8BD17328 ?
--925E4A4C ?
8B8F3A38 (TCP.NLM|TCPAnyAddrCheck+11B8)
--8BD17328 ?
--925E4A4C ?
8B8FCD54 (TCP.NLM|TCPMPUnsafeConnectionLookup+5A8)
--87070522 ?
--8BD17328 ?
--8BD17328 ?
--925E4A4C ?
8B8F2CC1 (TCP.NLM|TCPAnyAddrCheck+441)
--8BD17328 ?
--925E4A4C ?
--870704C4 ?
--925E4A78 ?
--925E4A88 ?
--10C6DC9D ?
--7D9A2912 ?
--10C6E250 ?
--000005B4 (LOADER.NLM|KernelAddressSpace+5B4)
--00000014 (LOADER.NLM|KernelAddressSpace+14)
--CEA00010 ?
--0000FFFF (LOADER.NLM|KernelAddressSpace+FFFF)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--23070210 ?
--71D82FD5 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--50000210 ?
--2160AFC6 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00008051 (LOADER.NLM|KernelAddressSpace+8051)
--00000400 (LOADER.NLM|KernelAddressSpace+400)
--0000000A (LOADER.NLM|KernelAddressSpace+A)
--925E4ABC ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00008051 (LOADER.NLM|KernelAddressSpace+8051)
--00000010 (LOADER.NLM|KernelAddressSpace+10)
--90EBFFDC ?
--7FD378AC (ACPIPWR.NLM|__NLM_BSS_End+1FA8)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00001000 (LOADER.NLM|KernelAddressSpace+1000)
--0000000F (LOADER.NLM|KernelAddressSpace+F)
--00000006 (LOADER.NLM|KernelAddressSpace+6)
--90EBF900 ?
--00000007 (LOADER.NLM|KernelAddressSpace+7)
--000000D5 (LOADER.NLM|KernelAddressSpace+D5)
--90EC001C ?
8C4C09EA (NCPIP.NLM|ReplyKeepNoFragments+12A)
--90EBF90C ?
--FDFFFFFF ?
--00000011 (LOADER.NLM|KernelAddressSpace+11)
--90EBF99A ?
--925E4CF0 ?
--00000007 (LOADER.NLM|KernelAddressSpace+7)
--000000D5 (LOADER.NLM|KernelAddressSpace+D5)
--90EBF9C0 ?
8A20B3AE (NCP.NLM|Case23+C2)
--90EBF9C0 ?
--000000D5 (LOADER.NLM|KernelAddressSpace+D5)
-00441AD0 (SERVER.NLM|xxLogNeqPhysSlabCache+0)
--FC42D820 ?
--00001000 (LOADER.NLM|KernelAddressSpace+1000)
--8F068300 ?
--8EA354B0 ?
--8EA354B0 ?
--8EA35440 ?
0031ACB2 (SERVER.NLM|Alloc+FA)
--8EA35440 ?
--8EA354B0 ?
-00440F3C (SERVER.NLM|xAllocSizeTable+54)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--8F0E5400 ?

Resolution

Replace the tcpip stack with the one from the tcp681j.exe path to solve the abend.