首页
社区
课程
招聘
问答 CTF 排行榜 知识库 工具下载 峰会 看雪商城 证书查询
  1. 社区
  2. 软件逆向
    3. 发新帖
[讨论]QQ空间播放器崩溃探讨
发表于: 2010-6-2 22:24 5545

[讨论]QQ空间播放器崩溃探讨

woaisnow 活跃值
2010-6-2 22:24
5545
今天QQ空间听音乐的时候空间播放器突然崩溃，报错信息如下:
发生异常时间：2010年6月2日 21时53分34秒
操作系统版本：Microsoft Windows 7  [Build 6.1.7600]
QzoneMusic版本：QzoneMusic 3.4.408
QQ号码：286752576
R:1280*800
IE:8.0.7600.16385
DX:4.09.00.0904
Win:6.1.7600-2,
L:936,936,2052,2052,2052,2052,2052,2052
QMP:7.60.1249.527
P2P:5.0.324.107(sdlapi.dll:5.0.324.107)
-----------------------------------
异常类型： EXCEPTION_ACCESS_VIOLATION
异常地址： 0x008F30E6
异常码：0xC0000005
异常原因： 对 0x008F30E6 地址进行 Read 操作
堆栈信息：
-----------------------------------
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x71820000[1A4B] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: exit[2147307520,1245140,2000598005,2147307520]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x71820000[1A4B] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: exit[2147307520,1245140,2000598005,2147307520]
0x75AA0000[51194] Windows\system32\kernel32.dll: BaseThreadInitThunk[2147307520,2000544843,0,0]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x71820000[1A4B] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: exit[2147307520,1245140,2000598005,2147307520]
0x75AA0000[51194] Windows\system32\kernel32.dll: BaseThreadInitThunk[2147307520,2000544843,0,0]
0x77390000[5B3F5] Windows\SYSTEM32\ntdll.dll: RtlInitializeExceptionChain[4317298,2147307520,0,0]
0x008F0000[30E6] Program Files\Tencent\QQMusic\TNProxy.dll: DllRegisterServer[9371648,1,1,2987864]
0x77390000[5AF24] Windows\SYSTEM32\ntdll.dll: RtlQueryEnvironmentVariable_U[9661921,9371648,0,1]
0x77390000[63852] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,28643828,1,1244844]
0x77390000[637C5] Windows\SYSTEM32\ntdll.dll: RtlExitUserProcess[0,2011755440,-1,1244912]
0x75AA0000[52B04] Windows\system32\kernel32.dll: ExitProcess[0,1904351748,0,79146708]
0x71820000[1720] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: amsg_exit[0,0,0,4316858]
0x71820000[1A4B] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll: exit[2147307520,1245140,2000598005,2147307520]
0x75AA0000[51194] Windows\system32\kernel32.dll: BaseThreadInitThunk[2147307520,2000544843,0,0]
0x77390000[5B3F5] Windows\SYSTEM32\ntdll.dll: RtlInitializeExceptionChain[4317298,2147307520,0,0]
0x77390000[5B3C8] Windows\SYSTEM32\ntdll.dll: RtlInitializeExceptionChain[4317298,2147307520,0,2020893505]

下列文件将被包含在错误报告中：
C:\Users\ace.wei\AppData\Roaming\Tencent\QzoneMusic\286752576-2010602215332.dmp
“异常类型： EXCEPTION_ACCESS_VIOLATION
  异常地址： 0x008F30E6
  异常码：0xC0000005
  异常原因： 对 0x008F30E6 地址进行 Read 操作”
不知道大家对这个问题仔细思考过没，为什么“对 0x008F30E6 地址进行 Read 操作”就会崩溃，怎么避免程序读到这个地址？为什么崩溃了报错信息要列出堆栈信息，这有什么意义？
个人内力不够深厚，希望内力深厚人士来解惑，个人是那种问题非弄明明白白才罢休的那种人，希望各位前辈满足我的求知欲！

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！

收藏
免费 ・0
支持
分享
最新回复 (1)
daienming
雪    币： 211
活跃值： (326)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
2 楼
好像是在操作一个com的时候出现了非法的内存操作。
对 0x008F30E6 地址进行 Read 操作 这个东西只要你随便写个地址，去memcpy一下也会出现的，不能说明什么问题
2010-6-30 20:39
0
游客
登录 | 注册 方可回帖
回帖 表情 雪币赚取及消费
高级回复
返回
//