Symantec Developer Group

 View Only
  • 1.  Deadlock in IE caused by Endpoint Protection

    Posted May 18, 2016 02:32 AM

    hi,

    during using IE i found a deadlock that is caused by the Symantec AV software that we use. Can you advise how to report this issue to development?
    the DLL causing the problem is:
    C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.6318.6100.105\Data\Definitions\IPSDefs\20160223.011\IPSEng32.dll

    and the stacktraces causing the problem look like this:

    The first thread tries to access a critical section inside the symantec module while holding the loader lock (in ExitThread):
       ntdll.dll!_NtWaitForSingleObject@12?()   Unknown
        ntdll.dll!_RtlpWaitOnCriticalSection@8?()   Unknown
        ntdll.dll!_RtlEnterCriticalSection@4?()   Unknown
        IPSEng32.dll!6d8789f2()   Unknown
        [Frames below may be incorrect and/or missing, no symbols loaded for IPSEng32.dll]   
        IPSEng32.dll!6d878b13()   Unknown
        IPSEng32.dll!6d878bcc()   Unknown
        IPSEng32.dll!6d7ba3ec()   Unknown
        IPSEng32.dll!6d7b9ea9()   Unknown
        IPSEng32.dll!6d7a289d()   Unknown
        IPSEng32.dll!6d797a87()   Unknown
        IPSEng32.dll!6d75d98a()   Unknown
        IPSEng32.dll!6d7e10f5()   Unknown
        msctf.dll!76a51651()   Unknown
        ntdll.dll!_LdrpCallInitRoutine@16?()   Unknown
        ntdll.dll!_LdrShutdownThread@0?()   Unknown
        ntdll.dll!_RtlExitUserThread@4?()   Unknown

    the second thread tries to go the other way round; it holds the critical section internal to symantec and tries to get hold of the loader lock inside an OnClose call of a tab:
    >   ntdll.dll!_NtWaitForSingleObject@12?()   Unknown
        ntdll.dll!_RtlpWaitOnCriticalSection@8?()   Unknown
        ntdll.dll!_RtlEnterCriticalSection@4?()   Unknown
        ntdll.dll!_LdrLockLoaderLock@12?()   Unknown
        KernelBase.dll!_BasepGetModuleHandleExW@16?()   Unknown
        KernelBase.dll!_GetModuleHandleExW@12?()   Unknown
        ieframe.dll!CIEFrameAuto::get_HWND(long *)   Unknown
        IPSEng32.dll!6d7bb0f0()   Unknown
        [Frames below may be incorrect and/or missing, no symbols loaded for IPSEng32.dll]   
        IPSEng32.dll!6d7bae95()   Unknown
        IPSEng32.dll!6d7ba3b2()   Unknown
        IPSEng32.dll!6d7bce4a()   Unknown
        IPSEng32.dll!6d7bca7b()   Unknown
        ieframe.dll!EnumInvokeCallback(struct IUnknown *,long,bool,unsigned long *)   Unknown
        ieframe.dll!EnumConnectionPointSinks(struct IConnectionPoint *,struct _GUID const *,struct _GUID const *,long (*)(struct IUnknown *,long,bool,unsigned long *),long,struct IEventSinkTime *)   Unknown
        ieframe.dll!_IConnectionPoint_InvokeIndirect@12?()   Unknown
        ieframe.dll!_IConnectionPoint_SimpleInvoke@12?()   Unknown
        ieframe.dll!DoInvokeParamHelper(struct IUnknown *,struct IConnectionPoint *,int *,void * *,long,struct IEventSinkTime *,unsigned int,...)   Unknown
        ieframe.dll!_FireEvent_Quit@4?()   Unknown
        ieframe.dll!CShellBrowser2::OnClose(int,bool)   Unknown
        ieframe.dll!CTabWindow::_TabWindowThreadProc(void *)   Unknown



  • 2.  RE: Deadlock in IE caused by Endpoint Protection

    Posted May 18, 2016 07:39 AM

    Keep in mind that you're running a version that is 3 revisions behind. The latest is 12.1.6 MP4 so I would try with that version first. If it still exists then you need to get a support case open and submit logs for them to take a look at.