Microsoft KB Archive/240938

= Access Violation in Lsass.exe on Domain Controllers with FPNW Installed =

Article ID: 240938

Article Last Modified on 11/1/2006

-

APPLIES TO


 * Microsoft Windows NT Server 4.0 Standard Edition
 * Microsoft Windows NT 4.0 Service Pack 4
 * Microsoft Windows NT 4.0 Service Pack 5

-



This article was previously published under Q240938



SYMPTOMS
An "Access violation" error message may occur on a domain controller that has File and Print Services for NetWare (FPNW) installed. You may see a stack trace similar to the following sample trace in the Drwtsn32.log file after the error occurs: FramePtr RetAddr   Param1   Param2   Param3   Function Name 29f7f548 76dc1954  02774fd8 001843f0 00000000 FPNWCLNT!wcsupr+0x31 29f7f570 76dc1715  02763090 017980f0 29f7fc93 FPNWCLNT!MNSWorkstationValidate+0xb7 29f7f684 76dc1899  00000002 02763074 00000001 FPNWCLNT!Msv1_0SubAuthenticationRoutine2+0x564 29f7f6b4 75b88612  00000002 02763074 00000001 FPNWCLNT!Msv1_0SubAuthenticationRoutine+0x25 29f7f814 75b82584  00000002 02763074 00000001 MSV1_0!Msv1_0SubAuthenticationRoutine+0x1c7 29f7fbf8 75b82d6b  01796588 00000001 00000002 MSV1_0!MsvpSamValidate+0x250 29f7fc40 501816fd  01796588 00000001 00000002 MSV1_0!MsvSamValidate+0x55 29f7fc94 50181bf8  00000002 00000002 02763074 NETLOGON!NlpUserValidate+0x85 29f7fce0 50185209  02763010 02763038 02763050 NETLOGON!NetrLogonSamLogon+0x239 29f7fe20 77e111b7  29f7fef0 0179b438 29f7fef0 NETLOGON!logon_NetrLogonSamLogon+0x18d 29f7fe5c 77e112e6  5018507c 29f7fef0 29f7ff34 RPCRT4!DispatchToStubInC+0x34 29f7feb0 77e11215  29f7fef0 00000000 29f7ff34 RPCRT4!?DispatchToStubWorker@RPC_INTERFACE@@AAEJPAU_RPC_MESSAGE@@IPAJ@Z+0xb0 29f7fed0 77e1a3b1  29f7fef0 00000000 29f7ff34 RPCRT4!?DispatchToStub@RPC_INTERFACE@@QAEJPAU_RPC_MESSAGE@@IPAJ@Z+0x41 29f7ff40 77e181e4  02762fe8 00000190 29f7ff90 RPCRT4!?ReceiveOriginalCall@OSF_SCONNECTION@@QAEHPAUrpcconn_common@@I@Z+0x14b



CAUSE
This behavior occurs because the wcsupr function in the stack trace is expecting to pass a null-terminated string as an argument. The problem occurs if, for some reason, it is passed a string that is not null-terminated.



RESOLUTION
A supported fix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Apply it only to computers that are experiencing this specific problem.

To resolve this problem, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS

NOTE: In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English-version of this fix should have the following file attributes or later:   Date      Time                 Size    File name     Platform -  09/29/1999  08:53p              35,648 Fpnwclnt.dll  Intel 09/29/1999 08:52p              56,080 Fpnwclnt.dll  Alpha



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Keywords: kbhotfixserver kbqfe kbbug kbfix KB240938

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.