PIA のチェックを実行しようとすると、PIA がクラッシュし、以下のエラーがイベントログ中に記載されます:
Faulting application name: ePIP.exe, version: 3.1.0.144, time stamp: 0x5bf2a91f
Faulting module name: ePIP.exe, version: 3.1.0.144, time stamp: 0x5bf2a91f
Exception code: 0xc0000409
Fault offset: 0x0017828c
Faulting process ID: 0x22a4
Faulting application start time: 0x01d4f17b3c32c140
Faulting application path: C:\Users\lsard-a\Desktop\ePOIP310_144R3\ePIP.exe
Faulting module path: C:\Users\lsard-a\Desktop\ePOIP310_144R3\ePIP.exe
Report ID: 8a6c0802-5d6e-11e9-8173-00215a9b5458
Faulting package full name:
Faulting package-relative application ID:
ePIPAPI.log はデータベース ディスク スペース をチェックしている際に、最新のアクティビティを記録します:
8868 2019-04-12 06:01:36 I Database in drive l with type ROWS current size 20763.00 MB space and extra required is 0.00.
8868 2019-04-12 06:01:36 I Database in drive n with type LOG current size 14336.00 MB space and extra required is 0.00.
プロセス ダンプを解析すると、
FAST_FAIL_INVALID_ARG の例外が確認できます.
CONTEXT: (.ecxr)
eax=00000001 ebx=00e6b518 ecx=00000005 edx=00000000 esi=00000000 edi=00e6b5a0
eip=0051828c esp=04d0f134 ebp=04d0f154 iopl=0 nv up ei pl nz na po nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
ePIP+0x17828c:
0051828c cd29 int 29h
Resetting default scope
FAULTING_IP:
ePIP+17828c
0051828c cd29 int 29h
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 0051828c (ePIP+0x0017828c)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 00000005
Subcode: 0x5 FAST_FAIL_INVALID_ARG
DEFAULT_BUCKET_ID: FAIL_FAST_INVALID_ARG
ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
PROBLEM_CLASSES:
ID: [0n282]
Type: [FAIL_FAST]
Class: Primary
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Add
Data: Omit
PID: [Unspecified]
TID: [Unspecified]
Frame: [0]
ID: [0n269]
Type: [INVALID_ARG]
Class: Addendum
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Add
Data: Omit
PID: [Unspecified]
TID: [Unspecified]
Frame: [0]
LAST_CONTROL_TRANSFER: from 0051825d to 0051828c
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
04d0f154 0051825d 00000000 00000000 00000000 ePIP+0x17828c
04d0f178 0051a949 00000004 00000000 04d0f670 ePIP+0x17825d
04d0f19c 003a3484 00000004 00000000 04d0f670 ePIP+0x17a949
04d0f1c0 003b2f76 04d0f670 00000020 00593ed4 ePIP+0x3484
04d0f1dc 003d7592 04d0f670 00593ed4 00e70a80 ePIP+0x12f76
04d0f80c 003ab936 00dd4b70 139b754c 003ab6a0 ePIP+0x37592
04d0f87c 759b7c04 000c0242 759b7be0 73af523b ePIP+0xb936
04d0f890 772cad8f 000c0242 7e53291d 00000000 kernel32!BaseThreadInitThunk+0x24
04d0f8d8 772cad5a ffffffff 772b00b3 00000000 ntdll!__RtlUserThreadStart+0x2f
04d0f8e8 00000000 003ab6a0 000c0242 00000000 ntdll!_RtlUserThreadStart+0x1b
FOLLOWUP_IP:
ePIP+17828c
0051828c cd29 int 29h
FAULT_INSTR_CODE: 6a5629cd
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: ePIP+17828c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ePIP
IMAGE_NAME: ePIP.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 5bf2a91f
STACK_COMMAND: ~8s ; .ecxr ; kb
BUCKET_ID: FAIL_FAST_INVALID_ARG_ePIP+17828c
FAILURE_EXCEPTION_CODE: c0000409
FAILURE_IMAGE_NAME: ePIP.exe