Revision as of 08:53, 21 July 2020

Knowledge Base

Snaservr.exe Access Violation In Snpugeti() or Snpuputi()

Article ID: 197903

Article Last Modified on 9/22/2005

APPLIES TO

Microsoft SNA Server 4.0
Microsoft SNA Server 3.0 Service Pack 2
Microsoft SNA Server 3.0 Service Pack 3
Microsoft SNA Server 3.0 Service Pack 4
Microsoft SNA Server 4.0 Service Pack 1
Microsoft SNA Server 4.0 Service Pack 2

This article was previously published under Q197903

SYMPTOMS

The SNA Server service (Snaservr.exe) may fail unexpectedly with an Access Violation error message in the snpugeti() function or in the snpuputi() function.

CAUSE

The Access Violation error message is caused when SNA Server receives an invalid RU from the mainframe. In this case, the invalid RU was sent by the mainframe to indicate an -RSP to an RU it had previously received for a particular LU-LU (Logical Unit) session. The RU indicated that it included Sense Data (SD) since the SD flag was set in its Response Header (RH). The RU was invalid since it did not contain the 4 bytes of sense data that is supposed to be included when the SD flag is set.

When the SNA Server service receives this data, it attempts to extract the sense data from the host response to include it in a Function Management Interface (FMI) Status Acknowledgement that has to be sent to the client emulator to inform the emulator of the detected error. The access violation occurs because the message is too short. It only has 9 bytes of data (6 bytes for the Transmission Header plus 3 bytes for the RH) when it should be 13 bytes in length. The SNA Server service then accesses data beyond the end of the actual message because the last 4 bytes of data are not there. It is the attempt to access memory beyond the end of the message that results in the access violation. The access violation causes the SNA Server service to terminate.

RESOLUTION

SNA Server 4.0

To resolve this problem, obtain the latest service pack for SNA Server version 4.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

215838 How to Obtain the Latest SNA Server Version 4.0 Service Pack

SNA Server 3.0

Contact Microsoft Product Support Services for the SNA Server version 3.0 post-SP4 fix.

For a complete list of Microsoft Product Support Services phone numbers and information on support costs, please go to the following address on the World Wide Web:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS

STATUS

Microsoft has confirmed that this is a problem in SNA Server versions 3.0 and 4.0. This problem was first corrected in SNA Server version 4.0 Service Pack 3.

MORE INFORMATION

The following is one of the invalid RUs that can cause the access violation described in this article as shown in a SNA Server Data Link Control message trace:

   ----------------------------------------------- 08:52:26.0440
   04160009->01021301 DLC DATA

DAF:52 OAF:01 ODAI:off Normal -RSP FMD SD BC EC DR1

   ---- Header  at address 01456E24, 1 elements ----
   00000000 00032C00 52010001 01006100     <......,.R.....a.>

   ---- Element at address 01955688, start 10, end 12 ----
   879000                                  <g..             >

This is an RU from the mainframe that indicates an -RSP message. The RH in this case indicates that this RU contains Sense Data as noted by the SD flag in the message above. An RU that contains sense data is supposed to include 4 bytes of data that specifies the actual sense code as defined by IBM's SNA protocol. The sense data is used to determine exactly what error condition was detected in the preceding SNA data flow.

In this case, this RU is invalid because it does not contain the 4 bytes of sense data. The only data contained in this RU is the TH (Transmission Header) that is included in the Header portion of the trace message shown above and the RH. In this case, the TH is 0x'2C0052010001' and the RH is 0x'879000'. A valid frame with sense data includes 4 additional bytes of data for the sense code after the RH.

Please refer to the IBM SNA Formats Guide (GA27-3136) for more details on the format of various SNA RUs.

Keywords: kbbug kbfix kbsna400sp3fix kbqfe kbhotfixserver KB197903

@@ Line 125: / Line 125: @@
 <pre class="fixed_text">   ---- Header  at address 01456E24, 1 elements ----
-    00000000 00032C00 52010001 01006100     &lt;......,.R.....a.&gt;
+    00000000 00032C00 52010001 01006100     <......,.R.....a.&gt;
                  </pre>
 <br />
@@ Line 131: / Line 131: @@
 <pre class="fixed_text">   ---- Element at address 01955688, start 10, end 12 ----
-                                  &lt;g..             &gt;
+                                  <g..             &gt;
                  </pre>
 <br />

Microsoft KB Archive/197903: Difference between revisions