[讨论]QQ空间播放器崩溃探讨-软件逆向-看雪-安全社区|安全招聘|kanxue.com

[讨论]QQ空间播放器崩溃探讨

发表于: 2010-6-2 22:24 5547

[讨论]QQ空间播放器崩溃探讨

woaisnow

2010-6-2 22:24

5547

今天QQ空间听音乐的时候空间播放器突然崩溃，报错信息如下:
发生异常时间：2010年6月2日 21时53分34秒
操作系统版本：Microsoft Windows 7  [Build 6.1.7600]
QzoneMusic版本：QzoneMusic 3.4.408
QQ号码：286752576
R:1280*800
IE:8.0.7600.16385
DX:4.09.00.0904
Win:6.1.7600-2,
L:936,936,2052,2052,2052,2052,2052,2052
QMP:7.60.1249.527
P2P:5.0.324.107(sdlapi.dll:5.0.324.107)
-----------------------------------
异常类型： EXCEPTION_ACCESS_VIOLATION
异常地址： 0x008F30E6
异常码：0xC0000005
异常原因：对 0x008F30E6 地址进行 Read 操作
堆栈信息：
-----------------------------------
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x71820000[1A4B] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: exit[2147307520,1245140,2000598005,2147307520]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x71820000[1A4B] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: exit[2147307520,1245140,2000598005,2147307520]
0x75AA0000[51194] Windows\system32\kernel32.dll: BaseThreadInitThunk[2147307520,2000544843,0,0]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x71820000[1A4B] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: exit[2147307520,1245140,2000598005,2147307520]
0x75AA0000[51194] Windows\system32\kernel32.dll: BaseThreadInitThunk[2147307520,2000544843,0,0]
0x77390000[5B3F5] Windows\SYSTEM32\ntdll.dll: RtlInitializeExceptionChain[4317298,2147307520,0,0]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x71820000[1A4B] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: exit[2147307520,1245140,2000598005,2147307520]
0x75AA0000[51194] Windows\system32\kernel32.dll: BaseThreadInitThunk[2147307520,2000544843,0,0]
0x77390000[5B3F5] Windows\SYSTEM32\ntdll.dll: RtlInitializeExceptionChain[4317298,2147307520,0,0]
0x77390000[5B3C8] Windows\SYSTEM32\ntdll.dll: RtlInitializeExceptionChain[4317298,2147307520,0,2020893505]

下列文件将被包含在错误报告中：
C:\Users\ace.wei\AppData\Roaming\Tencent\QzoneMusic\286752576-2010602215332.dmp
“异常类型： EXCEPTION_ACCESS_VIOLATION
  异常地址： 0x008F30E6
  异常码：0xC0000005
  异常原因：对 0x008F30E6 地址进行 Read 操作”
不知道大家对这个问题仔细思考过没，为什么“对 0x008F30E6 地址进行 Read 操作”就会崩溃，怎么避免程序读到这个地址？为什么崩溃了报错信息要列出堆栈信息，这有什么意义？
个人内力不够深厚，希望内力深厚人士来解惑，个人是那种问题非弄明明白白才罢休的那种人，希望各位前辈满足我的求知欲！

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)

收藏・0

免费・0

支持

最新回复 (1)
daienming 雪币： 211 活跃值： (326) 能力值： ( LV2，RANK：10 ) 在线值：发帖 4 回帖 97 粉丝 0 关注私信	daienming 2 楼好像是在操作一个com的时候出现了非法的内存操作。对 0x008F30E6 地址进行 Read 操作这个东西只要你随便写个地址，去memcpy一下也会出现的，不能说明什么问题 2010-6-30 20:39 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

woaisnow

发帖

回帖

RANK

关注

私信

他的文章

关于我们

联系我们

企业服务

看雪公众号

最新回复 (1)
daienming 雪币： 211 活跃值： (326) 能力值： ( LV2，RANK：10 ) 在线值：发帖 4 回帖 97 粉丝 0 关注私信	daienming 2 楼好像是在操作一个com的时候出现了非法的内存操作。对 0x008F30E6 地址进行 Read 操作这个东西只要你随便写个地址，去memcpy一下也会出现的，不能说明什么问题 2010-6-30 20:39 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复