Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. 64-Bit UE-V applications crash on exit when Citrix EdgeSight is installed

64-Bit UE-V applications crash on exit when Citrix EdgeSight is installed

Symptoms

In Microsoft User Experience Virtualization (UE-V) environments that also have the Citrix EdgeSight client agent installed, 64-bit applications may crash on exit.  An event similar to the following will be logged in the Application Event Log:

Log Name: Application
Source: Application Error
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Description:
Faulting application name: notepad.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc9b3
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000137940000
Faulting process id: 0x1cd4
Faulting application start time: 0x01cdfa53cea834b0
Faulting application path: C:\Windows\system32\notepad.exe
Faulting module path: unknown
Report Id: 0e8c3125-6647-11e2-9e05-005056be032c

↑ Back to the top

Cause

This is a known issue in UE-V version 1.  This is scheduled to be resolved in a future update.

↑ Back to the top

Resolution

As a workaround to this issue, it is possible to add an exclusion for the crashing application. To exclude an application, add the name of the executable to the following Registry value: 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rskcore
Name:          UviProcessExcludes
Type:            REG_SZ
Data:             <application1>.exe;<application2>.exe; 

Where <applicationx> is the name of the 64-bit executable.  For example:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rskcore
Name:          UviProcessExcludes
Type:            REG_SZ
Data:             notepad.exe;winword.exe

See http://blogs.technet.com/b/virtualworld/archive/2010/07/07/r6030-crt-not-initialized.aspx for more details.

↑ Back to the top

More Information

A crash dump will have a stack similar to the following.  The Microsoft_Uev_AppAgent!Uev::DllMainContext::ExitProcess_Detour+22d signature is diagnostic for this issue.

*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** WARNING: Unable to verify checksum for notepad.exe
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for csma_ldr.dll -
Debugger Dbgportaldb Connection::Open failed 80040e4d
Database Dbgportaldb not connected
FAULTING_IP:
+22d
00000001`37780000 ??              ???
EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0000000137780000
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000008
   Parameter[1]: 0000000137780000
Attempt to execute non-executable address 0000000137780000
PROCESS_NAME:  notepad.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1:  0000000000000008
EXCEPTION_PARAMETER2:  0000000137780000
WRITE_ADDRESS:  0000000137780000
FOLLOWUP_IP:
Microsoft_Uev_AppAgent!Uev::DllMainContext::ExitProcess_Detour+22d [c:\btvsts\4238\private\msbuild\product\unmanaged\appagent\dllmaincontext.cpp @ 919]
000007fe`f1b6599d 90              nop
FAILED_INSTRUCTION_ADDRESS:
+4
00000001`37780000 ??              ???
NTGLOBALFLAG:  0
APPLICATION_VERIFIER_FLAGS:  0
FAULTING_THREAD:  00000000000013b4
BUGCHECK_STR:  APPLICATION_FAULT_SOFTWARE_NX_FAULT_INVALID
PRIMARY_PROBLEM_CLASS:  SOFTWARE_NX_FAULT_INVALID
DEFAULT_BUCKET_ID:  SOFTWARE_NX_FAULT_INVALID
ADDITIONAL_DEBUG_TEXT:  http://bugcheck/default.asp?URL=/bugs/bincheck/4.asp
LAST_CONTROL_TRANSFER:  from 000007fef1b6599d to 0000000137780000
STACK_TEXT: 
00000000`001df068 000007fe`f1b6599d : 00000000`bf840180 00000000`00000000 00000000`00000000 20000000`00000000 : 0x1`37780000
00000000`001df070 000007fe`fde299e2 : 00000000`002e5588 00000000`002e5588 00000000`00000000 00000000`00000000 : Microsoft_Uev_AppAgent!Uev::DllMainContext::ExitProcess_Detour+0x22d [c:\btvsts\4238\private\msbuild\product\unmanaged\appagent\dllmaincontext.cpp @ 919]
00000000`001df230 00000000`ff851357 : 00000000`bf840120 00000000`00000000 00000000`00000000 00000000`002f37b2 : msvcrt!doexit+0xd3 [d:\win7sp1_gdr\minkernel\crts\crtw32\startup\crt0dat.c @ 805]
00000000`001df270 000007fe`f1b635f2 : 00000000`02888ea0 00000000`00000000 00000000`02888ec0 00000000`00000000 : notepad!__mainCRTStartup+0x1a5 [d:\winmain\minkernel\crts\crtw32\dllstuff\crtexe.c @ 708]
00000000`001df330 00000000`7754652d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : Microsoft_Uev_AppAgent!Uev::DllMainContext::ExeMainDetour+0xce2 [c:\btvsts\4238\private\msbuild\product\unmanaged\appagent\dllmaincontext.cpp @ 429]
00000000`001df980 00000000`7777c521 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd [d:\win7sp1_gdr\base\win32\client\thread.c @ 65]
00000000`001df9b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d [d:\win7sp1_gdr\minkernel\ntos\rtl\rtlexec.c @ 3185]

STACK_COMMAND:  ~0s; .ecxr ; kb
FAULTING_SOURCE_CODE: 
No source found for 'c:\btvsts\4238\private\msbuild\product\unmanaged\appagent\dllmaincontext.cpp'

SYMBOL_STACK_INDEX:  1
SYMBOL_NAME:  Microsoft_Uev_AppAgent!Uev::DllMainContext::ExitProcess_Detour+22d
FOLLOWUP_NAME:  wintriag
MODULE_NAME: Microsoft_Uev_AppAgent
IMAGE_NAME:  Microsoft.Uev.AppAgent.dll
DEBUG_FLR_IMAGE_TIMESTAMP:  5065f3a2
FAILURE_BUCKET_ID:  SOFTWARE_NX_FAULT_INVALID_c0000005_Microsoft.Uev.AppAgent.dll!Uev::DllMainContext::ExitProcess_Detour
BUCKET_ID:  X64_APPLICATION_FAULT_SOFTWARE_NX_FAULT_INVALID_BAD_IP_Microsoft_Uev_AppAgent!Uev::DllMainContext::ExitProcess_Detour+22d
WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/notepad_exe/6_1_7600_16385/4a5bc9b3/unknown/0_0_0_0/bbbbbbb4/c0000005/37780000.htm?Retriage=1
Followup: wintriag

↑ Back to the top

Keywords: kb, vkball, kbtshoot

↑ Back to the top

Article Info
Article ID : 2808222
Revision : 2
Created on : 3/27/2020
Published on : 3/27/2020
Exists online : False
Views : 66